Stopwise privacy policy

Last updated 2 October 2026

Stopwise is a route planner for delivery drivers. It is run by Daria Dovzhikova, an individual developer. Drivers use it with a monthly subscription after a free trial, or with access the developer gives them. This page says what the app does with information, in plain terms. Questions go to dovzhikova@gmail.com.

The short version

• There is no advertising, no analytics and no tracking in Stopwise.
• Your route for today, your settings and your saved addresses are stored on your phone.
• When you finish a day, the day (its stops, addresses, notes, times and results) and its delivery photos are saved on our server, so your history comes back if you reinstall the app. They are kept for 12 months and then deleted automatically, and you can delete any day yourself.
• To find addresses and plan a route, what you type, the positions of your stops and your own position are sent through our server to Google.
• When you scan a document, the photo goes to Google Cloud Vision for text recognition, and all the text on the page, including any names and phone numbers, goes to a second service, TypeSafe, in the United States, which picks out the delivery addresses. Both say in their terms that they do not use it to train their models.
• Apart from your finished days, we keep a count of how many requests each driver makes per day, and nothing else about what you do.

What is stored on your phone

Your stops, their addresses and notes, delivery status, the planned route, your settings, the history of addresses you have added, the addresses you pin or save as favorites, and the delivery photos you take are kept on your phone while you work. You can clear the address history in Settings. At the end of the day the app makes a PDF report of your stops on the phone itself; the PDF goes only where you send it, through your own mail or messaging app, and never through our server. Removing the app removes this data from the phone, but not the finished days saved on our server (see below). Your access token is kept in the iOS keychain.

Your delivery history

When you finish a day, the app uploads it to our server so that your past days are still there after you reinstall the app. A finished day contains, for every stop: its address and position, its note, its time window and time at the door, whether it was a priority, the planned arrival, when it was delivered or marked as not delivered, the reason you gave, and whether it has a photo. It also contains the day's date, start and finish times, the planned distance and driving time, the app's language, and your base (its name and position) if you have set one. The delivery photos you took that day are uploaded too, one by one.

The days are stored in Google Firestore and the photos in a private Google Cloud Storage bucket, both in Google Cloud's Tel Aviv region (me-west1). The photos are never public: the app gets a link to a photo that works for 15 minutes when it needs to show one. Only your own account can read your days.

Each day and its photos are kept for 12 months after the day ended and then deleted automatically. You can delete a day and its photos yourself in the app at any time. Delivery details and photos can show other people's addresses, names on doors or parcels, and the places you delivered to; save only what you would be comfortable keeping in your work records.

What is sent to our server, and on to others

The map on screen is drawn by Google's Maps SDK inside the app, which connects to Google directly to load the map. Everything else goes through our server, which runs on Google Cloud Run in Tel Aviv, and the server passes it on as follows.

• Address search. The text you type, your approximate position (rounded to about 100 metres) and your phone's country (from its language and time zone settings) are sent to Google Places so that nearby results come first. Our server holds recent search results in memory for up to ten minutes so that retyping is faster.
• Pasted lists and scanned addresses. The address lines are sent to Google Geocoding to be turned into map positions, with your phone's country and, if you have allowed location, the last position your phone knows (rounded to about 100 metres), so that matches near you come first.
• Route planning. Your current position, the position of each stop, time at each stop and any time windows are sent to Google Route Optimization or Google Routes. If you have set a favorite as your base, its position is sent too, since the route starts and ends there. Addresses and notes are not part of this request, only coordinates and timing.
• Scanning. The photo of the page is sent to Google Cloud Vision, which returns the text on it. That text is then sent to TypeSafe, which decides which lines are delivery addresses. Our server does not keep the photo or the text after answering. Google's terms for Cloud Vision say the photo is processed in memory, is not written to disk, and is not used to train Google's models; Google keeps only details such as the time and size of the request. TypeSafe receives the whole text of the page. Its terms say it does not train models on what we send, but they do not set a fixed period for how long it keeps requests, which it stores on Amazon Web Services in the United States.
• The map in the day report. When the app makes the PDF, it asks our server for a picture of the day's route: the position and status of each stop, the base's position and the planned line are sent to Google Static Maps, which draws it. Addresses and notes are not part of this request. Our server passes the picture back and does not keep it. Without a connection the report is made without the map.

Other people's details on scanned documents

Delivery labels and lists usually carry recipients' names, phone numbers and addresses. When you scan one, that information is processed by Google Cloud Vision and TypeSafe as described above, only to find the delivery addresses. TypeSafe receives every line on the page, not only the address, because it needs the surrounding lines to tell a delivery address from a sender's address. Those recipients are not Stopwise users. If you scan documents for your work, you are responsible for having the right to do so, the same as for any other tool you use with your customers' details. If you would rather not send a document through these services, type or paste the addresses instead. Stopwise processes these details on your behalf, only to put the stops on your route; we do not contact recipients or use their details for anything else.

What our server keeps

• Your finished days and delivery photos, as described above, for 12 months.
• Your account. Your name if you gave one (or the name you were invited under), when the account was created, whether it is active, whether the daily limits apply to it, whether we have given it Stopwise for free, and your phone's time zone, so that your daily limits start again at your own midnight. We do not ask for your email address or phone number.
• Your device token. Stored only as a one-way hash, so the stored value cannot be used to sign in.
• Daily usage counts. How many stops were planned, arrival-time updates, scanned pages, address lines looked up, searches, report maps, saved days and saved photos your account made each day. This exists to cap costs. It records numbers, not the addresses or routes themselves.
• Request logs. Like most web services, the hosting platform records each request: time, path, status and IP address, kept for about 30 days. Address searches are part of the request path, so the text you searched for and your approximate position appear in these logs. Routes, pasted lists, scanned pages and finished days are not part of the path and are not logged. When you enter an invite code, the server also remembers your IP address in memory for about ten minutes, to limit repeated attempts.

Subscriptions

You subscribe through Apple. We never see your card or payment details. When you start a trial, subscribe, restore a purchase, renew, cancel or get a refund, Apple sends our server a signed record of it: the transaction ids, the product, the dates it starts and ends, whether it is a free trial or an offer code, any refund, whether it was a test purchase, and a random account token the app attaches so the purchase matches your Stopwise account. We use it only to know whether you may plan routes, and keep it while your account exists. A subscription can sign in up to three phones to the same account, which is how your history comes back on a new phone.

Who else handles the data

• Google (Maps Platform, Cloud Vision, Cloud Run, Firestore, Cloud Storage, Cloud Logging), under Google's privacy policy and, for Cloud Vision and our server, the Cloud Data Processing Addendum.
• TypeSafe (TypeSafe AI, United States), for picking addresses out of scanned text, under its data processing addendum.
• Apple, for subscriptions and payments, and, if you installed Stopwise through TestFlight, under Apple's terms for TestFlight, including any crash reports and feedback you choose to send.

Some of these services process data outside Israel: Google in its own data centres, and TypeSafe in the United States. We rely on each provider's written data processing terms to protect it there.

We do not sell data and do not share it with anyone else. When you tap Navigate, the stop's position is handed to Google Maps or Waze on your phone, and that app's own policy applies from there.

Your choices

• You can refuse location access. Search results will be less local and the route will start from your base, or from your first stop if you have no base, instead of where you are.
• You can refuse camera access and add stops by typing or pasting.
• You can delete any finished day, with its photos, in the app.
• You can ask us to delete your account, your saved days and photos, and your usage counts at any time by writing to dovzhikova@gmail.com. We will do it within 30 days. Deleting your account does not cancel an Apple subscription: cancel it in your Apple account's subscription settings.

Children

Stopwise is a work tool for delivery drivers and is not meant for children.

Changes

If what the app does with information changes, this page changes with it and the date at the top is updated.