DriveLedger Privacy Policy
DriveLedger is a local-first iPhone mileage ledger with optional automatic trip detection, private iCloud sync, and user-selected external backup.
No advertising · No third-party analytics or cross-app tracking · No DriveLedger account · No Eternity Labs route or media server
Scope
This policy applies to the DriveLedger iOS app. The Eternity Labs website has a separate site privacy policy. DriveLedger is not directed to children and does not create an advertising profile.
Mileage, route, and vehicle data
DriveLedger can process precise location and Motion & Fitness signals to detect and measure drives when automatic tracking is enabled. It stores the trips, route points, classifications, purposes, notes, capture-quality information, automation rules, vehicle details, and vehicle photos you create. A bounded diagnostic journal records tracking state changes without retaining unnecessary long-term raw coordinates.
Local-first storage and private iCloud
The ledger is written to your iPhone first. When iCloud Sync is available and enabled, DriveLedger uses your private Apple CloudKit database to synchronize ledger records and vehicle photos across your Apple devices. Eternity Labs does not operate a DriveLedger account or proprietary server for routes or vehicle photos. Local tracking and the ledger continue when iCloud is temporarily unavailable.
Permissions
Location While Using and Always Location support measurement and automatic detection in the background. Motion & Fitness helps identify vehicle travel and limit unnecessary high-accuracy location use. Camera is used only when you choose to photograph a vehicle. Apple’s photo picker exposes only selected items. Notifications, if enabled, can ask you to classify an ambiguous trip as Work or Personal. You can change permissions in iOS Settings without deleting your existing ledger.
MapKit, external backup, and exports
Apple MapKit displays recorded routes without sending them to an Eternity Labs route server. You may choose a folder through Apple’s Files picker for an additional security-scoped DriveLedger V2 archive. This external backup is best effort, does not replace the local ledger or iCloud Sync, and is controlled by the selected Files provider. PDF, CSV, diagnostic, and archive files leave the app only when you explicitly save or share them.
Purchases
Apple processes subscriptions, introductory offers, Offer Codes, restoration, renewal, cancellation, and billing through StoreKit and the App Store. DriveLedger receives the entitlement status required to unlock Premium and never receives complete payment-card details.
Minimal first-party product analytics
DriveLedger sends a limited set of product-usage events to a dedicated Eternity Labs analytics service so we can measure app adoption and the subscription funnel. Events are limited to first foreground open, foreground sessions, paywall views, confirmed purchase or restore success, and 72-hour access start or expiry. Each event contains a random app-generated pseudonymous identifier, timestamp, app version, build number, iOS platform, Test or Production environment, and a coarse access state. The identifier is stored in this-device-only Keychain storage, normally survives reinstall on the same iPhone, and does not migrate to another device. DriveLedger contains no advertising, third-party analytics, or cross-app tracking SDK.
Retention and your controls
You can edit, export, delete, and restore supported content in the app. Deleted trips may remain temporarily in Recently Deleted so you can recover them. You can remove external copies, manage applicable iCloud data through Apple controls, withdraw iOS permissions, or delete the app and its local container. For applicable privacy rights that cannot be exercised through these controls, email privacy@eternitylabs.fr; reasonable identity verification may be required.
Publisher and changes
DriveLedger is published by Moussa Soulaimana, 16 Rue du Rocher, 35520 La Chapelle-des-Fougeretz, France, under the Eternity Labs name. Privacy contact: privacy@eternitylabs.fr. Product support: support@eternitylabs.fr. Material changes to this policy will appear here with a revised date.
72-hour access: technical verification
This section applies only to versions that offer 72 hours of DriveLedger access before a subscription. On initial online activation and later verification, the app sends an Apple-signed AppTransaction and a one-time request identifier over HTTPS to a dedicated Eternity Labs rights service. The Apple proof contains a technical app-account identifier, environment, app/download metadata and verification fields. It is checked in memory and is not retained or logged. This does not disclose your Apple Account password or email and does not create a separate DriveLedger login.
Minimal rights register
The service retains only a DriveLedger-specific pseudonymous account key, Apple environment, first access start and expiry. These records remain after access expires or the app is deleted so a reinstall or another device cannot restart the same period. They are linked to the technical Apple app identity, not anonymous. Protected backups contain the same limited records. No trips, GPS points, vehicles, plates, VINs, photos, documents, reports, tax data, notes or classifications are sent to this service. Contact privacy@eternitylabs.fr for applicable privacy requests; do not send your Apple proof or ledger. This register is not used for advertising, cross-app tracking or business analytics. For abuse prevention, a hashed network-address counter stays in server memory for at most 60 seconds, independently of the rights register. It is neither logged nor used for location, advertising or profiling.
Local access, analytics boundaries, and network failures
After activation, a protected local cache and elapsed-time clock allow offline use while access is valid. Restarting the iPhone requires an online check to re-establish trusted time; changing the device date cannot extend the period. A drive started before expiry can finish and be saved locally. A verified active Apple subscription takes priority. Product analytics is best effort: a bounded queue of at most 64 events may wait locally and retry later, without blocking tracking, the ledger, CloudKit, classification, reports, StoreKit, or launch. The analytics service never receives trips, GPS or route points, addresses, places, vehicles, plates, VINs, photos, documents, reports, tax data, notes, classifications, rules, Apple Account details, appTransactionID, name, email, phone number, advertising identifiers, or device hardware identifiers. Analytics events are retained only as needed for product measurement and security, and aggregate dashboards do not expose the pseudonymous identifier. For applicable access or deletion requests, contact privacy@eternitylabs.fr.
Official links
Open DriveLedger Support ↗
Apple Standard Terms of Use (EULA) ↗