← Juice

Privacy Policy

Last updated: 24 August 2026

Juice is built to be private by default. This policy explains what the app stores, when anything leaves your device, and your rights over your data.

Data controller. The controller responsible for any personal data processed through Juice is Luboš Bury, Czech Republic, contactable at [email protected].

Local-first by design

Everything you log — fuel-ups, charges, expenses, vehicles, receipts — is stored on your device. You can use the entire app, including statistics and insights, without an account and without any data ever leaving your iPhone.

Optional cloud sync (Juice Pro)

If you have Juice Pro and sign in (Sign in with Apple or Google), you can enable cloud backup and sync. Then, and only then, your logged data leaves your device to sync across your devices.

• What we store: your fuel/charge entries, expenses, vehicle details (name, make/model, optional plate/VIN, document dates), app preferences, and the account identifier and email address provided by your sign-in provider (Apple or Google). The email is used to identify your account and, if needed, to contact you about the service.
• Receipt images are currently kept on-device only and are not uploaded.

Legal bases for processing (GDPR)

Where the GDPR applies, we process personal data on these legal bases:

• Performance of a contract (Art. 6(1)(b)) — to provide cloud backup and sync that you have chosen to enable as part of Juice Pro.
• Consent (Art. 6(1)(a)) — you enable cloud sync voluntarily and can withdraw at any time by signing out or disabling sync.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure and operational.

Third parties and processors

We keep third parties to a minimum. The app contains no advertising or analytics SDK.

• Supabase — our cloud database/storage processor, hosting synced data in the EU (Frankfurt, Germany). See supabase.com/privacy.
• Apple — Sign in with Apple and App Store purchases. See apple.com/legal/privacy.
• Google — used only if you choose Google sign-in. See policies.google.com/privacy.

Your synced content is stored in the EU. Sign-in and purchase providers may process limited account data under their own policies.

What we do not do

• No advertising and no ad tracking, in the app or on the website.
• No analytics SDK in the app. The website has its own, limited analytics — see The website.
• We do not sell or share your personal data.

Receipt scanning

Receipt text recognition runs on-device (Apple Vision / on-device intelligence). Receipt photos are not uploaded for processing.

Optional Toyota connection (BETA)

Juice offers an optional, experimental connection to your MyToyota (Europe) account to read your vehicle's odometer, fuel level, and range. This feature is off unless you explicitly connect a vehicle, and it relies on an unofficial Toyota service that may change or stop working at any time.

• Your MyToyota email and password are sent only to Toyota's own sign-in servers and are never stored by Juice. We keep only a refresh token, held in your device's Keychain.
• The vehicle data we retrieve (odometer, fuel level, range) stays on your device. It is not uploaded to Juice's servers, Supabase, or any third party.
• You can disconnect at any time from the vehicle's screen, which removes the stored token and cached data from your device.

Security

Data in transit is protected with TLS (HTTPS). Cloud-stored data is held by Supabase with access restricted to your authenticated account. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

Data retention

Cloud data is retained while your account is active. When you delete data or your account, we remove the corresponding cloud-stored data; short-lived backups may persist for a limited period before being overwritten. On-device data is removed when you delete entries or uninstall the app.

Your rights

Where the GDPR applies, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability and to withdraw consent at any time. To exercise these rights, contact [email protected].

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz.

Account and data deletion

• You can use Juice entirely offline without an account.
• You can sign out at any time; local data remains on your device.
• You can delete your account and all associated cloud-stored data from within the app (in Settings), and you can also request deletion by emailing [email protected]. Uninstalling the app removes on-device data.

Children

Juice is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to create an account or enable cloud sync.

The website

This section covers the website at juicelog.com only. The Juice app contains no analytics and no tracking of any kind — nothing described here applies to what you do inside the app on your iPhone.

The website uses PostHog to measure how the site is used: which pages are read, which links are pressed, how far people scroll, and whether the App Store button gets clicked. This data is processed on PostHog’s EU Cloud (Frankfurt, Germany). PostHog acts as our processor — see posthog.com/privacy.

By default the site stores nothing on your device. Analytics run in PostHog’s cookieless mode: no cookies, no local storage, no session storage. Visits are counted using a hash that PostHog computes on its servers from your IP address, your browser’s user agent, and a salt that is rotated and discarded every day — so it cannot be used to recognise you from one day to the next. Because no information is stored on or read from your device, no consent is required for this; the legal basis is our legitimate interest (Art. 6(1)(f)) in understanding how the site is used.

If you press Allow on the cookie bar, two additional things happen, on the basis of your consent (Art. 6(1)(a)):

• cookies and local-storage entries are set so that repeat visits can be recognised, and
• session replay is enabled — a reconstruction of your visit (the page as rendered, mouse movement, clicks and scrolling) used to find usability problems. Anything typed into a form field is masked.

If you press No thanks, or if your browser sends a Do Not Track signal, the site stays cookieless and no session replay is recorded.

You can change your answer at any time through the Cookies link in the site footer. Withdrawing consent stops session replay and stops the cookies being used from that point on.

Stored item	When	Purpose	Expiry
__ph_opt_in_out_… (local storage)	Once you answer the cookie bar	Remembers your choice. Strictly necessary — it is what keeps us from asking again.	Until you clear site data
ph_…_posthog (cookie and local storage)	Only after you press Allow	Analytics identifier and session state	12 months

No advertising, profiling, or cross-site tracking takes place on the website, and analytics data is never sold or shared.

Changes

We may update this policy as the app evolves; material changes will be reflected here with a new "last updated" date.

Contact

Privacy questions or deletion requests: [email protected]