DLEM Drive Less, Earn More

Privacy Policy

Last updated: 7 November 2026

This policy explains what data DLEM (“the app”, package name com.pessoto.dlem) accesses, how it is used, and what leaves your device. Your ride offers, ride history, goals and settings stay on your phone. If you sign in with Google, DLEM creates an account on its own server that holds only your email address, your Google account identifier and your sign-in sessions. The app also contacts DLEM’s own server for a small amount of non-personal configuration data. Both are described below. See also our Terms of Use.

Data controller

For the purposes of the UK GDPR and the EU General Data Protection Regulation (GDPR), the data controller responsible for DLEM is Daniel Medeiros, the app's independent developer. You can reach the controller directly at [email protected] for any question about this policy or your data.

What DLEM reads from your screen

DLEM uses Android's Accessibility Service to read the on-screen text of supported driver apps while they are in the foreground. This is how DLEM detects a new ride offer and reads its price, distance, and time. DLEM only reads screens belonging to the supported driver apps it is built to work with — it does not read or record any other app.

Where your data is stored

Ride offers, your ride history, custom cost settings, earning thresholds, and goals are evaluated and stored locally on your device only. None of this is sent to DLEM or to any server. If you uninstall the app or clear its data, this information is deleted.

You can create an encrypted backup of this local data (AES-256-GCM) from within the app, for example before switching phones. This backup file is created and stored wherever you choose on your own device — DLEM does not upload it anywhere on your behalf.

Your DLEM account

Signing in with Google creates a DLEM account. DLEM uses Google only as an identity provider, to confirm who you are. This is separate from the Firebase services described below. We never receive your Google password and we never act on your Google account.

DLEM’s server stores:

  • your email address, as provided by Google;
  • your Google account identifier, an opaque code that Google assigns to your account;
  • your sign-in sessions (one for each phone that is signed in), which keep you signed in.

Your ride offers, ride history, goals and settings are not part of the account. They stay on your phone, as described above.

When you delete your account, DLEM keeps for 3 years only a code derived from your Google account identifier, which cannot be turned back into the identifier or your email address, and two dates (when the account was first created and when it was deleted). We keep this so that a free period or a one-time offer is not granted twice to the same person. The legal basis is our legitimate interest in preventing fraud and abuse (Article 6(1)(f) UK GDPR). After 3 years the record is deleted automatically.

Waitlist (early access)

If you join the waitlist on this site, DLEM’s own server (api.dlem.io) stores:

  • your name and email address;
  • the language of the page you used and the version of the consent text you accepted;
  • the campaign tags of the link you came from (utm_source, utm_medium, utm_campaign), if it had any, and the page of this site where you signed up;
  • the date and time of the signup.

The signup record does not include your IP address. The form sends these details to DLEM’s server, not to a third party.

To protect the form from automated abuse, it uses Cloudflare Turnstile. When you start filling in the form, your browser loads a script from Cloudflare, which receives technical data such as your IP address and browser details to tell people from bots. What you type is not sent to Cloudflare. The legal basis is our legitimate interest in keeping the service secure (Article 6(1)(f) UK GDPR). Cloudflare’s own privacy policy applies to that data.

Purpose and legal basis: DLEM uses your name and email address only to write to you once, when the app is available, and to greet you by name. The basis is your consent, given by ticking the box in the form. We never share your address.

Retention and withdrawal: your details are kept until 6 months after that email, or until you withdraw your consent, whichever comes first. You can withdraw at any time, and have your address deleted, by writing to [email protected]. Withdrawing does not affect what was done before.

App configuration data

DLEM’s app contacts DLEM’s own server to fetch a small amount of non-personal configuration data, for example the list of ride-hailing apps DLEM currently supports. This request does not carry your ride offers, ride history, or any other data described above. As with any request made over the internet, this contact may reveal your device’s IP address to DLEM’s server.

Other permissions DLEM uses

  • Display over other apps: to show the floating ride-verdict overlay.
  • Location (approximate/last known): read locally from Android's location services to support features like ride history and goals. This is processed on your device and is not transmitted by DLEM.
  • Ignore battery optimisations: optional, so DLEM can keep reading ride offers reliably while you drive.

Third-party services

DLEM uses the following Google Firebase services to keep the app stable and to understand how it's used:

  • Firebase Crashlytics — receives crash reports (device model, OS version, and stack traces) when the app fails unexpectedly.
  • Firebase Analytics — receives basic usage and app-interaction events.
  • Firebase Performance Monitoring — receives technical performance data (such as screen load times).

These services are operated by Google and are separate from your ride data described above — they do not receive ride offers, prices, ride history, or your cost settings. See Google's Privacy Policy for how Google handles this data.

DLEM does not show adverts and does not sell or share your data with advertisers.

Legal basis for processing

Where DLEM or its third-party services process any personal data, we rely on the following legal bases under Article 6 of the GDPR:

  • Legitimate interest — to provide the app's core functionality (reading ride offers locally and showing a verdict) and to keep the app stable and secure (crash reporting, performance monitoring).
  • Legitimate interest — for basic usage analytics, used to understand how the app is used and to improve it.
  • Legitimate interest — to keep the app's configuration (such as its list of supported ride-hailing apps) up to date without requiring you to install an app update.

DLEM does not process special categories of data (e.g. health, biometric, or similarly sensitive data).

International data transfers

Google Firebase may process data (such as crash reports and analytics events) on servers located outside the UK and European Economic Area. Google provides safeguards for these transfers, such as Standard Contractual Clauses. See Google's Privacy Policy for details.

Your rights under the GDPR

You have the right to:

  • Access the personal data we, or our processors such as Google Firebase, hold about you.
  • Rectification of inaccurate personal data.
  • Erasure of your personal data (“right to be forgotten”).
  • Restriction of, or objection to, the processing of your personal data.
  • Data portability, where technically feasible.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with your national data protection supervisory authority — in the UK, the Information Commissioner's Office (ICO).

Data retention and deletion

You can clear your ride history at any time from within the app. Uninstalling DLEM removes all data stored locally by the app, but it does not delete your DLEM account.

To delete your account, either:

  • open the app and go to App settings, Data & Privacy, Delete account; or
  • follow the steps on our account deletion page, which also works if you no longer have the app.

Deletion is immediate. It removes your email address, your Google account identifier and all your sign-in sessions from DLEM’s server and, when done in the app, it also erases the app’s data on your phone. The only thing kept is the 3-year record described in “Your DLEM account”. To request deletion of data held by Firebase on Google’s servers (such as crash reports), contact us using the details below.

Children's privacy

DLEM is intended for use by ride-hailing drivers and is not directed at children. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by updating the “Last updated” date above.

Contact

Daniel Medeiros — [email protected]