Privacy Policy

1. Introduction

LabsX ("we", "us", or "our") develops and publishes independent software applications, including TLCX (NYC TLC & Rideshare Driver Shift, Mileage, and Expense Tracker). This Privacy Policy explains our commitment to data protection, transparency, and user privacy when you visit labsx.app or use any of our software applications.

2. Data We Do NOT Collect

Our software is engineered on a local-first, offline-capable architecture:

• No User Accounts: You do not register an account with LabsX to use our applications.
• No Central Database: We do not operate external database servers that receive or host your vehicle data, trip history, GPS paths, earnings, or expenses.
• No Telemetry or Tracking: We do not embed third-party advertising SDKs, behavioral analytics, fingerprinting tools, or telemetry trackers.

3. Google OAuth & Google Drive Integration

TLCX provides an optional Google Drive cloud synchronization feature that enables users to create secure backups and sync their data across their personal devices.

3.1 Scopes Requested

TLCX connects to Google APIs using standard OAuth 2.0 authorization and requests only the minimal scope necessary:

• https://www.googleapis.com/auth/drive.file (or isolated drive.appdata): Grants access exclusively to files and folders created or opened by the TLCX application.

3.2 What TLCX Does with Google Drive

When you enable Google Drive sync in TLCX:

• TLCX creates a designated folder in your Google Drive (TLCX/Backups/) to store your encrypted SQLite database snapshot (tlcx.sqlite).
• TLCX uses your Google Drive connection solely to upload and download your personal backup files between your own authenticated devices.
• TLCX cannot read, browse, modify, or delete any of your personal files, Google Docs, photos, or folders outside of the specific files TLCX creates.

3.3 Compliance with Google API Services User Data Policy (Limited Use)

Specifically:

• No Third-Party Transfers: We do not transfer, sell, disclose, or distribute Google user data or backup files to third parties or external servers.
• No Advertising: Google user data is never used to serve advertisements, retarget ads, or build marketing profiles.
• No Human Access: No humans at LabsX have access to your Google Drive data, access tokens, or database snapshots.
• No AI Model Training: Your Google user data is strictly prohibited from being used to train generalized artificial intelligence (AI) or machine learning (ML) models.

4. On-Device Storage & Data Security

All your local logs, vehicle profiles, fuel expenses, and odometer checkpoints are stored inside your device's sandboxed operating system storage (using SQLite/Drift).

On desktop platforms (Linux, macOS), credential files and refresh tokens are protected with strict operating system POSIX permissions (0700 directory permissions and 0600 file permissions) restricting read/write access exclusively to your local operating system account.

5. Your Rights & Data Deletion

Because all data is stored locally on your device and inside your personal Google Drive, you have total control over your data:

• Revoke Google Access: You can disconnect TLCX from your Google Account at any time by visiting Google Account Permissions and removing TLCX.
• Delete Cloud Backups: You can delete your backups at any time by deleting the TLCX folder directly in Google Drive or by tapping "Sign Out & Disconnect" inside the TLCX app.
• Delete Local Data: You can wipe all local application data by uninstalling the app or clearing app storage in your operating system settings.

6. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted directly to https://labsx.app/privacy with an updated effective date.

7. Contact Information

If you have any questions or feedback regarding this Privacy Policy or our security practices, please contact us at:

LabsX Development Hub
Email: LabsX@googlegroups.com
Website: https://labsx.app