Kilometra
en
App Store

Privacy policy

Last updated: 23 October 2026

Kilometra is the app for self-employed people in Switzerland to record business trips and keep a mileage log that meets the requirements of the tax authorities. This privacy policy describes which data we process, why, and what rights you have.

1. Controller

Responsible for data processing in Kilometra:

Gregor Scheiwiller
Dorf 1
9411 Reute AR
Switzerland
Email: gregor@kilometra.ch

2. Data we process

Account data

You sign in with Apple ("Sign in with Apple") or with an email address and password. With Apple, we receive an anonymised Apple user ID and, if you allow it, your email address. We store passwords only as a non-reversible hash. We use your email address for messages related to the app (for example confirmations, invitations, subscription notices) and never for third-party advertising.

Trip and vehicle data

You record trips, vehicles, odometer readings, maintenance reminders and details about your tax situation (for example your canton). This data is stored on your device and on our server in the EU, so that you can see it in the web view, create the tax PDF and keep it when you change devices.

Location data (optional)

If you turn on automatic detection, Kilometra records your GPS track during the trip. We store private trips without addresses and without a GPS track; only the distance is used in the calculation. Business trips, commutes and trips not yet classified get a start and destination address and the GPS track as evidence for a tax audit.

From version 1.1.8, the app sends this track, simplified to roughly 200 points at most (roughly 600 from version 1.2, so that bends look smooth on the map), to our server in the EU, so that you can see the route on the map in the web view. We do not send a track for private trips; if you later classify a trip as private, we delete its track on the server.

To show the route on the iPhone, the app asks Apple Maps for the course of the road between recorded points. The map in the web view comes from swisstopo (Federal Office of Topography). If a trip has no track, the web view looks up the start and destination address with swisstopo's place search to show them on the map; addresses outside Switzerland with OpenStreetMap's place search (Nominatim, OpenStreetMap Foundation). Only the address is sent.

From version 1.2, Kilometra places the recorded points on the road actually driven at the end of a trip, so that the route and kilometres match the road and are not cut short. To do this, the app sends the points via our server to our matching service in Switzerland (data centre in Geneva), which uses map data from OpenStreetMap. The points are neither stored nor logged there. For private trips, the app then keeps only the kilometres. If there is no network at the end of the trip, the points stay on your device until the next attempt, for at most 24 hours.

From version 1.2, you can mark a trip as private without a confirmation, also on the lock screen and in CarPlay. So that a mistaken tap can be undone, the addresses, purpose and GPS path then stay on your device only for another 24 hours; we do not send them to our server. After 24 hours the app deletes them for good.

Receipts (optional)

Receipt photos you attach to a trip (for example a fuel receipt) stay on your device. If you use the Accounting add-on with Bexio, you can send receipts to Bexio from the app or the web view. Your iPhone or browser reads the amount, date and merchant itself; the file does not leave your device for this. Only when you send it does it go via our server to Bexio. Our server keeps it only until it has been transferred.

Calendar (optional)

If you allow calendar access, we read your appointments only to suggest a suitable trip purpose. Access is read-only, and the app never sends calendar entries on its own. If you accept a suggestion, the title is saved as the purpose of the trip and synced like any other trip. So it is up to you whether an appointment title reaches our server.

Company suggestions

When you classify a business trip, the app suggests companies at the destination from the commercial register. To do this, it queries the federal government's public company search (zefix.ch) with the place or your search term, without name, account or trip data.

Crash reports (Sentry)

If the app crashes, we send a crash report to our service Sentry (Functional Software Inc., data stored in the EU). The report contains no trip content, only technical information about the crash (stack trace, device model, app version).

3. Purposes of processing

4. Where your data is stored

Trips and vehicles are stored on your device and, encrypted, on our server. The server and database run in Frankfurt (Germany, EU) and are provided by our infrastructure partners Vercel Inc. and Neon Inc. Your trips and vehicles are not transferred to the USA.

We run road matching (see location data) and the vehicle connection on our own server at Infomaniak in Switzerland (data centre in Geneva).

If you use the vehicle connection (currently in testing, for BMW via BMW CarData), this server receives your vehicle's data (odometer and position), turns it into trips and stores them in the database mentioned above. We keep the raw data received on this server for 14 days so that we can check recording errors; after that it is deleted. You set up the connection with BMW yourself and can revoke it there at any time.

5. Disclosure to third parties

We do not sell or rent your data. Data is shared only with the following service providers, who process it on our behalf:

Only if you set it up yourself is data also shared with:

For trips that come directly from your vehicle, we determine the address from the start and destination coordinates so that you can classify the trip. To do this, we send these coordinates to the federal geodata service (geo.admin.ch, Federal Office of Topography swisstopo, Switzerland), without name, account or licence plate. This happens before you classify the trip. If you mark it as private, we delete the address and coordinates.

6. Retention period

Your trips and vehicles remain stored as long as you use Kilometra, even after you cancel your subscription. This way you can still show your mileage log in a later tax audit. If you do not sign in for 24 months and no new trips arrive, we delete your account with all data. As long as a subscription is active, we never delete anything. Before that, we send you two warnings by email, 30 and 7 days before deletion; signing in once is enough to keep the account. Business records generally have to be kept for 10 years, so save your mileage log in good time.

You can delete your account, and with it all data on our server, at any time in the app under Settings → Delete account or by email to gregor@kilometra.ch. Deleted vehicles stay in the bin for 30 days. Crash reports are deleted automatically after 90 days, raw data from the vehicle connection after 14 days.

7. Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

To exercise any of these rights, write to us at gregor@kilometra.ch. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or with the data protection authority of your country of residence.

8. Security

We use standard technical and organisational measures to protect your data: encrypted transfer (TLS), encrypted storage at our database provider, access control and regular security updates.

9. Cookies and tracking

The app uses no cookies and no third-party tracking. This website (kilometra.ch) uses no analytics cookies, only the browser mechanisms technically required to run it. The web view (app.kilometra.ch) stores your sign-in and language setting in your browser's storage so that you stay signed in.

10. Changes to this policy

We update this privacy policy when our data processing changes. You can always find the current version at kilometra.ch/en/privacy.

11. Contact

If you have questions, you can reach us at any time at gregor@kilometra.ch.

This is a translation. In case of discrepancies, the German version prevails.