Privacy Policy
Last updated September 28, 2026
Commute Tracker is built to keep your commute history private. This policy explains what we collect, why, who can see it, and the choices you have. We handle personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
- Account details: your name and email address, used to sign you in and to show your name to your family group.
- Ride records: the plate numbers you enter and the date and time each ride was recorded.
- Location (optional): if you allow location access in your browser, your position (and how accurate it is) at the moment you submit a ride. We don't track your location at any other time. If you block location, rides are saved without it.
- Family group details: the groups you create or join, their members, whether you share your rides, and the email addresses of people you invite.
- Technical data: sign-in session cookies needed to keep you signed in.
We do not track your location in the background, and we do not collect your contacts or photos of drivers. We do not use advertising or tracking cookies.
How we use it
- to save your rides, and where you boarded if you allowed location, and show you your history;
- to tell you when you've ridden with the same plate before, using only your own history;
- to show your rides to the members of your family group;
- to send family invite emails you ask us to send.
We do not sell your data or use it for advertising.
Who can see your rides
- You can always see your own rides.
- Members of your family group can see your rides, including any saved location, while you are in the group. To stop sharing, leave the group from the Family page.
- To stop adding location to new rides, turn off the Location switch when you track a ride, or block location for this site in your browser settings.
- Your plate history is never shown to other users, and plate matching never reveals anyone else's rides. Nothing is ever public.
Service providers
We use a small number of providers to run the app, who process data only on our behalf:
- Supabase: database, sign-in and real-time updates.
- Cloudflare: hosting and delivery of the app.
- Resend: sending invite and account emails.
These providers may store data on servers outside the Philippines.
How long we keep it
We keep your account and rides until you delete them or ask us to delete your account. Rides you delete are removed right away. Unused invites expire after 7 days.
Your rights
Under the Data Privacy Act, you have the right to be informed, to access your data, to correct it, to object to its processing, to have it erased or blocked, to data portability, and to file a complaint with the National Privacy Commission. To exercise any of these rights, or to delete your account, email us at info.commutetracker@gmail.com.
Security
Access to your data is enforced in the database itself, so only you and the family group you share with can read your rides. Data is sent over encrypted connections. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we make significant changes, we'll let you know in the app or by email before they take effect.
Contact
Questions about your privacy? Email us at info.commutetracker@gmail.com.