Privacy Policy
Effective date: May 2026 · Application: FuelOracle (fueloracle.app) · Operator: Shane Lord
What we collect and why
Account information
When you create an account we collect your email address🔒 and display name to identify you and deliver account-related communications.
Profile photo
If you upload a profile photo it is displayed to users you share trips with. Upload is optional.
Home location
If you save a home address, the text address🔒 and its coordinates🔒 are stored against your account and used as a default start or end point when planning trips. This is entirely optional and can be removed at any time via Settings.
Location data
FuelOracle uses location in two ways:
- Stored trip data: waypoints, route coordinates, and fuel stop locations you add when planning a trip are stored against your account to provide the planning service.🔒
- Temporary device GPS (iOS app only): when you tap "Use my location" on the Fuel tab or the trip map, the iOS app requests foreground location permission to find nearby stations or centre the map. This data is used on-device only and is never transmitted to our servers or stored. The permission is shown explicitly before any location access occurs.
We do not collect background location. We do not track your movement over time.
Optional planning preferences
You may save optional preferences to personalise your planning experience. These are stored against your account and can be removed at any time via Settings. They are not shared with third parties.
Trip data
Trips you create - including waypoints, routes, fuel stops, dates and notes - are stored to provide the planning service. Not shared with third parties.
When you mark a fuel stop as completed, the actual price paid, litres filled, and odometer reading you enter are stored to track trip progress and calculate total costs.
Vehicle and garage data
Vehicles and caravans you add - including fuel economy, tank size, dimensions, and odometer readings - are stored to calculate fuel plans accurately. Not shared with third parties.
Subscription and billing
If you subscribe to FuelOracle Pro, your subscription status and tier are stored against your account. Subscription payments on iOS are processed by Apple - FuelOracle never receives your payment card details. We store a subscription reference identifier to verify your entitlement. Web subscriptions are processed by Stripe under the same principle.
Public share links
If you share a trip via a public link, view counts are tracked. Viewer IP addresses are never stored in identifiable form. Email addresses you enter to send share links are used once to deliver the email and are not stored.
Passkeys
If you register a passkey, only the public credential is stored. Your private key never leaves your device.
Login IP addresses
When you sign in, the IP address of the login attempt is recorded against your account for security purposes. Login records are retained for 7 days and then automatically purged. No IP address data is shared with third parties. IP-based threat detection is handled entirely on our own infrastructure.
Server logs
Standard web server logs may record IP addresses and request details for operational and security purposes. Logs are retained for 90 days.
Usage analytics (web only)
The FuelOracle web application (fueloracle.app) uses a self-hosted instance of Umami, an open-source, privacy-focused analytics tool, to understand how the web app is used and to guide product improvements. The iOS app does not include any analytics or crash-reporting SDK.
Umami collects (web app only):
- Page views and navigation paths within the web app
- Feature interactions (e.g. trip planning, fuel stop selection)
- Browser type, operating system, and device category
- Approximate country, derived from IP address at the time of the request - your IP address is not stored
Umami does not use cookies and does not collect any personally identifiable information. Analytics data is stored entirely on our own infrastructure and is never shared with or sold to third parties. It is used solely to improve FuelOracle as a product.
What we do NOT collect
- Payment card numbers or banking information - payments are processed by Apple (iOS) or Stripe (web) and we never have access to your card details
- Background or continuous device location - the iOS app only accesses location when you explicitly tap a button, and only in the foreground
- Advertising or marketing data
- Data from third-party advertising networks or tracking cookies
Data sharing
Your data is not sold, shared or disclosed to third parties except:
- Fuel price data is fetched from Australian state government APIs to provide pricing information.
- Route calculations are performed on our servers using a self-hosted OSRM (Open Source Routing Machine) instance. No routing data is sent to third-party services.
- Address search uses Geoapify (geoapify.com), a commercial geolocation service. Queries are sent from our servers to Geoapify's API - your search terms and coordinates may be processed by Geoapify. No personally identifiable information is included beyond the location text or coordinates you enter. Geoapify's privacy policy is available at geoapify.com/privacy-policy.
- Map tiles are served from our own infrastructure using tileserver-gl with OpenStreetMap data. No map tile requests are sent to third-party services. OpenStreetMap data is © OpenStreetMap contributors, available under the Open Database Licence (ODbL).
- Google Places API is used to enrich fuel station details (name, phone, hours). Requests are made from our servers.
- Subscription management on iOS uses RevenueCat (revenuecat.com). Your FuelOracle account identifier and Apple purchase receipts are shared with RevenueCat solely to verify and manage your subscription status. RevenueCat's privacy policy is available at revenuecat.com/privacy.
Data retention
Your account data is retained until you delete your account. On deletion, all your trips, vehicles, passkeys and profile data are permanently removed. Invite tokens you created that have been used are anonymised.
Your rights
You can:
- Export your trip data as PDF or GPX at any time
- Delete your account and all associated data via Settings → Danger Zone
- Update or remove your home location and profile photo at any time
- Revoke any active share links at any time
Security
- Passwords are hashed using a memory-hard algorithm resistant to brute force
- All connections use HTTPS/TLS
- Account lockout protects against repeated failed login attempts
Contact
For privacy enquiries contact: privacy@fueloracle.com.au
Changes
This policy may be updated from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.
🔒 Fields marked with a padlock are encrypted at rest. Encrypted data cannot be read without the server's encryption key, protecting your information in the event of unauthorised database access.