Privacy policy
Effective November 4, 2026.
Who we are
The Goose IFTA Calculator ("Goose") is published by War Zone G International Holdings Group LLC, St. Petersburg, Florida ("we"). Questions about this policy go to support@gooseifta.com.
What we collect
Your account, if you make one: your email address, a password (stored only as a one-way hash by our sign-in provider, never readable by us), and, if you give them, your name or company and your base jurisdiction. Goose works without an account; then we collect none of this.
Your receipt photos: every fuel receipt you photograph is kept with that purchase, because an IFTA audit asks for the receipts themselves. The pages of a scanned fuel card statement are kept the same way, as receipt photos.
Your records: fuel purchases you enter, paste or scan, the addresses and dates of trips you route, miles you enter by jurisdiction, and the dates you mark quarters filed.
A fuel card statement you paste, or open as a CSV, text or PDF file, is read on your phone and is not kept, except that the pages of a scanned statement are kept as receipt photos, as above. Goose keeps the fuel purchases it finds and, for each statement, its dates and the last four digits of the cards it lists, so that the same statement read again replaces its earlier reading instead of counting twice.
Your trucks: the unit name you give each truck, its VIN if you add it, and its odometer readings. With an account they are kept in your account with your profile and sync to your other devices.
Your IFTA account number, if you type it for a state's upload file. It is kept only on this phone, and Goose puts it on the state forms and upload files it fills for you. It is not sent to our servers.
Your settings: appearance, sound and similar preferences, kept on your device.
Your plan, if you buy Goose Pro: which plan, when it started and when it renews, and the store's purchase number, kept with your account so Pro opens on every phone you log in on.
Places you save on the Map tab are kept only on this phone.
Your location, only when you allow it: showing where you are on the Drive map and the Map tab; finding truck stops, diesel, parking and services near you on the Map tab; recording a load between Start a load and End the load so its miles can be split by state, which goes on if you sign out before you end it, for the account that started the load, until that load is ended or its recording is stopped on this phone; and, during a recorded load, on its own, planning the load's route from where the truck is, listing the truck stops, parking and services ahead on that route, listing places near the truck when the load has no destination, and naming where it crossed a quarter line when you end it. Goose asks your phone's permission first, and you can turn it off in your phone's settings at any time. A recorded load's GPS points stay with that load in your records; Goose does not track you outside a load you started, or another account's load you chose to keep recording on this phone, and records nothing while it asks you.
Where it is kept
Your records are kept on your device, and stay there until you sign up for a Goose account. Once you are signed in, they are also kept in our database, hosted by Supabase, so you can use them on your other devices. Records made on the phone before you signed up go there only if you choose Add them to this account when Goose asks; if you choose Leave them on the phone, they stay on the phone for use without an account. Your receipt photos are kept the same way, in a private storage folder of your own at Supabase. Through Goose, only your own sign-in can read or change your records and photos; database and storage rules keep every other account out. Goose's operator can reach the database to run and repair the service, and does not look at your records unless you ask or the law requires it.
Who else handles it, and why
Supabase (sign-in, email confirmation, database and file hosting) handles your account, records and receipt photos to run the service.
Anthropic (Claude) receives only what you choose to send it: a photo you choose to have read (a fuel receipt, a page of a scanned fuel card statement, a rate confirmation or an ELD mileage report), the two places when you ask Goose to estimate a route, your questions when you use Ask, together with a summary of the quarter you have open, and your messages when you use Contact us, together with the app version, whether you are signed in and your base jurisdiction. Contact us never receives your records. Anthropic uses what it receives to send back the answer, not to build a profile of you. Anthropic deletes it from its systems within 30 days, except when a request is flagged for safety review or the law requires it to keep it longer, and does not use it to train its models.
Goose asks your permission before it first sends anything to Claude. To withdraw that permission, turn off Read with Claude in Settings; after that, Goose sends nothing to Claude until you say yes again.
Railway hosts Goose's own server, which passes those photos and questions to Claude for a signed-in account and sends back the answer. The server does not keep the photos, the questions or the answers; it counts how many requests each account makes in a day, to keep the service fair, and that count is cleared every day. The same server answers the Map tab and the stops on the Drive tab. It receives the area of the map you are looking at, or your position when you ask for places near you. During a recorded load that has no destination, while Goose is on screen, it receives your position, to list the places near you, and again once the truck has moved ten miles, ten minutes have passed, or signal returns after it did not come through. For a signed-in account, it receives a load's planned route, to list what is ahead on it, when Goose plans the route (when the load starts with a destination, when you change the destination, and when Goose plans it again after no signal or after the app was closed), and when the Drive tab, after Goose is opened, signal returns or you log in during a load, or the Map tab's Along my route, needs that list and the list on hand for that route is more than 30 minutes old or did not come through. It sends back the truck stops, parking and services there. The server keeps none of these. Railway, which hosts the server, keeps a standard log of each request, with the internet address, the app or browser that sent it and the time, for up to 30 days.
Address search and routing services receive the text you type into From and To, the Drive tab's destination and the Map tab's search, together with the truck's position, so that nearby results come first, and the places you pick, to find the address and route the trip; when you rebuild a quarter's miles, the stops on your rate confirmations and the towns of your fuel purchases, to place them and route the trip from stop to stop; your position while Goose is open on the Drive tab, to name the state you are in; the destination of a load and the truck's position, to plan the truck route when the load starts or its destination changes, and, until a route comes back, again after 30 seconds, 2 minutes and then every 5 minutes, when signal returns and when the app is opened, only while Goose is on screen; the point where a load crossed a quarter line, when you end it, to name the town there; and, when you end a recorded load, its GPS points, to match the load to the roads driven. Address search, and naming the state or town at a point, are answered by Photon, a public OpenStreetMap service run by Komoot. Truck routing, and matching a load to the roads, are answered by Valhalla, a public OpenStreetMap service run by FOSSGIS. The map loads from OpenFreeMap, which sees the area shown on screen. None of them receives your name, email or account; like any website, they see your phone's internet address.
Sentry receives a crash report when Goose hits an error: what went wrong and where in the app, the screen you were on, the app version, and your device model and system version. It does not include your name, email, records, the places you type or your location, Sentry does not store your IP address, and the report is used only to find and fix the problem. Sentry keeps each report for up to 90 days.
Apple or Google takes your payment when you buy Goose Pro and holds your card details under its own terms. We never see your card.
When you email a return, your phone's own mail app sends it from your own address. We do not see it.
Sponsored cards: the free plan can show a card from a trucking company (a fuel card, a factoring company, an insurer, a truck stop chain), always marked Sponsored. Cards come from Goose's own server and are chosen only by the screen you are on and the date, never by your records, your fuel, your miles or your location. Goose shares nothing about you with a sponsor; if you tap a card, the sponsor's website opens and sees what any website sees. No card shows on the File tab or the return, while a load is recording, or on Goose Pro, and you can hide any card. Goose does not use any outside advertising network or tracking, and if that ever changes, this policy will say exactly what changes before it starts, and any tracking will ask your permission first.
A credit card or bank statement you open in Goose is read on your phone. Only the fuel purchases it finds are kept, as estimated fill-ups in your records; Goose's server sends the government's weekly diesel prices to your phone and never receives your statement.
Supabase and Anthropic handle your information under data processing terms that are part of their contracts with us: Supabase processes it only on our instructions, and Anthropic may not train its models on it. Railway runs Goose's server and Sentry stores crash reports under their terms of service with us. Railway handles the data as a processor for Goose, and Sentry may use crash reports to provide, maintain and improve its own service.
Photon, Valhalla and OpenFreeMap are free public map services that answer anyone who asks; they work under their own rules, not under a contract with us. They receive only the text, points or map area described above, never your name, email or account. OpenFreeMap keeps its access logs without internet addresses and deletes its server logs after 7 days, or after up to 30 days when it is dealing with a security problem; its error logs can hold an internet address and the map address asked for.
We do not sell your personal information, and we do not share it for advertising aimed at you based on what you do elsewhere.
This website
gooseifta.com uses no cookies, no analytics and no trackers, and its fonts are served by Goose itself. Like any website, its host receives your internet address, the page asked for and your browser with each visit, and may keep them in its logs, to deliver the site and protect it from abuse.
Some pages contact Goose's services from your browser. The status page checks Goose's server and Supabase. The desk page asks Goose's server for the published rate tables; a records file you open there is read in your browser and is not sent anywhere, and if you tick Keep on this computer, it stays in that browser until you clear it. The account and delete account pages send the email and password you type to Supabase, to sign you in and carry out what you asked.
Most web browsers and some mobile operating systems include a Do Not Track ("DNT") setting you can turn on to signal that you do not want your online activity monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not respond to DNT signals. Goose and gooseifta.com do not track you over time or across other websites or apps, and no other company can do so through them.
How long we keep it
IFTA requires carriers to keep records for four years. Goose keeps your records and receipt photos until you delete them or delete your account. Removing a receipt removes its photo from this phone at once and from our storage the next time Goose uploads photos. When you delete your account, your account, records and receipt photos are removed from our database and storage at once, and from the phone you delete it on. A phone that was still signed in to the account removes its copy the next time Goose opens or syncs there. A phone that was signed out of the account before it was deleted keeps its copy until Goose is removed from it. Records of a purchase made through the App Store or Google Play are kept by Apple or Google. Receipt photos are never kept in database backups, and any backup of the database that still holds your records is gone within 7 days. Sentry keeps a crash report for up to 90 days, and Railway keeps the server's request log for up to 30 days. Without an account, Erase my records from this phone in Settings removes everything recorded on this phone without an account; we keep nothing of yours on our servers. An account that signed out on this phone keeps its records here until you log in to it and delete them, or delete the account.
Your choices and rights
You can see and change your records in the app at any time, download a copy from Settings, Preferences, and delete your account, records and receipt photos from Settings, Delete account, or without the app at gooseifta.com/delete-account.html.
Depending on where you live, you may have further rights, such as to know what we hold about you, to correct it, or to object to how it is used. Contact support@gooseifta.com and we will answer within 30 days. If we say no to a request, we tell you why, and you can ask us to look at it again.
Where your information is processed
Your account, records and receipt photos are stored in the United States, and Goose's server, sign-in and crash reports are processed there too. Reading with Claude is handled by Anthropic, a United States company. Address search and routing are handled by the public OpenStreetMap services named above, which may process what they receive outside the United States, under the laws where they run.
Questions about your information, or a request to see or correct it, go to support@gooseifta.com, from the email address of your account. We answer within 30 days, and we correct anything that is wrong or tell you why we cannot.
Security
Data travels encrypted between your device and our services. Access to records is limited by database rules tied to your sign-in. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Children
Goose is built for commercial motor carriers and is not intended for anyone under 18. We do not knowingly collect data from or market to anyone under 18. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and promptly delete that data. If you become aware of any data we may have collected from anyone under 18, contact us at support@gooseifta.com.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.
This version took effect on November 4, 2026. Earlier versions are kept, and we send one on request.