Privacy Policy

RouteLens is a fleet telematics service. It shows a business owner where their vehicles are, the journeys those vehicles have driven, and alerts about them. This policy explains what we collect, why, who it is shared with, how long we keep it, and how to have it deleted.

RouteLens is sold to businesses. In most cases your employer or the fleet operator is the controller of the vehicle and driver data described below, and RouteLens processes it on their behalf.

What we collect

Account information

Your name, email address, a hashed password, your role, and the organization and fleet you belong to. Where you are set up as a driver, this may also include a driver licence number, a commercial-licence indicator, and a numeric PIN used to identify you on a shared device.

Authentication and session data

Session tokens that keep you signed in. On a mobile device these are held in the operating system’s secure storage (Keychain on iOS, Keystore on Android), not in ordinary application storage.

Device and notification data

If you enable notifications we store a push token for your device, along with the platform, a device name, and the app version. These identify the device to deliver a notification; they are not used for advertising or tracking across other apps or websites.

Vehicle and journey data

Location and telemetry reported by tracking hardware installed in fleet vehicles: position, speed, heading, ignition state, and where the hardware supports it, odometer, fuel level and engine diagnostics. From these we derive journeys, stops, mileage, idle time and alerts such as speeding or a lost tracker signal.

The mobile app does not collect location from your phone. It requests no device-location permission. Vehicle positions come from tracking hardware in the vehicle and reach the app through our servers. Vehicle location can, however, be associated with whoever is assigned to drive that vehicle, so it may be personal data about a driver.

Usage and audit records

A record of significant actions taken in the service — who acknowledged an alert, who changed an assignment, who edited a record — kept so that a fleet can account for changes to its own operational data.

How we use it

• To operate the service: showing vehicles, journeys, reports and alerts.
• To authenticate you and keep your session secure.
• To send notifications you or your fleet have enabled.
• To maintain security, investigate abuse, and diagnose faults.
• To meet legal, tax and regulatory obligations.

We do not sell personal data. We do not use it for advertising, and we do not track you across other companies’ apps or websites.

Who we share it with

We use a small number of service providers, each for a specific purpose:

• Expo — relays push notifications to Apple and Google. It receives the push token and the notification content.
• Apple and Google — deliver those notifications to your device.
• Map providers — Google Maps Platform and OpenStreetMap serve the map and satellite imagery. Which of the two is used depends on the surface and on your organization’s configuration, and OpenStreetMap is also used if Google tiles cannot load. Your browser or app requests map tiles from those providers directly, which necessarily reveals the map area being viewed; they do not receive your account details or your fleet’s data.
• Cloud hosting — our servers and databases run on commercial cloud infrastructure.

We may also disclose data where required by law, or to protect the rights and safety of users and the public.

How long we keep it

Raw GPS data and key processed records, including journeys and operational history, are retained separately from registered user accounts for compliance and record-keeping. Deleting a user account does not delete these fleet records, even when that user is the organization’s last member.

After an account is deleted we retain a deleted-user reference so that historical records still make sense — an alert acknowledged in the past continues to show that it was acknowledged, without naming a person. That reference contains no original name, email address, licence number or credential. Retained operational records may still contain personal data; replacing a user profile does not make all historical records anonymous.

We may retain records for longer where the law requires it, or where they are needed to resolve a dispute or enforce an agreement.

Deleting your account

You can delete your account from the RouteLens mobile app, under Account, or by contacting us at [email protected].

When you delete your account:

• Your sign-in credentials are destroyed and every session is ended immediately. You will not be able to sign in again.
• Your registered profile is cleared, including its name, email address, password, licence number and PIN.
• Registered push tokens are removed, so the account stops receiving notifications.
• Records of actions taken in the service keep a deleted-user reference, as described above, so a fleet’s own history stays intact.
• Your organization, vehicles, raw GPS data and key processed records remain stored. Account deletion does not schedule their removal, including when you are the only member of your organization.

If you belong to a fleet operated by your employer, deleting your personal account does not delete the fleet’s vehicle records, which belong to that business. Requests about that data should be directed to the fleet operator.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete personal data about you, to object to or restrict certain processing, and to complain to a data-protection authority. Where your employer operates the fleet, some of these requests are best directed to them, and we will help them respond.

To exercise a right, write to [email protected].

Security

Data is encrypted in transit. Passwords are stored hashed, never in a recoverable form. Access to production data is limited to staff who need it, and significant actions are recorded in an audit trail. No system is perfectly secure, but we work to keep the risk proportionate to the sensitivity of what we hold.

Children

RouteLens is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes and contact

We will update this policy when the service changes, and will revise the date at the top. Questions and privacy requests go to [email protected].