Privacy Policy

1. Who is responsible for your data

The data controller is Dmytro Chaika, a private individual who develops and runs IS Fleet. Correspondence address: ul. Zawidowska 11/4, Wrocław, Poland.

For any question about how your data is handled, write to isfleet.eu@gmail.com.

Note that for work records (trips, messages, documents) the employing transport company is the controller, and Dmytro Chaika acts as a processor on its instructions.

2. What we process

We collect only what the service needs to work:

• Account data: first and last name, phone number, email, profile photo, chat language and interface language, time zone.
• Work data: trips and their addresses, trucks, documents and photos you upload, comments and ratings.
• Messages: direct, group and trip-chat messages together with their attachments.
• Technical data: push-notification token and device type (iOS/Android), presence status and last-seen time, server request logs.
• Camera and photo-library access is requested only when you upload a profile picture or a document, and is used for nothing else.

3. What we do NOT collect

• Location. The apps do not determine or transmit your position — neither in the background nor while in use.
• Payment data. The service takes no payments from app users.
• Advertising identifiers. We show no ads and share nothing with ad networks.

4. Why, and on what legal basis

• Providing the service — performance of the contract with your employer: authentication, trips, chat, notifications.
• Security — legitimate interest: protection against unauthorised access, error logs, rate limiting.
• Communication — legitimate interest: service emails such as invitations and password resets.

5. Who we share data with

Inside the service, your data is visible only to staff of your own company, according to their role.

We rely on the following infrastructure providers:

• Supabase — database and file storage.
• Render — backend hosting.
• Vercel — web application hosting.
• Twilio — delivery of one-time sign-in codes by SMS.
• Resend — delivery of service emails.
• Expo, Google FCM and Apple APNs — push-notification delivery.
• Sentry — technical error reports: stack traces and the request path. Message content, cookies and authorisation headers are not sent.

6. How long we keep it

Account data is kept for as long as the account exists. After deletion, personal data is anonymised — see section 8.

Work records (trips, documents, messages) belong to the employing company and are retained under its own policy and the record-keeping rules that apply to transport documentation.

7. Your rights

Where GDPR applies to you, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability.

To exercise any of these, write to isfleet.eu@gmail.com. You also have the right to lodge a complaint with a supervisory authority: in Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. If you live in another EU country, you may complain to the authority where you reside.

8. Deleting your account

You can delete your account yourself: in the mobile apps under Settings → Delete account, and on the web under Account Settings → the “⋮” menu → Delete account.

Deletion erases your personal data (name, phone, email, photo) and makes signing in permanently impossible. Trips and messages remain in the company history in anonymised form, as they are the employer's work records.

Full instructions are at /delete-account.

9. Children

The service is intended solely for employees of transport companies and is not directed at anyone under 16.

10. Changes

We will announce any material change to this policy in the app or by email before it takes effect.