Santana-Co is testing Travel Log with a small group of users. This notice explains what information the app handles, why it is needed, and the choices available to you.
Information we collect
When you create an account, we collect your name, email address, account authentication details, appearance and travel-recording preferences, and your acceptance of this notice. We do not receive or store your password in readable form.
When you use Travel Log, we store the information you choose to enter, including trip dates, addresses and saved locations, stops, distance, round-trip status, purpose, client or project, vehicle description and registration, odometer readings, representative logbook periods, annual odometer records and changed-circumstances indicators, reimbursement or record-keeping method, rate, and notes.
How we use it
We use this information to authenticate you, keep trips associated with your account, calculate routes, organise odometer and logbook records, prepare reimbursement and ATO-style estimates, display totals, let you edit and export records, maintain security, troubleshoot the pilot, and respond to support or privacy requests. Estimates are record-keeping aids and are not tax advice or a determination that an amount is deductible. Santana-Co does not sell your personal information or use it for advertising.
Routing and service providers
Travel Log uses service providers to operate the app:
- Supabase provides account authentication and the database that stores profiles and trips.
- Cloudflare hosts the protected routing service. The service receives route addresses only when you choose to calculate a distance.
- HeiGIT/OpenRouteService geocodes addresses and calculates driving routes.
- GitHub Pages hosts the public app files. Trip records are not stored in the GitHub repository.
- Google Maps receives route addresses only if you choose the Route link.
Some providers may process information outside Australia or through global infrastructure. Their own privacy and security terms also apply to their processing.
Who can see your information
Your signed-in account is restricted to its own profile and trips through database access rules. Santana-Co administrators may access information only when reasonably needed for support, security, legal compliance, or operation of the pilot. We may also disclose information where required by law or to protect users and the service.
Security
We use reasonable technical and organisational safeguards, including encrypted connections, individual accounts, strong password rules, multi-factor authentication for administrator services, database row-level access controls, protected API secrets, restricted routing requests, and dependency and access reviews. No online service can guarantee absolute security.
Do not place health information, financial account details, identity-document numbers, passwords, or highly confidential material in trip notes during this pilot.
Retention and deletion
We keep account, trip, vehicle, odometer, and logbook information while your account remains active or while reasonably needed to operate the pilot and meet legal obligations. You can permanently delete your account and active records from Account and privacy in the app. Limited residual copies may remain temporarily in provider backups or security logs under provider retention schedules and are not used for ordinary business purposes.
Your choices
You can view and correct trips in the app, export a CSV report, download a JSON copy of your account data, or delete your account. You may also contact us to request access, correction, deletion, or help with a privacy concern. We may need to verify your identity before completing a request.
Changes and pilot status
Travel Log is a pilot and its features or providers may change. If a material change affects how we handle information, we will update this notice and ask signed-in users to review the new version.
Contact
For privacy, security, access, correction, or deletion requests, email jfsantana0691@gmail.com. Please do not include passwords, API keys, or sensitive trip details in your first email.