Legal

Privacy policy

Last updated September 16, 2026

Journey is made by Neowork Studios Inc., a company based in British Columbia, Canada ("Neowork", "we", "us"). It has two parts: an office app that a business's managers use, and the Journey Driver app that its drivers use. This policy explains what each part records, why, who can see it, and what you can do about it. We wrote it to be read.

1. Who this covers

This policy applies to the office app at app.neoworkjourney.com, the Journey Driver app on iOS, Android and the web, the API behind them, and this website. It covers managers who sign in to the office app, drivers who use the driver app, and anyone who writes to us.

Journey is a business tool. We offer it to businesses, not to people for personal use, and drivers use it under their business's account. We do not knowingly collect information from anyone under 19, the age of majority in British Columbia, unless they are a driver working for a business that uses Journey.

2. Who the data belongs to

Everything recorded in Journey belongs to the business that uses it. We store and handle it for that business so it can run its deliveries. The business decides who its managers and drivers are, what routes exist, and when records are removed. Under British Columbia's Personal Information Protection Act, the business is responsible for the personal information in its own records, including its drivers' records. We are the service provider that handles it for them. If you have a question about a particular business's records, ask that business first.

3. Our privacy officer

One person at Neowork is our privacy officer. They make sure we follow British Columbia's privacy law and, where it applies, Canada's federal one, the Personal Information Protection and Electronic Documents Act. You can reach them at support@neoworkjourney.com. We answer within 30 days.

4. What we collect

From managers, in the office app

• Your name and email address, used to sign you in and to show who did what.
• The routes, locations, vehicles, drivers, schedules and settings the business sets up.
• Billing details for the business's subscription, handled by our payment processor. We see the last four digits of a card and the billing address; we never see the card number.

From drivers, in the driver app

• Your name, as your business entered it, and a PIN you choose. We store the PIN in a scrambled form that cannot be turned back into the PIN, so nobody, including us, can read it.
• The times you tap Arrived, Departed and Skipped at each stop, the tasks you complete or skip, the reasons you choose, and the notes you type.
• Your phone's location at the moment you record an arrival or departure, only if you allow it. It is attached to that record so the office can check a stop time against where the phone was. The app does not track you between taps and does not use location in the background. Recording works with location denied.
• Photos of fuel receipts you choose to take, and the amount, volume, odometer and station read from them.
• Odometer readings you enter, and vehicle cleanings you log.
• A code the app makes up when it is first paired, so the business can recognise the phone. It is not your phone's advertising ID, and we never read that.

Records made while the phone has no signal stay on the phone until it reconnects, then they are sent. The app may send them in a short background task while it is closed. Nothing else runs in the background.

When you email us

We keep the emails so we can answer you and, later, remember what was agreed.

Technical information

Our servers keep a log of the requests they receive: the internet address they came from, the time, the app version and what was asked for. We use these logs to keep the service running and to look into problems, and we keep them for 30 days.

5. How we use information

• To run Journey for your business: create runs, record stops, sync phones, produce reports.
• To bill the business and send it invoices and account messages.
• To answer support requests and tell managers about changes that affect them.
• To keep the service secure and find faults.

We do not sell personal information. We do not share it with advertisers, use it to build profiles of people, or use customer data to train AI models. When we look at a business's records ourselves, it is to support that business or to fix a fault, and we look at no more than we need to.

6. Cookies and analytics

The office app uses a cookie to keep a manager signed in. Our sign-in provider sets it, and it is cleared when you sign out. The driver app uses no cookies, because it keeps its pairing on the phone. This website sets no cookies at all. There are no analytics cookies, advertising trackers or scripts from other companies on this site or in the apps.

7. Email

We send the emails the service needs: invitations, account and billing messages, and replies to your questions. We do not send marketing email unless you have asked for it, and any marketing message has an unsubscribe link that takes effect within 10 days, as Canada's anti-spam law requires.

8. Who can see it

• Managers of your business, in the office app, according to their role.
• Drivers, for the runs assigned to them and the records they made.
• Us, only as needed to run and support the service.
• The service providers described in the next section, each for its one job.

We hand personal information to the authorities only when the law requires it, and we tell the business unless the law stops us.

9. Services we rely on

We use a small number of service providers, each for one job: hosting the application and its database, manager sign-in, subscription billing, sending our email, address lookup when a manager types a location, reading the fields off a receipt photo, and distributing the driver app through the app stores. Each one receives only what its job needs and nothing more.

We prefer Canadian providers and use one wherever it can do the job. Our hosting and database are in Canada. Where the right provider for a job is elsewhere, it is bound by a contract that limits what it may do with the information.

The provider that reads receipts receives the receipt photo and returns the amount, volume, odometer and station; we send it nothing else, and under our terms with it, it does not train models on that data. Drivers' names, stop records and locations never leave our own systems except to the business's managers.

10. Where your information is stored

Our servers and database are in Canada. Some of the providers in section 9 are in the United States. They receive only what their job needs, and they may store it there. By using Journey a business accepts that this information may be processed outside Canada and be subject to the laws there.

11. How we protect it

Data is encrypted while it travels and while it is stored. Only the people who run our servers can get into them, and they use keys rather than passwords. Each business's records are kept separate from every other business's inside the database. We take backups every night. No one can honestly promise perfect security. If a breach creates a real risk of significant harm, we will tell the affected businesses and the Privacy Commissioner without unreasonable delay.

12. How long we keep it

Route and stop records are kept for as long as the business keeps its account, because they are the business's operating history. A business can delete its own records at any time. When a business closes its account, we delete its data from our live systems within 30 days and from backups within 90 days. The exception is billing records, which Canadian tax law requires us to keep for seven years. Server logs are kept for 30 days. Support emails are kept for two years after the last message.

13. Your rights

• Location and camera permissions are controlled in your phone's settings; the app works without them.
• To see, correct or delete records about you, ask your business's manager, who controls the account.
• You can ask us what we hold about you by writing to the privacy officer. We will check with the business that controls the account and answer within 30 days. We may need to confirm who you are first.
• If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia.

14. Changes to this policy

If this policy changes in a way that matters, the date at the top changes and the business's managers are told in the office app before the change takes effect. We do not change it quietly.

15. Contact