Last updated: September 30, 2025

Thank you for using Fleet Companion (the “App”). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. This policy applies to the App built with Expo React Native and the connected backend services (including Supabase and Stripe).

1) Introduction

Fleet Companion helps truckers and vendors coordinate roadside services, quotes, and payments. We collect only the data necessary to authenticate users, enable core functionality (such as location-enabled jobs and photo attachments), and process subscriptions and payments. By using the App, you agree to the collection and use of information in accordance with this policy.

2) Information We Collect

We collect the following categories of information when you use the App:

• Account and Contact Information

  • Email address (for authentication, confirmations, and account communication)

  • Name (profile)

  • Phone number (profile)

  • Role selection (trucker or vendor)

• Trucker Details (when a user is a trucker)

  • License number

  • Truck model and truck number

• Vendor Details (when a user is a vendor)

  • Business address

  • Business location (geographic coordinates)

• Location Information

  • Foreground precise location (when granted) to display your position and job locations on the map

  • Background precise location (only during active “Job in Progress” sessions and only if granted) to update live locations for operational coordination. Background updates stop when a job ends or tracking is stopped.

• Service Request and Operational Data

  • Issue reports and descriptions you submit

  • Optional photos you attach to reports or jobs (stored in cloud storage)

  • Job/quote details, statuses, and timing information

• Payment and Subscription Metadata

  • Stripe identifiers (stripe_customer_id, stripe_subscription_id, stripe_payment_intent_id, stripe_transfer_id, vendor stripe_account_id) and subscription status/plan info

  • We do not collect or store full card numbers or CVV; card details are handled by Stripe

• Technical and App Configuration Data

  • Authentication session tokens (Supabase JWTs) stored on your device to keep you signed in

  • Basic UI preferences (e.g., theme/mode) stored locally on your device

We do not intentionally collect analytics, advertising identifiers, or crash analytics data in this version. If such tools are added later, this policy will be updated.

3) How We Use Information

We use your information for:

• Authentication and Account Management

  • Create and manage accounts, sign-in sessions, and role-based access

  • Verify email and guide you through onboarding and profile setup

• Core App Functionality

  • Enable location-aware features (e.g., show your location, job locations, route context)

  • Coordinate jobs between truckers and vendors, including quotes, job progress, and real-time updates

  • Allow issue reports with optional photos and location details

• Payments and Subscriptions

  • Start and manage subscriptions (e.g., Plus/Premium plans) via Stripe Checkout

  • Handle escrow-like payments, releases, refunds, and renewals via Stripe webhooks

• Safety, Security, and Compliance

  • Protect accounts and enforce database access policies

  • Comply with legal obligations and respond to lawful requests

4) Data Sharing and Disclosure

We do not sell your personal information. We share data only as needed to provide the service:

• Supabase (Authentication, Database, Realtime, Storage)

  • Used to authenticate users, store profiles and operational records, provide realtime updates, and store uploaded images

  • Data is stored on Supabase infrastructure with access controlled by authentication and row-level security (RLS)

• Stripe (Payments and Subscriptions; Stripe Connect for vendors)

  • Processes payments, subscriptions, and vendor payouts

  • Stripe receives payment details directly through Stripe-hosted flows

  • We receive Stripe identifiers and status updates via secure webhooks

  • For vendors, Stripe handles KYC/identity and banking info; we receive only account ID and status metadata

• Maps and Location Services

  • The App uses react-native-maps with device GPS (via Expo Location)

  • Map tiles/services may be provided by Google Maps or platform defaults; your device may contact map providers when maps are displayed

• Photos/Media Uploads

  • Stored in Supabase Storage, with access restricted to authorized users

• Legal and Safety

  • We may disclose information if required by law, regulation, or legal process, or to protect rights, property, or safety

5) Data Security

We use reasonable administrative, technical, and organizational measures to protect your data:

• Transport Security

  • All client–server communications occur over HTTPS/TLS

• Access Controls and Database Security

  • Authentication and authorization are enforced with Supabase Auth and database RLS rules

• Payment Security

  • Payments are processed by Stripe, a PCI DSS–compliant provider

  • We do not store full card details

• Local Storage

  • Session tokens and preferences are stored on your device

  • Local storage is not encrypted by our App; please use device protections (e.g., passcode/biometrics)

  • You can sign out to clear tokens or clear App data in device settings

No security measure is 100% guaranteed. We continuously review and improve protections.

6) Your Choices and Rights

Depending on your location, you may have rights regarding your data. We provide these controls to all users:

• Access and Update

  • Update profile details (e.g., name, phone) in the App

• Location Permissions

  • Manage foreground/background location in device settings

  • Note: Some features (e.g., job tracking) require location

• Photos/Media

  • Uploading is optional; you may deny camera/library access

• Sign Out and Local Data

  • Sign out to clear session tokens or clear App data in device settings

• Data Access/Deletion Requests

  • Contact us for access, correction, or deletion requests; we will act per applicable laws

7) Children’s Privacy

The App is for professional truckers and vendors. It is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has provided data, contact us and we will remove it.

8) Changes to This Policy

We may update this Privacy Policy for legal, technical, or operational reasons. If changes are material, we will notify you in-App or by other means. Continued use of the App after updates constitutes acceptance.

9) Contact Information

For questions, requests, or concerns about this Privacy Policy, contact us:

• Email: operations@fleetcompanion.io

• Subject line: “Fleet Companion — Privacy Request”

Appendix — Additional Disclosures for App Store/Play Store

For Google Play’s Data Safety requirements:

• Data Collected

  • Personal info: email, name, phone, role selection

  • Sensitive info (role-specific): trucker license number, truck model/number, vendor address, business location

  • Location: precise foreground location for maps; background location only during active jobs if granted

  • Photos/Media: optional images you upload for reports/jobs

  • Financial identifiers: Stripe IDs (customer/account/payment/subscription) and status; card details are not stored

• Purposes of Collection

  • Authentication, profiles, maps, job coordination, quotes, background location during jobs, and payments/subscriptions

• Data Sharing

  • With service providers only: Supabase (auth/database/storage/realtime), Stripe (payments/subscriptions/Connect), and map providers

  • We do not sell data

• Data Handling and Retention

  • Retained while your account is active or as required for operational, legal, or security reasons

  • Background location collected only during active jobs and stops when jobs end

  • You can request deletion, subject to legal obligations

• Security Practices

  • TLS in transit, database RLS, and Stripe for payments

  • Local storage (sessions/preferences) not encrypted by the App—use device protections

  • Photos stored in cloud storage with restricted access

• User Control

  • Manage permissions in device settings

  • Edit your profile in-App

  • Sign out to clear sessions

  • Contact Support for data requests