Effective date: 2026-10-04 Last updated: 2026-10-04
Norris Labs, LLC ("Aside," "we," "us") operates the Aside mobile application (the "App"), which helps self-employed gig drivers estimate quarterly taxes. This policy explains what we collect, why, and the choices you have.
By using the App you agree to this policy. If you do not agree, do not use the App.
1. Who we are
The data controller responsible for your information is:
- Norris Labs, LLC
- 3003 32nd Ave S, Ste 240, Fargo, ND 58103
- Contact: support@norrisresearchlabs.com
2. Information we collect
Information you provide directly
- Account: your email address and a password. Passwords are handled by our authentication provider (see §4) and are stored only in hashed form; we never see your plaintext password.
- Agreement records: when you create an account, we record that you accepted this Privacy Policy and the Terms of Service — the version and a timestamp — so we can show what you agreed to.
- Tax and financial records you enter: trips (date, platform, income, miles), expenses (date, category, amount, notes), amounts you set aside, your vehicle details (description, cost basis, in-service date, depreciation choices), your total annual mileage, and the income-tax bracket you select.
- Receipt photos (optional): you can attach a photo to an expense. To do so, the App accesses your camera or photo library, but only at the moment you choose to add a receipt and only after you grant permission. The image you select is uploaded and stored with your account so you can view it later; you can remove it by deleting the expense. We do not scan, analyze, or extract data from receipt images.
- Imported files: if you use CSV import, we read the file you choose to extract trip rows. The file itself is processed on your device and is not uploaded or retained by us.
Information collected automatically
- App preferences (language, light/dark theme) are stored only on your device and are not sent to us.
- The App currently includes no third-party analytics, advertising, or tracking SDKs, and does not collect device identifiers for advertising. (If analytics or crash reporting are added later, this section and the store privacy labels must be updated to describe them.)
Information we do NOT collect
- We do not collect location or GPS data.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- We do not knowingly collect information from anyone under 18.
3. How we use your information
We use your information to:
- provide the App's core function — storing your records and calculating tax estimates;
- authenticate you and keep your account secure;
- operate, maintain, debug, and improve the App;
- process subscriptions (see §4 and §5);
- communicate with you about your account or material changes to the service; and
- comply with law and enforce our Terms of Service.
We do not use your financial records for advertising or profiling, and we do not use them to train machine-learning models.
Where any such law applies, our legal bases are performance of our contract with you (providing the App), our legitimate interests in securing and improving the App, and compliance with our legal obligations.
4. How your information is stored and shared
We do not sell your data. We share it only with service providers that operate the App on our behalf, and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase, Inc. | Database hosting, authentication, and file storage | Account, all records you enter, and any receipt photos you attach |
| Apple App Store / Google Play | Subscription billing | Purchase and subscription status (payment card details go to the store, not to us) |
| RevenueCat, Inc. | Subscription management | A pseudonymous user ID and subscription status |
| Expo / EAS | App builds and over-the-air updates | App bundle delivery only — no personal records are sent |
Each provider is bound by its own terms and processes data on our instructions. Links to their privacy policies: Supabase (supabase.com/privacy), Apple (apple.com/legal/privacy), Google (policies.google.com/privacy), RevenueCat (revenuecat.com/privacy), Expo (expo.dev/privacy).
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger or acquisition (in which case we will notify you).
Where your data is processed: Canada (AWS ca-central-1, Montréal). If you are
outside Canada, your information will be transferred to and processed in Canada.
5. Subscriptions and payments
Aside offers an optional paid subscription. Payments are processed by the app store (Apple or Google), not by us. We do not receive or store your payment card number. We receive only whether your subscription is active. Billing, renewals, refunds, and cancellations are governed by the app store's terms; you manage or cancel your subscription through your app store account.
6. Your rights and choices
Regardless of where you live, within the App you can:
- Access and export your data (Settings → Data → Export your data), as CSV and JSON; and
- Delete your account and all associated data (Settings → Data → Delete account). Deletion is immediate and permanent — we keep no backup you can restore from, except the minimal consent record described in §7.
Depending on your location (for example under the GDPR or the CCPA/CPRA), you may also have rights to correction, restriction, portability, to object to processing, and to lodge a complaint with a supervisory authority. To exercise rights we cannot yet handle in-app, contact us at support@norrisresearchlabs.com. We will respond within the time the law requires.
California residents: we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA. The categories of personal information we collect are described in §2; the purposes in §3; and the disclosures to service providers in §4.
7. Data retention
We keep your information for as long as your account is active. When you delete your account, your records are removed from our live database immediately. Residual copies may persist in our hosting provider's encrypted daily backups for up to 7 days before those backups are rotated and overwritten.
Consent records (exception). To establish and defend legal claims — as permitted by the GDPR, the CCPA/CPRA, and similar laws — we retain a minimal record that you accepted our Terms of Service and this Privacy Policy: your email address, the version you accepted, and the date. This record persists even after you delete your account, and it contains no other personal information.
8. Security
We protect your data with encryption in transit, hashed passwords, and per-user database access controls so that each account can reach only its own records. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by law.
9. Children
The App is intended for adults (18+) and is not directed to children. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact support@norrisresearchlabs.com and we will delete it.
10. Changes to this policy
We may update this policy. If we make material changes, we will notify you in the App or by email before they take effect. The "Last updated" date above always reflects the current version.
11. Contact
Questions or requests: support@norrisresearchlabs.com, or 3003 32nd Ave S, Ste 240, Fargo, ND 58103.