Last updated: 22 October 2026
Juice is built to be private by default. This policy explains what the app stores, when anything leaves your device, and your rights over your data.
Data controller. The controller responsible for any personal data processed through Juice is Luboš Bury, Czech Republic, contactable at hello@juicelog.com.
Everything you log — fuel-ups, charges, expenses, vehicles, receipts — is stored on your device. You can use the entire app, including statistics and insights, without an account, and nothing you log leaves your iPhone unless you turn on cloud sync. To know whether you have Juice Pro, the app checks your purchase status with our purchase processor, Superwall, every time it starts (see Third parties and processors below); that check never includes anything you log.
If you have Juice Pro and sign in (Sign in with Apple or Google), you can enable cloud backup and sync. Then, and only then, your logged data leaves your device to sync across your devices. Without Pro you can still sign in to download an existing backup to your device; nothing is uploaded.
Where the GDPR applies, we process personal data on these legal bases:
We keep third parties to a minimum. The app contains no advertising SDK and does no tracking. The only usage data it sends is the purchase and Juice Pro screen activity Superwall records, described below.
Your synced content and its backups are stored in the EU. The automated backup job itself runs on GitHub's infrastructure, which may sit outside the EU; the data is encrypted there before it is stored anywhere, and GitHub holds no key to it. Purchase status is processed by Superwall in the USA. Sign-in providers may process limited account data under their own policies.
Receipt text recognition runs on-device (Apple Vision / on-device intelligence). Receipt photos are not uploaded for processing.
Juice offers an optional, experimental connection to your MyToyota (Europe) account to read your vehicle's odometer, fuel level, and range. This feature is off unless you explicitly connect a vehicle, and it relies on an unofficial Toyota service that may change or stop working at any time.
Data in transit is protected with TLS (HTTPS). Cloud-stored data is held by Supabase with access restricted to your authenticated account. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.
A cloud backup is only as good as its own backup, so the synced database is copied once a day. Each copy is encrypted before it leaves the machine that created it, with a key whose private half is held only by the controller — the provider storing the file cannot read it. Backups are kept for up to 90 days and are then deleted.
Backups exist for disaster recovery: to restore the service if the database is lost or corrupted. They are not browsed, mined, or used for any other purpose.
Cloud data is retained while your account is active. When you delete data or your account, it is removed from the live database straight away. Copies inside encrypted backups that were already made are not edited individually — they disappear as those backups age out, within 90 days. If a backup ever had to be restored, deletions made in the meantime would be re-applied. On-device data is removed when you delete entries or uninstall the app.
Where the GDPR applies, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability and to withdraw consent at any time. To exercise these rights, contact hello@juicelog.com.
You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz.
Juice is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to create an account or enable cloud sync.
This section covers the website at juicelog.com only. The Juice app contains no advertising and no tracking of any kind — nothing described here applies to what you do inside the app on your iPhone (the app's only usage data is the Superwall purchase and Juice Pro screen activity described above).
The website uses PostHog to measure how the site is used: which pages are read, which links are pressed, how far people scroll, and whether the App Store button gets clicked. This data is processed on PostHog’s EU Cloud (Frankfurt, Germany). PostHog acts as our processor — see posthog.com/privacy.
By default the site stores nothing on your device. Analytics run in PostHog’s cookieless mode: no cookies, no local storage, no session storage. Visits are counted using a hash that PostHog computes on its servers from your IP address, your browser’s user agent, and a salt that is rotated and discarded every day — so it cannot be used to recognise you from one day to the next. Because no information is stored on or read from your device, no consent is required for this; the legal basis is our legitimate interest (Art. 6(1)(f)) in understanding how the site is used.
If you press Allow on the cookie bar, two additional things happen, on the basis of your consent (Art. 6(1)(a)):
If you press No thanks, or if your browser sends a Do Not Track signal, the site stays cookieless and no session replay is recorded.
You can change your answer at any time through the Cookies link in the site footer. Withdrawing consent stops session replay and stops the cookies being used from that point on.
| Stored item | When | Purpose | Expiry |
|---|---|---|---|
__ph_opt_in_out_…(local storage) |
Once you answer the cookie bar | Remembers your choice. Strictly necessary — it is what keeps us from asking again. | Until you clear site data |
ph_…_posthog(cookie and local storage) |
Only after you press Allow | Analytics identifier and session state | 12 months |
No advertising, profiling, or cross-site tracking takes place on the website, and analytics data is never sold or shared.
We may update this policy as the app evolves; material changes will be reflected here with a new "last updated" date.
Privacy questions or deletion requests: hello@juicelog.com