This Privacy Policy explains what data GigStacker collects, how it's collected and used, who it's shared with, how long it's kept, and how you can control or delete it.
What we collect
- Account info: name and email address, plus either a securely hashed password or the account identifier supplied by Google or Apple when you choose social sign-in.
- Location (precise): collected in two situations, both of which you turn on yourself.
- Trips you start: when you tap Start tracking, GPS coordinates are recorded until you stop the trip, including while the app is in the background or your screen is locked.
- Automatic trip detection: if you turn this on in the Miles tab and allow "Always" location access, GigStacker uses location in the background, including when the app is closed, to notice when you start driving. Movement is checked on your device. When a drive is detected, it's recorded as a trip until it ends and saved for you to confirm as business or personal. You can turn automatic trip detection off at any time in the Miles tab, or remove location access in iOS Settings.
Location is not collected when you haven't started a trip and automatic trip detection is off.
- Trips: the saved route, start and end labels, distance, time, and whether you marked it business or personal.
- Photos and screenshots you choose: receipt photos you scan for expenses, earnings screenshots you select for import, and delivery screenshots you select to autofill a tip report. We only access the images you pick.
- Financial data you enter: earnings, expenses, mileage, tax profile, and tax set-aside amounts you record. Recording a set-aside does not move money.
- Tip reports (Tip Intel): the delivery address, platform, tip outcome and amount, and delivery date and time. Addresses are matched to a building; any unit or apartment number you enter is stored with your report but never published.
- Private delivery notes: notes you add to a tip report, such as gate codes. These are stored with your account for you alone.
- Push notification token: if you turn on reminders, a device token used to deliver them.
- Diagnostics: crash reports and app performance data (for example, device model, OS version, and error details), collected through Sentry to find and fix problems. Diagnostics are not linked to your name or email and are not used for tracking or advertising.
How we use it
Your data is used to run the app's features for you: tracking mileage and calculating deductions, estimating taxes, reading receipts and screenshots you ask us to read, reminding you of deadlines, syncing your data across devices, keeping the service secure, and fixing problems. We do not sell your data, use it for advertising, or track you across other companies' apps or websites.
What other drivers can see
Tip reports you share are published only as anonymous statistics for a building or complex. The share of trips that included a tip appears after at least 2 confirmed trips from 2 different drivers in the last 90 days, with no driver contributing more than 50% of the published sample. The average tip per trip requires at least 2 confirmed trips with known amounts from 2 different drivers, with no driver contributing more than 50% of that sample. Confirmed no-tip trips count as zero; unshared amounts are excluded from the average. Median positive-tip summaries require at least 10 positive amounts from 5 different drivers, with no driver contributing more than 20% of that sample. Each trip type and platform must meet these rules separately. Your name, email, unit numbers, and private notes are never shown to other users. Reports saved privately (for example, when an address can't be verified) are kept only for you. You can delete any of your reports from My Reports at any time.
AI processing of images you choose
When you ask GigStacker to read a receipt, an earnings screenshot, or a delivery screenshot, the image is sent to OpenAI or Google's AI image-processing service, depending on the configured reader. The app asks for your permission before it sends any image. Switching from Google-only consent to OpenAI requires the updated AI permission notice; older clients must update or use manual entry. You can turn AI reading off at any time in the account menu under Privacy & support; you can still enter everything by hand.
GigStacker does not store earnings or delivery images after extraction. A receipt photo you save with an expense remains with your records (see below). Provider use and retention depend on the applicable OpenAI API data controls or Google processing terms and account configuration. We disable OpenAI response storage; that does not guarantee zero retention or immediate deletion. Google's paid-service terms restrict model improvement use but permit limited safety retention; unpaid-service terms can allow product improvement and human review.
Where it's stored
Your data is stored in a Postgres database that only the app's backend can access, and a copy of your records is kept on your device so the app works offline. If changes on two devices conflict, the app saves both versions on the device where you resolve the conflict; these protective copies are not part of routine settings, and signing out or deleting the account removes them from that device. Receipt photos you save with an expense are stored on your device and, when cloud backup is on, in encrypted cloud object storage.
Address suggestions
When address suggestions are enabled, the street or place you type is sent to Google Maps to suggest complete addresses. If you choose nearby suggestions, or have already permitted location and a recent fix is available, an approximate location is used to prioritize results. This does not start mileage tracking or require background location. Private unit details are removed before provider requests. Suggestion results are not stored as search history. You can enter an address manually without location permission. Google Maps processes requests under its service terms.
Who we share data with
We share data with service providers that help us run GigStacker: hosting, database, and cloud photo storage (Vercel and our database provider), email delivery, AI image reading (Google, only with your permission), crash reporting (Sentry), push notifications (Expo and Apple), and sign-in (Google and Apple, if you choose them). Their processing and retention are governed by the applicable service terms and configuration, including the AI processing terms described above. We may also disclose data if required by law.
If you choose Continue with Google or Continue with Apple, that provider authenticates you and sends GigStacker a verified account identifier, email address, and any name details you approve. GigStacker never receives your Google or Apple password.
How long we keep it
- Account, earnings, expenses, trips, tax data, tip reports, and private notes are kept until you delete them or delete your account.
- Images sent for AI reading are not stored by us after they're read.
- Diagnostics are kept only for Sentry's standard retention period and then deleted.
- Backups containing deleted data age out on our providers' normal backup rotation, and records we're legally required to keep are kept only as long as that requirement applies.
Your choices and how to withdraw consent
- Location: stop a trip, turn off automatic trip detection in the Miles tab, or change location access in iOS Settings.
- AI image reading: turn it off in the account menu under Privacy & support.
- Notifications: turn off reminders in the app or in iOS Settings.
- Tip reports: delete them from My Reports.
- Delete your account: delete it from the account menu. This removes your account and associated app database records, including tip reports (which then stop counting toward statistics) and private notes. We also remove cloud receipt photos; if storage is temporarily unavailable, a minimal cleanup job is retained and retried. The app tells you when cleanup is queued. We attempt to revoke Apple sign-in access when applicable and tell you if that could not be confirmed. Contact support if you need follow-up. Backups and legally required records follow the retention rules above. You can also request deletion without the app at gigstacker.co/delete-account.
Children
GigStacker is for adults 18 and over and is not directed to children.
Changes to this policy
When this policy changes, we'll update the effective date above.
Contact
Questions? Email support@gigstacker.co.
