Short, because the app collects nothing.
Chauffeur has no account system, no backend, no analytics SDK, no advertising and no third-party trackers. Nothing about you is transmitted anywhere as a matter of course, because there is nowhere for it to go.
While a trip is running the app records position, speed, acceleration, rotation and — if you connect an adapter — data from your car's own systems. All of it is written to the app's private store on your device.
Location data is precise and continuous. A recorded trip shows where you drove, which for most people includes where they live and work. Treat an exported trip file accordingly.
Location updates continue while a trip is running and the screen is locked, because a drive does not stop when you put the phone down. Recording stops when you end the trip, or when the app ends it for you after a long stretch with no driving, if you have left that switched on.
With no trip in progress the app does not record. If you turn on automatic trip start it asks iOS to wake it when your position changes by a few hundred metres and then watches speed for a few seconds to decide whether you are driving; those readings are discarded unless a trip begins. That setting is off unless you turn it on.
If you turn on recording without the phone, a RaceBox Mini S or Micro records position and motion to its own memory whenever the car moves, with no phone present. The app copies that into trips the next time the box connects — iOS may wake the app in the background to do so — and then clears the box's memory. That setting is also off unless you turn it on.
If you pair a heart-rate strap, its readings are recorded as part of the trip alongside the motion data, on the device only. If you choose to import a trip's heart rate from Apple Health, the app reads heart-rate samples for the trip's duration and your resting heart rate for that day, and nothing else; it never writes to Health. Health data is never exported, never included in a report unless you attach a trip archive, and never used for advertising or shared with anyone — it is used only to show you a calm score for your own drives, which you can ignore. You can revoke the app's Health access at any time in the Health app.
The trip map fetches tiles from MapTiler, which means the map area you are looking at is visible to them as part of serving the request. Without a MapTiler key configured, or when MapTiler is refusing requests, the app falls back to Apple's basemap and the same applies to Apple. Your trip data itself is never sent to either.
Only what you attach, only when you send it. A trip archive includes the full GPS track. The diagnostic log contains no locations and no personal details. Both are shown to you in full before anything is composed.
Deleting a trip in the app deletes it. Deleting the app removes everything. There is no copy anywhere else to ask us about.