Odojot tracks your vehicle's mileage so you can substantiate business-use deductions. Doing that requires precise driving data, so this policy is specific about what we collect and why.
What we collect
| Data | Why |
|---|---|
| Email address, or your Apple account identifier if you use Sign in with Apple | To create and secure your account. Passwords are stored only as an argon2 hash — never in readable form. |
| Optional profile details: display name, home address, default business purpose, mileage-rate override | To label trips and calculate deductions the way you want. All optional. |
| Tesla account access tokens | To read your vehicle's data. Stored encrypted at rest. We never unlock, drive or send commands to your car. Tesla's charging permission (which we ask for to read your Supercharger bills) also covers starting and stopping charging; we don't use that part. |
| Vehicle details: VIN, model, display name | To attribute trips to the right car. |
| Driving and charging telemetry: odometer, gear/shift state, GPS location, battery energy, charging state and energy added, and the navigation destination's name and location | To detect when a trip starts and ends and to measure its distance. Mileage is always calculated from odometer readings, never from GPS. |
| Trip records: start and end times, odometer readings, distance, start and end coordinates and approximate street addresses, a decimated route breadcrumb, and your category, purpose and notes | These are your mileage log — the record a tax authority would expect to see. |
| Navigation destination name, if you set one on the car's screen while driving | To suggest a business purpose for the trip ("Acme Dental"). Stored with the trip; you can edit or clear it. |
| Drivers you add (names and their priority order) and which driver took each trip | To show who drove. Each car can have a usual driver, and you can change any trip's driver. |
| If you turn on phone matching in the iPhone app: a random ID for that install, which driver it belongs to, and, for each recent trip, the share of the trip your phone spent in a vehicle | To work out who was in the car. The app reads your phone's own motion history (the "in a vehicle" activity iOS already records) for each trip's time window and sends back only that single number per trip. It does not send your phone's location, and it only looks at the last 7 days. |
| Charging: when and where your car charged (the charger's location), energy added, the battery level before and after, and the cost — including Supercharger bills from your Tesla account's charging history, if you grant Tesla's charging permission | To work out what each drive's electricity cost. You can correct any session's type or cost. |
| Your electricity rates, if you enter them or read them from a bill | To price home charging. When you upload a bill we keep only the rates read from it — the bill itself is not stored. |
| Places you name ("Home", "Work"): a name, a point and a radius. Home and Work can also be learned from your car's navigation when you navigate there. | To show those names on your trips instead of street addresses. Rename or remove them any time; they're deleted with your account. |
| Device token, if you turn on reminders | To send you a notification when trips are waiting to be classified. Nothing else. |
When we collect it
Your vehicle streams data to us only while it is being driven or charged. We do not poll your car and we never wake it while it is parked — both for your privacy and because it would drain the battery. When the car is asleep, we receive nothing.
How we use it
To detect trips, classify them as business or personal (you can always override any automatic label), calculate deductions, and generate the reports and exports you ask for. We do not sell your data. We do not use your location for advertising, and we do not share it with data brokers.
Who else touches your data
- Tesla — the source of your vehicle data, accessed with your authorization.
- Apple — if you use Sign in with Apple, and to deliver push notifications.
- A reverse-geocoding provider — when enabled, trip start and end coordinates are sent to turn them into street addresses. Route breadcrumbs are never sent. Addresses we have already looked up are reused for nearby points (not linked to any account, and forgotten after six months unused), so most trips send nothing at all.
- Anthropic — only if you upload an electricity bill: the bill is sent to Anthropic's Claude AI to read the rates, for that one request. It may contain your name, address and account number; we ask only for the rates and don't store the bill.
- OpenFreeMap — the map on a trip's page is drawn in your browser from OpenFreeMap's public map tiles, so your browser asks them for the map area of that trip. Your trips and account aren't sent.
- OpenEI (the US Utility Rate Database) — only if you look up your utility's plan: we send the ZIP code you enter, nothing else, to find the utilities that serve it.
- Error monitoring — when enabled, diagnostic reports that may include your account identifier, to help us fix crashes.
We use no other processors today. If that changes, this page changes with it.
Keeping it
Your mileage log is kept for as long as your account is open, because deduction records need to survive an audit years after the drive. You can delete individual trips at any time.
You choose how much location detail to keep, under Privacy & data in your account. By default we keep everything, so every feature works on every trip. You can have us delete the raw readings your car sends after 7, 30 or 90 days; the route maps of older trips; and, for trips marked personal, where they went (keeping only the date, time and miles). Deletion is permanent. Readings from a car that isn't linked to any account are deleted after 30 days. Trips included in a locked audit export cannot be edited or deleted — that immutability is what makes the export worth anything as evidence.
You can delete your account and everything in it at any time from Account in the dashboard. That erases your trips, routes, reports, vehicles, Tesla connection and the raw drive data we received, and asks Tesla to stop your cars streaming to us. You can also email [email protected] and we will erase it for you.
If you disconnect your Tesla or pause tracking for a car, we stop recording that car's drives. Data your car sends after that is discarded rather than stored.
Security
Traffic is encrypted in transit. Passwords are argon2-hashed. Tesla tokens, and everything that says where you went — trip locations and addresses, routes, purposes and notes, your named places and home address, charging locations and receipts, and the raw readings from your car — are encrypted at rest with a key held separately from the database, so a copy of the database or its backups doesn't reveal them. Sessions use short-lived access tokens with rotating refresh tokens, so a stolen token has a narrow window.
Your choices
- Disconnect your Tesla at any time in Settings — we stop receiving data immediately.
- Turn reminders off in Settings; we delete the device token.
- Export your full mileage log as CSV or PDF whenever you like.
- Request access to, correction of, or deletion of your data by emailing us.
Children
Odojot is not intended for anyone under 18.
Changes
If we change this policy we will update the effective date above, and tell you in the app if the change is significant.
Contact
Senechal Consulting LLC — [email protected]