Privacy Policy

Highway is operated by eone.studio. If you have a question about this policy or about your data, write to support@eone.studio and a person will answer.

This policy covers the Highway mobile app, the web app at highway.eone.studio/app, and this site.

Account: your name, email address, and a one-way hash of your password. We never store the password itself. Alongside it we keep the regional settings your account files under - country, currency, distance unit, language and time zone - because a mileage rate is different in every country.

Drives: for each drive, the start and end time, the distance, the route your phone recorded, the start and end coordinates and their addresses, the category you filed it under, any note you added, and the vehicle it belongs to.

Vehicles: the name and type you give each car.

Device and session: a device name, the app version, an Apple push token, and the IP address and browser identification the request arrived with. These exist so you can see which devices are signed in and revoke the ones that should not be.

With your permission the app reads your location in the background. That permission is what makes automatic drive detection possible at all: a drive that begins while your phone is in your pocket is only recorded if the app can be woken by a location change. Without it, Highway can only see drives that happen while the app is open on screen.

The app also reads motion data. It uses it to tell driving apart from walking, so a recording starts when you are actually in a vehicle. This costs far less battery than watching GPS alone.

Location is used to record your drives and nothing else. It is not sold, not used for advertising, and not shared with anyone for their own purposes. You can withdraw either permission at any time in iOS Settings; automatic detection stops, and you can still add drives by hand.

Every drive is written to your phone first and uploaded afterwards. That is deliberate: a drive recorded in a tunnel is safe on the device long before there is any signal to send it with.

The copy on our servers is what lets you sign in on another device and get your history back, and what a company report is built from. Servers are operated by eone.studio in the European Union.

If you join a company in Highway, the drives you file as business become visible to that company's owners, administrators and managers, because that is the point of submitting them for reimbursement.

Drives you file as personal are never shared with a company. Neither is your location outside a recorded drive, because it is never recorded in the first place.

Apple, to deliver push notifications and Lock Screen activities to your device.

Our email provider, to send the messages the service has to send: address verification, password resets, and invitations.

Nobody else. We do not sell personal data, and Highway carries no advertising or third-party analytics trackers.

You can export everything the account holds at any time, from Settings in the app or from your account page on the web.

You can delete your account, also from Settings. Before it happens you are shown exactly what will be erased and what will not. Deletion is permanent.

Drives already submitted to a company are kept by that company as their expense record, and deleting your account does not remove them from it - the same way a filed expense claim does not disappear when someone leaves a job.

If you are in the EU or the UK you also have the right to correct your data, object to how it is handled, and complain to your data protection authority.

If this policy changes in a way that affects what is collected or who sees it, the app will say so before the change takes effect rather than quietly updating this page.