LogiDash Driver privacy policy

LogiDash Driver (com.logidashflow.driver) is published by Carla Santos Neves Lda, a company registered in Portugal and trading as LogiDash. Contact us at privacy@logidashflow.com.

You use this app because a transport company asked you to for a delivery it arranged. That company decides that the delivery is tracked, which vehicle carries it, when tracking starts and stops, and who may see it. Under the GDPR, it is the controller of the position and delivery data. LogiDash processes that data on its behalf.

If you are an on-board courier, the chain has one more link. You work for a courier supplier, and it is your employer who assigns you the job and gives you the tracking link. The transport company that arranged the shipment still decides that it is tracked and who may see the position, and is still the controller. Neither it nor LogiDash employs you or instructs you directly; your employer does, and it is your employer who is responsible for telling you that a job is tracked before you accept it.

Questions about why you are being tracked, who can see your position or a request concerning delivery data should therefore be addressed to that transport company. If you send the request to us, we will pass it to the company. LogiDash is the controller for crash diagnostics and the notification token described below.

While a delivery is active:

• precise position — latitude and longitude;
• position accuracy, altitude, speed and direction of travel;
• motion and activity state, tracking event and odometer value;
• the device's battery level and charging state;
• the time each position was recorded; and
• the vehicle registration entered for the delivery, the delivery tracking token and a vehicle identifier derived from that registration.

Positions are normally recorded about once a minute, or once every two minutes depending on the delivery configuration, and sent to the LogiDash platform over an encrypted connection. Precise location is required for the app's core tracking function; without location permission, the delivery cannot be tracked.

The app does not ask for your name, email address, phone number or password and does not create an account for you. A link identifies the delivery rather than the driver. The platform stores the position trail with the vehicle and delivery, not a driver name. The transport company can nevertheless connect that vehicle and delivery to you through its own records.

While the app is installed:

• crash diagnostics if the app fails, including device model, operating-system version and the place in the code where the failure occurred, through Firebase Crashlytics; and
• a Firebase Messaging notification token so operational messages about a delivery can reach the device.

The app does not collect an advertising identifier, show advertising or use data for advertising or marketing.

The camera is used to scan a QR code that opens a delivery and, when you choose, to photograph transport paperwork for that job. The QR image is not stored or transmitted. A photograph or file selected for a job is uploaded with basic file information and is shared with the authorised transport company and its customer as part of that delivery.

Uploading a document is optional. The app does not read other photographs or files from the device unless you select them.

Your precise position and motion state are collected and sent while the app is in the background, when the screen is off and when the app is not in active use. This is necessary to provide continuous tracking while you drive.

Android shows a permanent foreground-service notification while tracking is active. Tracking is tied to a delivery: it starts for that delivery and stops when the delivery ends. The app is not intended to track you when no delivery is active.

The app detects whether the vehicle is moving so it can send fewer positions while stopped, saving battery and mobile data. This is not used to assess driving behaviour.

The last position, settings and an offline location buffer may be kept on the device so tracking can continue through a network outage and synchronise when coverage returns. Removing the app removes that local data.

Delivery data is used only to:

• provide live shipment visibility and route history;
• show delivery progress to authorised operations staff;
• share that progress with the customer waiting for the goods;
• attach selected transport paperwork to the job; and
• operate, secure, diagnose and support the service.

Position and delivery data may be seen by authorised staff of the transport company, its customer for that delivery, and LogiDash staff only where necessary to operate or repair the service. Cloud hosting, storage, notifications and diagnostics use Google Cloud and Firebase as service providers. We do not sell this data, share it for advertising or use it to build advertising profiles.

Data is transmitted using encrypted HTTPS connections. Delivery links and tokens restrict the app to the assigned job, customer data is separated by organisation, and role-based controls limit access to tracking and documents.

The LogiDash platform runs on Google Cloud in the European Union. Firebase services may process diagnostics and notification data outside the EU under the safeguards Google provides.

On-board courier work crosses borders by definition. If you carry a shipment to another country, the app records your position where you are, including outside the European Union, and sends it to the same European servers. While you are in the air with the phone switched off the app reports nothing, and the gap that leaves in the record is expected rather than a fault.

Position history is deleted twelve months after it is recorded. The period was set against the one year during which a claim concerning a road carriage can generally be brought under Article 32 of the CMR convention, and the same twelve months is applied to every job the app records, including air-carried courier work to which that convention does not apply. Each tracking record carries a deletion date and the database removes it automatically, normally within about one day after the twelve months expire. The same period applies to the route trail, tracking-session summary and last live position.

Crash reports follow Firebase Crashlytics' retention period, which is 90 days by default. Notification tokens are retained only while needed to deliver notifications and are replaced when Firebase refreshes them. Uploaded documents and their operational records are retained by the transport company for its contractual and applicable legal retention periods, then deleted or anonymised.

Under the GDPR, you may request access, correction, deletion, restriction or portability and may object to processing. Address delivery-data requests to the transport company that assigned the job. You can also email privacy@logidashflow.com; we will forward requests for controller-held data and tell you when we have done so. Include the delivery reference and, where possible, the vehicle registration -- or, if you are a courier, the flight number -- but do not send the tracking token.

You may complain to a supervisory authority. In Portugal, this is the CNPD ( www.cnpd.pt).

If you are an employee, location during working time is also regulated by employment law. Your employer's obligations are separate from ours. The app is designed to record position only during an active job, not as general monitoring of the working day.

For an on-board courier, your employer is the courier supplier you work for, which is a separate company from the transport company that arranged the shipment and from LogiDash. Questions about being tracked as a condition of your work belong with that employer.

This app is a working tool for professional drivers and on-board couriers. It is not intended for, and must not be used by, anyone under 16.

If this policy changes materially, we will update the date above and ask the transport company to inform affected drivers where appropriate, and to ask its courier suppliers to inform affected couriers -- since it is your employer, not us, who reaches you. Contact Carla Santos Neves Lda at privacy@logidashflow.com.