Privacy Policy

Effective date: August 13, 2026

Your Legal Company Name ("we," "us," or "our") operates Qevra, including the Qevra mobile applications, administrative portal, and related website and services (collectively, the "Service"). This Privacy Policy explains the information we collect, how we use and share it, how long we retain it, and the choices available to users.

1. Information We Collect

We collect information that is necessary to provide mileage tracking, expense management, receipt retention, reporting, account administration, security, support, and related business features.

Account and business information

• Name, email address, organization or business name, role, and account identifiers.
• Authentication information and account settings.
• Information provided by a business administrator when inviting or managing team members.

Location and trip information

• Precise device location, including GPS-derived location points, when you enable location-based mileage tracking.
• Trip start and end times, origins and destinations, routes, distances, trip classifications, business purposes, and related notes.
• When automatic mileage tracking is enabled and you grant the required permission, location may be collected while the app is not open or actively in use so that the Service can detect and record trips.

Mileage and vehicle information

• Mileage records, odometer entries, vehicle names or descriptions, and other information you choose to enter about vehicles used for business travel.

Expense and receipt information

• Expense amount, date, merchant, category, business purpose, notes, reimbursement status, and related accounting information.
• Receipt images, photographs, attachments, and information extracted from receipts when receipt-scanning or OCR features are used.

Device, usage, and diagnostic information

• App version, operating system, device type, IP address, timestamps, security logs, and similar technical information needed to operate and secure the Service.
• Crash, error, performance, and feature-usage information if enabled in the production version of the Service.

Subscription and transaction information

We may receive subscription status, purchase identifiers, and transaction confirmations from Apple, Google, or other payment providers. Payment card details are handled by the applicable payment provider unless we expressly tell you otherwise.

Support communications

We collect information you provide when you contact us for support, submit feedback, report a problem, or communicate with us.

2. How We Collect Information

We collect information directly from you when you create or use an account, from your device when you enable app permissions or automatic mileage tracking, from your employer or business administrator when the organization manages your account, and from service providers that help operate the Service.

3. How We Use Information

We use information to:

• Provide automatic and manual mileage tracking and calculate trip distances.
• Create, organize, and retain expense and receipt records.
• Provide employee, manager, accounting, reimbursement, tax-support, and audit-support reports.
• Allow authorized business administrators to review, consolidate, export, and manage business records.
• Authenticate users, administer accounts and subscriptions, and provide customer support.
• Protect the Service, detect abuse or fraud, troubleshoot errors, and maintain reliability.
• Comply with applicable legal, tax, accounting, regulatory, and contractual obligations.
• Improve the Service using information permitted for that purpose.

We do not sell precise location, mileage, expense, or receipt data, and we do not use precise location data for third-party advertising or cross-app advertising tracking. If our practices change, we will update this Policy and obtain any consent required by applicable law or platform policy before using data for a materially different purpose.

4. Business Accounts and Administrator Access

If you use Qevra through an employer, customer, or other organization, that organization may control the business account and may be able to view, approve, export, retain, or otherwise manage mileage, expense, receipt, and other business records submitted through the account. The organization may have its own policies governing its use of those records. You should direct questions about the organization's use of your business records to the organization's administrator.

5. How We Share Information

We share information only as needed to provide and protect the Service, fulfill business-account functions, or comply with law. Recipients may include:

• Your organization and authorized administrators: when you are part of a managed business account.
• Service providers: cloud hosting and storage, database and authentication services, mapping/location services, receipt scanning or OCR providers, email/support providers, analytics or crash-reporting providers, and security providers used by the production Service.
• App stores and payment providers: for subscriptions, purchases, entitlement verification, refunds, and related account administration.
• Professional advisers and authorities: when reasonably necessary for legal, tax, accounting, audit, security, fraud-prevention, dispute-resolution, or compliance purposes.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to appropriate protections.

We require service providers that process personal information for us to use it only for authorized purposes and to maintain protections appropriate to the information they handle.

6. Location Permissions and Your Choices

Automatic mileage tracking depends on device location. You control location permission through your iOS or Android settings. If you decline or revoke background or precise location permission, automatic trip detection may be limited or unavailable, but where supported you may still enter mileage or trip details manually.

You can change app permissions at any time in your device settings. Turning off a permission stops future collection through that permission, but it does not automatically delete information previously collected.

7. Camera, Photos, and Receipt Images

If you choose to photograph or upload receipts, Qevra accesses the camera or selected photos only as needed to capture or attach the receipt. Receipt images may be stored with the related expense so that you or your organization can maintain supporting business records.

8. Data Retention

We retain account information for as long as the account is active and as reasonably necessary to provide the Service. Business mileage, expense, receipt, reimbursement, and audit-support records may be retained for longer periods when requested by the business customer or when reasonably necessary for tax, accounting, audit, fraud-prevention, dispute-resolution, contractual, or legal purposes.

When information is scheduled for deletion, removal from active systems may not be instantaneous, and residual copies may remain for a limited period in backups, security logs, or disaster-recovery systems consistent with our backup and retention processes.

9. Account and Data Deletion

If you can create an account in Qevra, you may request deletion through the in-app account-deletion feature or through our public deletion page at https://qevra.ai/delete-account/.

After we verify a valid request, we delete or de-identify personal data associated with the account except information we or the applicable business customer must or are permitted to retain for legitimate legal, tax, accounting, security, fraud-prevention, dispute-resolution, or regulatory reasons. If your account is managed by an organization, business records submitted on behalf of that organization may remain under the organization's control even after your personal user profile is deleted, to the extent permitted or required by law.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your Privacy Rights and Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, and to withdraw consent where processing is based on consent. You may also have rights to appeal certain privacy decisions or to limit particular uses of sensitive information. To exercise a privacy right, contact us at privacy@yourdomain.com. We may need to verify your identity before completing a request.

Because we do not sell personal information or use precise location data for third-party advertising, we do not offer an opt-out for those activities. If that practice changes, this Policy and applicable privacy controls will be updated.

12. Children

The Service is designed for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

13. Third-Party Services and Links

The Service may rely on or link to third-party services. Their independent processing of information is governed by their own privacy terms. We are responsible for accurately disclosing the production services and SDKs we use and will update this Policy when material third-party data practices change.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our data practices, platform requirements, or applicable law. We will post the updated Policy with a revised effective date and provide additional notice when required.

15. Contact Us

Your Legal Company Name
Website: https://qevra.ai/
Privacy: privacy@yourdomain.com
Support: support@yourdomain.com