Last updated: 2026-08-21
This is a personal, single-purpose tool: it reads your own Gmail Grab ride e-receipts and checks them against Philippine LTFRB fare regulations and Grab's own publicly announced fare computation. It is not affiliated with, endorsed by, or operated on behalf of Grab Holdings Inc. or any government agency.
When you sign in with Google, this app requests the gmail.readonly scope only. That means it can read messages in your Gmail account, but it cannot send, delete, modify, or label anything. It only ever looks for messages matching a specific sender/subject/label search you control (by default, Grab's e-receipt emails).
Nothing is written to a database by default. Sign-in uses a stateless session (your Google access token lives only in an encrypted session cookie in your own browser — never on a server). The analysis endpoint fetches your matching emails, parses them in memory, runs the rule engine, returns the result to your browser, and retains nothing server-side once the response is sent. Nothing is logged to disk or written to any store by default.
The results page has a "Contribute my anonymized data" toggle, unchecked by default. If you explicitly check it and submit, a redacted copy of your data (exact addresses, driver names, booking IDs, and exact timestamps stripped) may be sent to a separate endpoint. As of this writing, that endpoint has no storage configured and intentionally rejects every submission rather than silently discarding or storing it — nothing is collected today even if you opt in. If that changes in the future, this policy will be updated first to say exactly what is stored and for how long.
The only third-party service involved is Google (for sign-in and reading your Gmail via its API). No data is shared with, sold to, or processed by any other third party.
You can revoke this app's access at any time from your Google Account's third-party access settings. Because nothing is persisted server-side, revoking access removes everything this app could access going forward — there is no server-held copy of your data to separately delete.
This is a personal project. If you have questions about how it handles your data, contact jvictorino@ateneo.edu.