Carrier Route Pilot Privacy Policy

Last updated: October 7, 2026

Carrier Route Pilot helps USPS mail carriers organize route information, scan parcel labels, search addresses, and manage delivery notes. This policy explains what information the app collects, how it is used, and the choices you have.

Information We Collect

Account Information

When you create or sign in to an account, Carrier Route Pilot uses Supabase Auth to process your email address and password authentication. Passwords are handled by Supabase Auth and are not visible to us.

Route and Stop Data

The app stores route names, stops, addresses, notes, route gallery information, curbside and walking route segments, parking points, and related route-management data in Supabase Postgres. This data is used to provide route lookup, route library access, public gallery features, multi-stop navigation, and persistent stop notes.

Private routes remain visible only to their owner. When you publish a route to the Gallery, its route name, delivery areas (state, city, and ZIP), addresses, and map sections become searchable and copyable by other signed-in users. Share by code keeps a route out of public browsing; other signed-in users who have its five-digit code can preview and copy it. Route notes and stop notes are excluded unless you explicitly choose to include them. Parcel scans and delivery history are not copied. You can reset a sharing code or make a route private at any time; copies already saved by other users remain theirs. Users can report a public Gallery route or block its creator; we store those safety actions to hide content and review reports. We keep a per-account code lookup counter to limit repeated guesses.

Camera and OCR

Carrier Route Pilot uses your camera to scan parcel labels and identify matching stops. Camera frames and scanned images are processed on your device for OCR and matching. Camera frames are not uploaded to our servers for OCR processing.

Microphone and Speech Recognition

Carrier Route Pilot uses your microphone when you choose voice address lookup. Speech recognition is handled through Apple's speech recognition services. Audio handling is governed by Apple's speech recognition and privacy practices.

Photo Library

If you choose to import a photo, Carrier Route Pilot accesses the selected photo from your photo library. The app does not browse your full library without your permission.

Subscription and Receipt Data

Carrier Route Pilot uses RevenueCat to manage subscriptions, purchases, receipts, trials, and entitlement status. RevenueCat may receive purchase-related identifiers and receipt information needed to validate access to premium features.

Optional AI Assistance

Carrier Route Pilot may offer optional AI-assisted route creation, image import, or text enhancement using the Anthropic Claude API. When you choose an AI text feature, the text needed for that request is sent to Anthropic. When you choose AI image import, the specific route-sheet image you selected is sent to Anthropic to extract route information. Live parcel-scanner camera frames, audio recordings, passwords, and payment information are not sent to Anthropic.

Mapping and Address Detection

When you use route maps, geocoding, route ribbons, or address detection, address text and map coordinates needed for the request are processed through our Supabase function and may be sent to Google Maps Platform or OpenStreetMap community services. We cache limited map responses and keep usage records to improve reliability and prevent misuse.

Quick Route

When you choose Navigate in RoutePilot, Google Navigation SDK processes your live location, destination coordinates, and navigation diagnostics to provide spoken directions, traffic updates, and rerouting. Location updates and audio may continue while the app is in the background or the screen is locked during an active navigation session. Ending navigation stops that session. Arrival does not mark a stop delivered; you choose Delivered or Skip. Google’s navigation terms are shown before first use. Google Maps and Navigation SDKs may also collect device identifiers, map and navigation interactions, and crash and performance diagnostics to operate and improve their services.

Quick Route reads selected or captured address photos on your device; these photos are not uploaded for OCR. When you add typed, pasted, or extracted addresses, Quick Route automatically sends the address text and your saved delivery area through Supabase to Google Geocoding, with an OpenStreetMap Nominatim fallback, to suggest local matches. Clear local matches are accepted automatically; uncertain or distant suggestions require review. When you optimize a trip, confirmed destination, starting-point, and optional finish coordinates are sent through Supabase to our routing service running VROOM with OSRM or Valhalla and OpenStreetMap road data. The routing service processes these coordinates to choose a stop order and calculate a driving path; it does not save destination requests. Google continues to provide the embedded map and optional spoken navigation. Optimization estimates do not include live traffic. Quick Route trips and progress are saved on this device separately for each signed-in account and do not sync between devices. Traffic estimates and route geometry are not saved with the trip. Coordinates expire after 30 days and are removed from saved trips when that account next becomes active in the app; affected locations are matched again, with uncertain results requiring review. You can delete a Quick Route trip from the app. Deleting your account also removes its saved Quick Route trips from this device; if local cleanup fails, the app offers a cleanup retry.

Optional Usage Analytics and Feedback

Usage analytics are optional and off until you allow them. If enabled, we store your account ID, the time of an app opening or feature interaction, and whether selected actions started, succeeded, failed, or were cancelled. Usage records do not contain route names or IDs, addresses, location coordinates, photos, parcel text, audio, or free-form content. We use aggregate reports to understand feature adoption, reliability, and return visits. These records are stored in Supabase for up to 90 days and are not sold or used for advertising. You can turn analytics off in Profile, which also deletes your previously collected usage activity. Optional fixed-choice feedback is submitted only when you press Send feedback; it is stored separately from your analytics preference, linked to your account, and also expires after 90 days. Deleting your account removes both usage and feedback records. Inactivity is an estimate from recorded activity, not evidence of uninstalling or a subscription cancellation.

How We Use Information

Sharing

We do not sell your personal information. We share information only with service providers needed to operate the app, including Supabase for authentication, database, and server functions; RevenueCat for subscription management; Apple for speech recognition and App Store purchases; Anthropic for optional AI text or selected-image assistance; Google Maps Platform for geocoding and route calculation; and OpenStreetMap community services for optional mapped-address discovery.

Data Retention

We keep account and route data while your account is active or as needed to provide the app. Cached map responses and limited service-usage records may be retained for reliability and abuse prevention. Gallery reports may be retained as needed to review safety issues. Subscription and receipt data may be retained by RevenueCat and Apple according to their policies. We may retain limited records when required for security, legal, tax, or operational reasons.

Account Deletion

You can delete your account in the app from Profile > Account > Delete Account. This deletes your RoutePilot account and associated route data from Supabase. Some purchase records may remain with Apple or RevenueCat where required for billing, fraud prevention, legal compliance, or accounting. You may also contact us at jordan8aaguirre@yahoo.com with privacy questions.

Children

Carrier Route Pilot is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can take appropriate action.

Security

We use service providers and platform tools designed to protect data in transit and at rest. No method of transmission or storage is completely secure, but we work to use reasonable safeguards appropriate for the app's purpose.

Your Choices

You can choose whether to grant camera, microphone, speech recognition, photo library, and location-related permissions. Some app features may not work without the permissions they require. You can manage subscription purchases through your Apple ID settings.

Contact

For privacy questions or deletion requests, contact us at jordan8aaguirre@yahoo.com.