Legal

Privacy policy

Last updated September 16, 2026

Neowork Studios Inc. ("Neowork", "we", or "us") is a British Columbia company that provides Journey. This policy explains how we collect, use, disclose, retain, and protect information across the Journey office app, Journey Driver app, and website.

1. Scope

This policy applies to the office app at app.neoworkjourney.com, the Journey Driver app for iOS, Android, and the web, the supporting API, and this website. It covers managers, drivers, and anyone who contacts us.

Journey is offered to businesses for commercial use. Drivers access Journey through their business's account. We do not knowingly collect information from anyone under 19, the age of majority in British Columbia, unless that person is employed as a driver by a business using Journey.

2. Control of business data

Data recorded in Journey belongs to the business using the service. We process that data on the business's behalf to provide Journey. The business controls its managers, drivers, routes, and record deletion. Under British Columbia's Personal Information Protection Act, the business is responsible for personal information in its records, including driver records, and Neowork acts as its service provider. Questions about a specific business's records should first be directed to that business.

3. Privacy officer

Neowork's privacy officer oversees compliance with British Columbia privacy law and, where applicable, Canada's Personal Information Protection and Electronic Documents Act. Contact the privacy officer at support@neoworkjourney.com. We respond within 30 days.

4. What we collect

Managers and the office app

• Name and email address, used for authentication and activity attribution.
• Routes, locations, vehicles, drivers, schedules, and business settings.
• Subscription billing details handled by our payment processor. We receive the card's last four digits and billing address, but not the full card number.

Drivers and the driver app

• Name, as entered by the business, and a driver-selected PIN. The PIN is stored only as a non-reversible hash and cannot be viewed by Neowork or the business.
• Arrival, departure, and skip times; completed or skipped tasks; selected reasons; and entered notes.
• Device location at the moment an arrival or departure is recorded, only when location permission is granted. Location is attached to the event so the business can verify where it occurred. Journey does not collect location between events or in the background, and recording remains available when location permission is denied.
• Fuel receipt photos selected by the driver and the amount, volume, odometer, and station extracted from them.
• Entered odometer readings and vehicle cleaning records.
• A randomly generated installation identifier used to pair the device with the business. Journey does not access the device's advertising identifier.

Records created without a connection remain on the device until connectivity returns. The app may transmit pending records through a short background task while closed. Journey performs no other background processing.

Communications

We retain correspondence to respond to requests and maintain a record of our communications.

Technical information

Our servers log incoming requests, including IP address, timestamp, app version, and requested operation. We use these logs to operate, secure, and troubleshoot Journey and retain them for 30 days.

5. How we use information

• Provide Journey, including creating runs, recording stops, synchronizing devices, and producing reports.
• Process subscription billing and send invoices and account notices.
• Respond to support requests and notify managers of relevant service changes.
• Secure, maintain, and troubleshoot the service.

We do not sell personal information, share it with advertisers, use it to create individual profiles, or use customer data to train AI models. Neowork personnel access business records only as required to provide support or resolve service issues, and only to the extent necessary.

6. Cookies and analytics

The office app uses a cookie set by our authentication provider to maintain manager sessions; it is cleared at sign-out. The driver app uses device-based pairing and does not use cookies. This website sets no cookies. The website and apps contain no analytics cookies, advertising trackers, or third-party advertising scripts.

7. Email

We send transactional email required to provide the service, including invitations, account and billing notices, and support replies. We send marketing email only with consent. Marketing messages include an unsubscribe option that takes effect within 10 days, as required by Canada's anti-spam legislation.

8. Access to information

• Business managers, according to their assigned office app role.
• Drivers, for assigned runs and records they create.
• Neowork personnel, only as required to operate and support the service.
• The service providers described below, limited to the information required for their function.

We disclose personal information to public authorities only when legally required. We notify the affected business unless prohibited by law.

9. Service providers

We use service providers for application and database hosting, manager authentication, subscription billing, email delivery, address lookup, receipt field extraction, and app-store distribution. Each provider receives only the information required to perform its function.

We use Canadian providers where suitable. Journey's application hosting and database are located in Canada. Providers operating elsewhere are subject to contractual restrictions on their use of information.

Our receipt-processing provider receives only the receipt photo and returns the amount, volume, odometer, and station. Under our agreement, it does not use that data to train models. Driver names, stop records, and locations remain within Neowork's systems except when made available to the applicable business's managers.

10. Data location

Journey's servers and database are located in Canada. Some service providers identified in section 9 operate in the United States and may process or store the limited information they receive there. Information processed outside Canada may be subject to the laws of the country in which it is processed.

11. Security

Data is encrypted in transit and at rest. Server access is limited to authorized personnel using key-based authentication. Business records are logically separated within the database, and backups are created nightly. No system can guarantee absolute security. If a breach creates a real risk of significant harm, we will notify affected businesses and the Privacy Commissioner without unreasonable delay.

12. Retention and deletion

We retain route and stop records while the business maintains its account. Businesses may delete their records at any time. After an account closes, we delete business data from production systems within 30 days and from backups within 90 days. Billing records are retained for seven years as required by Canadian tax law. Server logs are retained for 30 days, and support correspondence for two years after the last message.

13. Your rights

• You may control location and camera permissions through device settings. Journey remains functional without either permission.
• To access, correct, or delete business-controlled records about you, contact the manager responsible for the account.
• You may request information held by Neowork by contacting the privacy officer. We may verify your identity and coordinate with the business controlling the account. We respond within 30 days.
• You may submit a complaint to the Office of the Information and Privacy Commissioner for British Columbia if you are not satisfied with our response.

14. Changes to this policy

If we make a material change to this policy, we will update the date above and notify business managers through the office app before the change takes effect.

15. Contact