Privacy Policy

1. Who we are

Profit Wheels ("we", "our", "the app") is a ride-profit intelligence platform for ride-hailing drivers. We are operated by the Profit Wheels team and reachable at m.waseems@gmail.com.

2. What data we collect

• Account data: the email address you sign in with, and your name. Your mobile number and city are optional — the number becomes necessary only if you buy a plan on the website or join the creator programme, for the reasons given below.
• Ride data: fare amount, distance, platform, fuel cost, estimated net profit, time of day. GPS pickup/dropoff coordinates are optional and only stored if you grant location permission.
• Vehicle data: fuel type, mileage, commission percentages, and the fuel price you set together with when you last set it — all entered by you.
• Usage data: which features you use, ride decision history, streak activity. Used to improve the app.
• Profile photo: if you upload one on the website, stored in our secure cloud storage. The Android app has no photo upload and never asks for the camera or your gallery.
• Voice input: the floating calculator has a mic button so you can speak a fare instead of typing while driving. The microphone is only on while you hold that button. Your speech is turned into text by Android’s own speech recognition, which we ask to run on your phone rather than in the cloud. We do not upload or store the audio, and we do not upload the text either. Phrases the app fails to understand are kept in a capped diagnostic file on your own phone — no account, no number, no location — and never sent anywhere.
• Emergency contacts: if you set up the SOS button, the names and mobile numbers you type for the people to alert. We store them so the button can work, and we use them for nothing else — no messages, no marketing, no contact of our own. We never read your phone’s contact list; the app does not ask for that permission. When you press SOS, your own WhatsApp sends the alert, which is also why we never hold the message.
• Payment and activation data: when you buy a plan on this website we store the name and mobile number you give us, the payment method and its transaction reference, the amount, and the activation code issued. We keep these for two specific reasons and no others: to match your payment to your account when you tell us a code has not arrived, and to apply the one-refund-per-account and one-per-phone-number rules in the Terms. The refund rule is the reason the number is kept rather than discarded after activation.
• Creator program data: if you join, the WhatsApp number you verify, the clips you send and the reviewer's decision on each. Clips are reviewed by a person. You can ask us to stop using a clip at any time, and we delete the clip when you do.
• Google Play purchases: bought inside the Android app, the payment itself is handled by Google. We receive confirmation that a purchase happened and which plan it was for. We never see your card.

3. How we use your data

• To calculate your ride profit and give you an accept / negotiate / reject recommendation, measured against the minimums you set yourself.
• To build the city heat map — using ride start points grouped into areas and time slots, never your individual rides.
• To power features: streak rewards, referral system, heatmap, shift planner.
• We send you no notifications and no marketing. The app has no push messaging, and we hold no device token to send one with. The only notification it shows is the ongoing one that keeps the floating calculator alive while it is on screen, which Android requires and which you dismiss by turning the calculator off.

Your individual ride records are not shared with ride-hailing platforms. Where we publish or share driving data — for example the area averages on the heat map — an area only appears once at least 5 different drivers have driven it in that hour, so no figure can be traced back to one person. If that ever changes, this page changes with it.

4. Data storage and security

All data is stored in Supabase (PostgreSQL), hosted on cloud infrastructure with encryption at rest and in transit (TLS 1.2+). Row-level security policies ensure you can only access your own data.

You sign in with an email address and a password, or with Google or Facebook if you prefer. Passwords are handled entirely by Supabase Auth, which stores them only as a one-way hash — we never see your password, and neither we nor anyone with access to the database can read it back. If you sign in with Google or Facebook, we receive your email address and name from them and no password exists on our side at all.

5. Data retention

We keep your data for as long as your account exists. Your ride history is not thinned out or expired — it is the record the app is for, and the oldest ride is as available to you as yesterday’s. When you delete your account it goes with it, as described next.

If you delete your account, your profile, sign-in, rides, vehicles, expenses, streaks and shared ride cards are removed immediately. Two things are kept, and this is the whole list:

• Payment and refund records, with your name and account detached from them. They are financial records of money that changed hands.
• A one-way code made from your mobile number — not the number itself, and we cannot read the number back from it. It exists so that the one-refund-per-person rule and the creator program's strike record cannot be reset by deleting an account and signing up again. It holds nothing else: no name, no email, no account id.

Both are kept for fraud prevention, which is why they survive a deletion request. One more thing is worth being exact about: we take encrypted backups of the whole database, and a backup made before you deleted your account still contains it until that backup expires. They are kept for 30 days and then destroyed, so the longest anything survives a deletion is 30 days, in an encrypted copy nobody reads in the normal course of running the service.

6. Your rights

• Access: Request a copy of your data at any time.
• Correction: Update your profile data in Settings.
• Deletion: Delete your account yourself at Delete account, or email us at m.waseems@gmail.com and we will do it for you.
• Portability: Export your ride history from the Ride History page (CSV).
• Withdraw consent: Stop using the app and delete your account at Delete account. Uninstalling on its own removes the app from your phone but leaves your account with us, so the deletion is the step that matters.

7. Third-party services

• Supabase: database and sign-in. Everything you store with us is stored here, processed under their privacy policy.
• Google Maps (Android app): the map on the heat map screen is drawn by Google’s Maps SDK, with our own tiles layered on top. Google receives the requests any map makes — roughly which part of the world is on screen — under Google’s own terms. We send Google no account data, and none of your rides.
• OpenStreetMap / CARTO: the map tiles themselves. No personal data is sent.
• OpenWeatherMap: turns a ride’s start coordinates into an area name, and provides the weather behind surge hints. It receives coordinates and nothing that identifies you.
• Expo (EAS): delivers app updates. Checking for an update is an ordinary web request; it carries no account data.
• Google Play Billing: if you subscribe inside the Android app, Google takes the payment. We receive a confirmation and the plan — never your card.
• Vercel: hosts this website, and provides its page-speed and visit counts. No cookies are set for it and it does not follow you to other sites.
• Sentry: reports website errors to us so they can be fixed. An error report can include the page you were on and your IP address. This runs on the website only — the Android app ships no crash reporter.

That is the complete list. We run no advertising, no advertising identifier is read from your device, and no third party on this list pays us for anything.

8. Children

Profit Wheels is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to this policy

We may update this policy, and this page is the notice — the date at the top changes with the text, so you can always tell. We cannot message you about it: the app sends no notifications, as §3 says. Continued use after a change means you accept it, so the date is worth a look if something about the app has visibly changed.

10. Contact

For privacy questions or data deletion requests: m.waseems@gmail.com