Legal
Privacy Policy
This Privacy Policy explains how Shiftly (“Shiftly,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Shiftly mobile application and related services (the “Service”). Shiftly is a mileage- and tax-tracking app for Rivian vehicle owners. By creating an account and using the Service, you agree to the practices described here.
1. Summary
- We collect your account email, the Rivian vehicle data needed to measure your mileage (including precise location), your business/personal trip classifications, and basic device information.
- We use this information solely to detect your drives, calculate mileage, generate tax reports, send you notifications you’ve enabled, and operate the Service.
- We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
- You can turn off data collection at any time and permanently delete your account and associated data from within the app or by emailing us.
2. Information we collect
Account information
When you create an account we collect your email address and authentication credentials, which are managed through Firebase Authentication (a Google service). We require email verification to activate your account.
Vehicle telemetry
To measure your mileage, Shiftly collects telemetry from your connected Rivian vehicle, including:
- Precise GPS location (latitude and longitude) of the vehicle
- Odometer readings
- Gear status (park, drive, reverse, neutral) and power state
- Vehicle identifiers such as VIN, make, model, and model year
While data collection is enabled, these values are recorded together as frequent, time-stamped readings — your location, odometer, gear, and power state are logged side by side as you drive — so we can reconstruct each trip’s route and distance. We also store the odometer reading at the start and end of every drive to calculate its mileage.
This data is obtained from Rivian’s systems using credentials you provide when you link your Rivian account (see “Your Rivian account” below). It is collected in the background while data collection is enabled, even when the app is closed.
Trip classifications
The Business or Personal label you assign to each drive, which determines what counts toward your mileage deduction.
Device & technical information
A device push-notification token, which we register after you sign in so we can send you notifications. This token may be generated and stored even if you have not granted notification permission; in that case it simply isn’t used to deliver messages until you enable notifications. We also collect standard technical data such as app version and diagnostic information used to keep the Service secure and reliable, and we use Firebase App Check to verify that requests come from a genuine, untampered installation of the app.
3. How we use your information
- Detect shifts and drives and calculate accurate mileage from your vehicle’s odometer
- Separate business miles from personal miles based on your classifications
- Generate weekly and monthly mileage summaries, and an annual report formatted for IRS mileage-deduction requirements
- Authenticate you and keep your account secure
- Send notifications you have enabled (such as shift reminders)
- Protect the Service against fraud, abuse, and tampering
- Diagnose problems and improve the Service
We process this information to provide the Service you requested, to comply with our legal obligations, and based on our legitimate interest in operating and securing the app.
4. Location data
Shiftly relies on precise location data from your Rivian vehicle to determine when and how far you drive. Location is sourced from the vehicle’s own GPS via Rivian’s API — Shiftly does not use your phone’s GPS or collect location from your mobile device while you drive.
Vehicle location is used only to detect drives, group them into shifts, and reconstruct trip distance. You can stop this collection at any time by turning off data collection in the app, which suspends telemetry collection for your vehicle.
5. Your Rivian account
To collect vehicle data on your behalf, Shiftly authenticates with Rivian. When you link your Rivian account, authentication happens directly between the app and Rivian; we store the resulting Rivian session tokens (encrypted) so we can request your vehicle’s telemetry.
We do not store your Rivian password. Shiftly is an independent application and is not affiliated with, endorsed by, or sponsored by Rivian Automotive, Inc. “Rivian” is a trademark of its respective owner. Your use of Rivian’s services remains subject to Rivian’s own terms and privacy policy.
7. Third-party services
We rely on the following third-party services to operate Shiftly:
- Rivian — source of your vehicle telemetry.
- Google Firebase — Authentication (account sign-in), Cloud Messaging (push notifications), and App Check (app integrity).
- Apple App Store / Google Play — app distribution.
Each provider processes data under its own privacy policy. We share with them only what is necessary to provide their part of the Service.
8. Tracking & advertising
Shiftly does not display third-party advertising, and we do not track you across apps or websites owned by other companies for advertising purposes. We do not use your data for any advertising or marketing profiling, and we do not share it with data brokers.
9. Data retention
We retain your account information and vehicle data for as long as your account is active and the data is needed to provide the Service — for example, to keep your historical mileage records available for tax reporting. When you delete your account, we delete or anonymize your personal data and vehicle telemetry as described below.
We may retain a limited record that you accepted our terms and consents (keyed to your email) after account deletion where necessary to comply with our legal obligations and to demonstrate consent. We may also retain de-identified or aggregated data that can no longer be used to identify you.
10. Your rights & data deletion
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your personal information
- Withdraw consent or object to certain processing
- Request a copy of your data in a portable format
Deleting your account: You can permanently delete your account and its associated data at any time from within the app’s settings. You may also email us at support.rideshiftly@gmail.com and we will process your deletion request. Deleting your account removes your vehicle telemetry, drives, shifts, reports, and stored Rivian session tokens.
You can also turn off data collection at any time without deleting your account, which stops Shiftly from collecting new telemetry from your vehicle.
11. Security
We protect your information using industry-standard safeguards. All data is transmitted over encrypted HTTPS connections, and sensitive credentials such as your Rivian session tokens are encrypted at rest. While no method of transmission or storage is completely secure, we work to protect your information and limit access to it.
12. Children’s privacy
Shiftly is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.
14. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Email: support.rideshiftly@gmail.com
Website: www.rideshiftly.com