Privacy Policy

DashLedger is a recordkeeping app from Sloth Bloom for delivery and gig workers. This policy explains the information used by the app and your choices.

Information you provide

• Account and profile: email address, sign-in identifiers, name, username, business preferences, selected delivery platforms, vehicle details and tax preferences.
• Work and financial records: orders, shifts, pickup and delivery confirmations, route segments, mileage, timestamps, earnings, pending tips, expenses, reimbursements, notes, imported statements and tax-preparation records.
• Receipts and documents: photos or files you choose to attach or scan, extracted text, and fields you review and save. Receipts and location names can contain information about other people; include only what you need for your records.

Precise location and background tracking

When you use delivery tracking and grant location permission, DashLedger records precise GPS locations to pin pickups and drop-offs and calculate trip distance and time. In the native Android workflow, recording starts at the first pinned pickup and continues through the final delivery, including while the app is minimized or the screen is locked. The shift can remain open while delivery tracking waits between trips. An ongoing notification shows tracking or waiting status. You can end work in the app and change permissions in Android settings. Location collection supports your work records, not advertising.

Device storage, backups and scans

The native Android app saves work records and receipt copies on your device for your account. Signing in on another device does not automatically transfer that ledger. If you request a cloud backup, the snapshot includes the records, location pins, receipts and correction history described by the backup screen. Restoring a snapshot copies those records to the destination device.

Native receipt and statement text recognition uses Google's on-device ML Kit. The native scan itself does not upload the selected document for cloud OCR. Saving a receipt and later including it in a cloud backup does upload that receipt as part of the backup. Camera and file access are used when you choose to capture or select a document.

How information is used

We use information to authenticate accounts, provide requested tracking and recordkeeping features, calculate summaries, manage backups and restores, check subscription or tester access, support account recovery, and respond to support or deletion requests. Exports and diagnostic reports are shared only through the destinations you choose in the app. The native diagnostic report contains app and Android versions and permission states; it does not include your financial records or location history.

Service providers and older app versions

• Google Firebase: account authentication, profile and service data, requested cloud backups, server functions and account-access checks.
• Google sign-in: sign-in credentials and basic identity information when you choose Google authentication.
• RevenueCat and Google Play: app account identifiers, purchase/subscription information and service-related device or technical information needed to process purchases, verify access and restore subscriptions. Payment details are handled by the payment provider.
• Older DashLedger versions: earlier releases used Supabase for account, database, storage and server services, and Google Cloud Vision for user-requested receipt or statement recognition. Those versions may transmit selected documents for cloud processing and synchronize records differently from the native Android app.
• This policy website: GitHub Pages hosts this page and may process standard connection information, such as IP addresses, under GitHub's privacy practices.

These providers process information to operate their services. DashLedger does not sell your personal information. Information may also be disclosed when required by law or necessary to address fraud, security incidents or legal claims.

Security and retention

App connections to hosted services use encrypted transport. Native local records are kept in app-private storage; device security and access controls help protect them. No storage or transmission method is completely secure.

Local records remain until removed through supported app controls or the app's data is erased. Requested cloud snapshots remain until deleted or removed with the account. We retain account and service data to provide the service and handle deletion requests, with any legally required or security-related retention limited to those purposes. A minimal completion record may remain to let an interrupted deletion request be retried safely. Exports, copies on other devices, and records retained by payment providers are separate from the copy managed by this app.

Your choices and account deletion

You choose whether to grant permissions, begin tracking, scan documents, create backups or share exports. You can change permissions in Android settings. For access, correction or deletion requests, contact support@slothbloom.com. We may ask you to verify ownership before acting on account data.

Where available in your installed version, account deletion is in Account → Sign-in and security. Finish or cancel any active trip and end your shift first. If the control is unavailable or reports that the server is not enabled, use the email request route on our account deletion page. Deleting an account does not cancel a Google Play subscription; manage that subscription in Google Play.

Age and changes

DashLedger is intended for users aged 18 and over. We update this policy when the app's practices change and show the revision date on this page.

Contact

Sloth Bloom — DashLedger
Privacy and support: support@slothbloom.com