Privacy policy

Effective November 10, 2026. This policy applies to the KmJusto app for Android and iPhone, its services and the Private trips pages at kmjusto.com/viaje. If this translation and the Spanish version differ, the Spanish version prevails.

Controller: Andy Arias Barquero, developer of KmJusto. Privacy contact: kmjusto.app@gmail.com.

KmJusto analyzes offers on the phone. It does not store or send to its servers screenshots, raw OCR text or the addresses of ride-app offers. Only Private trips store the places the client chooses when booking (see "Private trips"). If you use zones on the map, Google's address service on your phone places the offer's address (see "Zones on the map"). We are not affiliated with Uber, DiDi or inDrive.

Data we process

• Account: name, e-mail or phone number and sign-in provider (Google, Apple, e-mail or phone), to create and protect your account.
• Device and app: model, Android or iOS and KmJusto version, how the app was installed (store or test build), and a derived, protected device identifier to limit repeated trials, count the day's free reads per phone (even when switching accounts) and protect the account.
• Plan usage: counts of which tools you use (for example how many times you opened the report or the assistant), how many free reads you used each day and when they ran out, and which KmJusto Pro features you tried to use. Only numbers and feature names, never content. We use them to improve the app and to let you know, in the app or by notification, when Pro could help; e-mails only if you accepted them.
• Settings: minimums, costs, platforms and preferences you save, to sync them across devices.
• Zones you avoid: the words you type and the zones you mark on the map (center and radius, or the shape's corners), to apply them and sync them with your account.
• Offer metrics: only extracted values such as amount, distances, times, platform, traffic light color, reading confidence and date; also session length and counts, and how many zones you saved and how many offers turned red because of them. They do not include screenshots, raw OCR, addresses or your zones' names.
• Location and mileage (iPhone only): while the reader is on, to count the kilometers you drive (see "Location and mileage on iPhone"). Only the daily km total is kept, on the phone.
• Private trips (if the driver turns them on): the profile their clients see (name, WhatsApp and, if added, photo, car, color and plate), their fare and hours, their clients' links and the requests they receive (see "Private trips").
• Notifications: a notification identifier per phone, to alert you of private-trip requests and messages from the KmJusto team.
• Analytics (Google Analytics for Firebase): which screens you open, which tools you use, when you turn on the reader, the color of offers (no amounts or addresses), your plan and country, and when you see or buy Pro, with an app installation identifier. We don't use the advertising ID or personalized ads. On kmjusto.com we measure visits and clicks to the app stores. We use this to understand how KmJusto is used and improve it.
• Diagnostics: technical error and performance reports that may include device data and the app version.
• Optional AI features: only when you use them. For the daily summary and the assistant we send Anthropic aggregated numeric totals from your report and your question. To work out your vehicle's mileage we send only the make, model, year and fuel and vehicle type; the vehicle and the result are saved in your account so you are not asked again. We do not send screenshots, OCR text, addresses or your contact details.

Screen capture and OCR

When you start the reader, the phone asks your permission to share the screen: on Android with a persistent notification; on iPhone with "Start Broadcast" or "Share Screen", and the system indicator stays visible while it reads. KmJusto temporarily processes the image in memory, on the device, to extract the offer data and show the traffic light. The image and the text read are not stored or sent to KmJusto, Firebase, Anthropic or the ride platforms.

Location and mileage on iPhone

On iPhone, KmJusto asks for your location only while the reader is on. It uses it to add up the kilometers you drive each day (to work out your costs) and to keep showing the offers' color while you use the ride app. It discards imprecise points and keeps on the phone only the daily kilometer total: never your points, routes or addresses. Location and mileage are not sent to KmJusto, Firebase or anyone else. When the reader stops, the app stops using location. You can remove the permission in iPhone Settings; the reader and mileage stop working meanwhile. Mileage is deleted when you delete your account or uninstall the app.

Zones on the map

If you mark zones on the map, KmJusto needs to know where each offer's pickup and drop-off are. For that, the phone sends the offer's address line (for example "412 Pine St – Downtown") to Google: on Android through the phone's address service; on iPhone to Google Maps' address service (Apple Maps' if Google doesn't answer). Only that line is sent, never the screenshot or the rest of the text. KmJusto does not keep the address or send it to its servers: on the phone it keeps, for up to 30 days, an encrypted fingerprint of the lookup (not the text) with its coordinates, so it doesn't ask again. If you don't use zones on the map, no address is looked up. The zone editor's map is shown by Google Maps on Android and iPhone.

Private trips

With Private trips, the driver sends each client their own link (kmjusto.com/viaje/…). This is how data is handled:

• The driver's: a client with the link sees their name, photo, car, color and plate (if added) and their WhatsApp, to reach them if they don't answer.
• The client's: when booking, the client gives their name and WhatsApp, pickup and drop-off, the time (now or scheduled), the number of passengers and an optional note; if the ride is for someone else, also that person's name and WhatsApp. This is stored in Firebase and only the driver of that link sees it, to answer and do the trip.
• Client location: the page asks the browser for permission to center the map and suggest the pickup. It is optional; without it the client searches or marks the place on the map. The location is only stored if the client uses it as the pickup.
• Driver location: when the driver taps "Navigate" on an accepted trip, their position is shared with the trip page so the client sees where they are. Only the latest point is kept, while the trip is accepted or under way, and it stops by itself when the trip ends or with "Stop". Android shows a notification while sharing; iPhone shows the blue location indicator.
• Google Maps: the page uses Google Maps for the map, place search and address names, and KmJusto's server computes the route, distance and traffic time with Google. Only the chosen places are sent, never the name or phone number.
• Trip page: anyone with a trip's link sees its status, places, price, the driver's message and the boarding code, but not phone numbers. The client can share it with the rider or family.
• Retention: requests are kept while the driver's account is active, for their history and income. The driver can turn off a client's link at any time. A client can ask their driver, or write to kmjusto.app@gmail.com, to delete their data.
• Payments: the client pays the driver directly. KmJusto takes no commission, receives no payment data and is not a transportation company.

How we use data and who we share it with

• Google Firebase: authentication, storage and sync of settings and metrics, diagnostics and running the service. Data is processed on Google infrastructure; the project is set up in the United States.
• Google Maps and Google's address service: show the zone editor's map and place offer addresses when you use zones on the map, on Android and iPhone. They follow Google's privacy policy.
• Apple Maps (iPhone): places the offer's address only when Google's service doesn't answer. It follows Apple's privacy policy.
• Anthropic: receives only the data described above when you use an AI feature (summary, assistant or vehicle mileage).
• Google Play and Apple's App Store: process subscription payments and tell KmJusto the purchase status. KmJusto does not receive your card number. On iPhone, the purchase carries an anonymous identifier derived from your account to assign your plan.
• Apple: if you sign in with Apple, Apple shares your name and e-mail (or a relay address if you choose to hide it). It follows Apple's privacy policy.

We do not sell personal data, we do not use ads and we do not share offer data with Uber, DiDi or inDrive. Access is limited to authorized staff who run and support KmJusto.

Retention and security

The detailed history stored locally on the phone is deleted automatically after 90 days. Account and sync data are kept while the account is active. We apply per-account access rules, server-side controls and encryption in transit through HTTPS/TLS. No security measure removes every risk entirely.

Deleting your account and data

You can request deletion from Settings → Delete my account in KmJusto for Android, Delete my account at the bottom of Home in KmJusto for iPhone, or write to kmjusto.app@gmail.com from the associated e-mail with your UID or sign-in phone number. We will delete your authentication account and the linked identifiable data, including settings, metrics, payment history visible in the account and usage data. Global totals that have been aggregated and de-identified may be kept. Before deleting the account, cancel any Google Play or App Store renewal; deleting KmJusto does not cancel those subscriptions. If you signed in with Apple, deleting the account also revokes KmJusto's access to your Apple ID.

Children's privacy and changes

KmJusto is designed for people who drive and use transportation platforms. We do not seek to collect information from minors. We may update this policy; we will publish the current version at this address and change the date shown above.