Privacy Policy
Last updated September 30, 2026
This Privacy Policy explains how DRP: Daily Route Planner ("DRP", "we", "us") collects, uses, and protects your information when you use our mobile app and website (together, the "Service"). We built DRP to do one job well, and we ask for only the data that job needs.
Information we collect
Account information
When you create an account we collect your email address, a password (stored only as a salted cryptographic hash, never in plain text), and optionally your name. If you sign in with Apple, Google, or Microsoft instead, we receive your name and email address (or, with Apple, a private relay address if you choose to hide your email) and a provider account identifier. This lets you sign in and keeps your settings tied to you.
Location
With your permission, DRP uses your device's location (only while you are using the app) to calculate accurate travel times and departure times from where you are. When you enable departure alerts, the starting point and destination coordinates of each upcoming trip are sent to and stored on our servers until that alert has fired, so the alert can be re-timed with live traffic shortly before it is due. We do not track your location in the background, and we do not sell your location or use it for advertising.
Calendar data
With your permission, DRP reads your calendar events (title, time, and location) so it can work out when you need to leave for each one, and can create or update events you add in the app. The events DRP works with (title, start and end time, location and its coordinates, notes, and your per-event settings) are stored on our servers so they sync across your devices and survive a reinstall. You control which calendars are connected and can disconnect them at any time.
Places you add
Addresses and places you enter or import, including your Home and Work addresses, are stored on our servers so DRP can plan routes to them. You can delete them at any time.
Departure alerts
To deliver alerts when the app is closed, we store a push notification token for each device you sign in on, along with the text of your upcoming alerts (the appointment's title and address and its leave-by time). Alerts are removed once they have fired.
Usage information
We collect limited technical and usage information to keep the Service working and improve it: app version and platform, the features you use with timestamps, and error diagnostics. A usage event may include the title and address of the appointment involved, and an error report may include a short technical stack trace. We do not use third-party analytics or advertising SDKs in the app.
How we use your information
- To calculate travel times, departure times, and optimized routes.
- To sync, create, and update your calendar events at your direction.
- To send departure alerts and notifications you have enabled.
- To operate, secure, and improve the Service.
- To respond to your support requests.
We do not sell your personal information, and we do not use your calendar, location, or place data for advertising.
Google user data
If you connect a Google account, DRP requests access to your Google Calendar so it can read your events and, at your direction, create or update them. DRP's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
We only use Google user data to provide and improve the route-planning and departure features you request. We do not transfer or sell it to third parties except as needed to provide the Service or as required by law, we do not use it for advertising, and no humans read your data except with your consent, for security, or where required by law.
Third-party services
To deliver the Service, we share the minimum necessary data with:
- Google Maps Platform (Directions, Geocoding, Places): to calculate routes and travel times, and to look up addresses you search. Requests are proxied through our server so your device does not expose an API key.
- Google Calendar and Microsoft Outlook / Exchange: to sync your events when you connect those accounts.
- Apple, Google, and Microsoft as sign-in providers, when you choose to sign in with one of them: we receive only your identity details (name, email address, account identifier).
- Open-Meteo: to retrieve weather that adjusts travel-time buffers. The request carries the coordinates of your location or of your appointment, and no account or personal identifier. Weather data by Open-Meteo.com.
- Resend: to send password-reset and other account emails to the address on your account.
- Expo push service and Apple Push Notification service: to deliver departure alerts to your device.
- Our hosting provider (Railway): to run the backend that stores your account and processes requests.
These providers process data under their own privacy policies and only to perform services for us.
Analytics
The app contains no third-party analytics or advertising SDKs, and we do not currently run analytics on this website. The usage information described above is collected by our own servers only.
Data retention
We keep your account information, appointments, places, and usage information for as long as your account is active. Pending departure alerts (and the trip coordinates stored with them) are removed once they have fired. When you delete your account, everything above is deleted from our systems at once, as described on our data deletion page.
Your choices and rights
- You can revoke location or calendar permissions at any time in your device settings.
- You can disconnect any connected calendar account from within DRP.
- You can request deletion of your account and associated data (see below).
- Depending on where you live, you may have rights to access, correct, or delete your personal information. Contact us to exercise them.
Deleting your data
You can delete your account and associated data at any time. See our Account and Data Deletion page for the steps.
Security
We protect your information with industry-standard measures, including encrypted connections, hashed passwords, and server-side handling of API keys. No method of transmission or storage is perfectly secure, but we work to safeguard your data.
Children's privacy
DRP is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
International users
We may process and store information in countries other than yours. By using the Service you consent to this transfer, subject to appropriate safeguards.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, an in-app or website notice.
Contact us
Questions about this policy or your data? Reach us at enable JavaScript to view.