Summary: Iron Route GPS collects location data to provide truck navigation, toll optimization, and route planning. We do not sell your personal data. You control your data and can request deletion at any time.
1. Introduction
TruckerProfit Inc. ("Company," "we," "us," or "our"), a Delaware C-Corporation, operates the Iron Route GPS mobile application and web service (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Iron Route GPS, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, and password when you create an account.
- Vehicle Information: Vehicle type, height, weight, length, number of axles, and hazmat classification for accurate truck routing.
- Payment Information: When subscribing to Pro or Fleet plans, payment is processed by Stripe Inc. We do not store credit card numbers on our servers.
- Fleet Information: For Fleet plan users, driver names, vehicle assignments, and organizational details.
- Support Communications: Information you provide when contacting customer support.
2.2 Information Collected Automatically
- Precise Location Data: GPS coordinates collected while the app is in use to provide navigation, route optimization, and toll calculation. Location is collected in the foreground and, with your explicit permission, in the background for fleet tracking features.
- Route History: Start and end points, waypoints, routes taken, distance, and duration.
- Device Information: Device model, operating system version, unique device identifiers, browser type, screen resolution, and language preferences.
- Usage Data: Features used, screens viewed, search queries, interaction patterns, and app performance metrics via Google Analytics 4 (GA4).
- IFTA Mileage Data: Miles traveled per state/jurisdiction for tax reporting purposes.
- Network Information: IP address, network type (Wi-Fi/cellular), and connection quality.
2.3 Information from Third Parties
- Geoapify: Map tiles and geocoding data.
- TollGuru: Toll calculation data based on routes and vehicle type.
- OpenWeatherMap: Weather data along your route.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|
| Truck-specific navigation and routing | Location, vehicle dimensions | Contract performance |
| Toll cost calculation and optimization | Location, route, vehicle type | Contract performance |
| Weather alerts along route | Location | Contract performance |
| IFTA mileage tracking | Location, state border crossings | Contract performance |
| Fleet tracking (Fleet plan) | Real-time location, driver identity | Contract performance |
| HOS (Hours of Service) timer | Drive time, duty status | Contract performance |
| Police/hazard alert system | Location, user reports | Legitimate interest |
| Service improvement and analytics | Usage data, device info | Legitimate interest |
| Subscription billing | Payment info (via Stripe) | Contract performance |
| Customer support | Account info, communications | Contract performance |
| Push notifications (route alerts, weather) | Device token, location | Consent |
4. Data Sharing and Disclosure
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
We may share your information only in the following circumstances:
- Service Providers: Third-party companies that help us operate the Service (Supabase for database hosting, Stripe for payment processing, Geoapify for mapping, TollGuru for toll calculations, OpenWeatherMap for weather data, Google Analytics for usage analytics). These providers are contractually obligated to protect your data.
- Fleet Operators: If you are a driver on a Fleet plan, your real-time location and route information is shared with your fleet administrator.
- Legal Requirements: When required by law, subpoena, court order, or governmental regulation.
- Safety: To protect the rights, property, or safety of TruckerProfit Inc., our users, or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. You will be notified via email or prominent notice in the app.
5. Data Retention
- Account data: Retained while your account is active and for 30 days after deletion request.
- Route history: Retained for 12 months, then automatically archived.
- IFTA mileage records: Retained for 4 years per IRS/DOT requirements.
- Analytics data: Aggregated and anonymized after 26 months (per GA4 default).
- Payment records: Retained for 7 years per tax and accounting requirements.
- Location data: Real-time fleet location data is retained for 90 days. Historical route data follows route history retention.
6. Data Security
We implement industry-standard security measures to protect your data:
- All data transmitted between the app and our servers uses TLS 1.3 encryption.
- Passwords are hashed using bcrypt with salt.
- Database access is protected by Row Level Security (RLS) policies.
- API keys are stored server-side and proxied through secure functions.
- We conduct regular security audits of our codebase and infrastructure.
- Payment processing is handled by PCI DSS Level 1 compliant Stripe.
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.
7. Your Rights and Choices
7.1 All Users
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate personal data.
- Deletion: Request deletion of your account and associated data.
- Location Permission: You can revoke location access at any time through your device settings. Note: Core navigation features require location access to function.
- Push Notifications: Disable via device settings at any time.
- Analytics Opt-Out: Disable analytics data collection in app settings.
7.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected.
- Right to Delete: Request deletion of personal information collected.
- Right to Opt-Out of Sale: We do not sell personal information. No opt-out is necessary.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Limit Use of Sensitive Personal Information: You may request we limit the use of precise geolocation data to what is necessary for the Service.
To exercise these rights, contact us at privacy@truckerprofit.com or call (551) 998-2524.
7.3 European Economic Area (EEA) / UK Residents (GDPR)
If you are in the EEA or UK, you have the following rights under GDPR:
- Right of access, rectification, erasure, restriction of processing, data portability, and objection.
- Right to withdraw consent at any time (where processing is based on consent).
- Right to lodge a complaint with your local data protection authority.
Our lawful bases for processing are: contract performance, legitimate interests, and consent (as detailed in Section 3).
8. Children's Privacy (COPPA Compliance)
Iron Route GPS is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@truckerprofit.com. If we discover that a child under 13 has provided us with personal information, we will delete such information from our servers promptly.
Iron Route GPS is a commercial trucking tool designed for professional drivers who are 18 years of age or older. The app's age rating reflects this professional use case.
9. International Data Transfers
Your data may be transferred to and processed in the United States, where our servers are located. If you are accessing the Service from outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for any international data transfers.
10. Third-Party Services and Links
The Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
Third-Party SDKs and Services Used:
| Service | Purpose | Privacy Policy |
|---|
| Supabase | Database, authentication | supabase.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Geoapify | Maps, geocoding, routing | geoapify.com/privacy-policy |
| TollGuru | Toll calculations | tollguru.com/privacy-policy |
| OpenWeatherMap | Weather data | openweather.co.uk/privacy-policy |
| Google Analytics 4 | Usage analytics | policies.google.com/privacy |
11. Push Notifications
With your consent, we may send push notifications regarding route updates, weather alerts, police alerts, HOS reminders, and service updates. You can opt out of push notifications through your device settings at any time.
12. Cookies and Tracking
The web version of Iron Route GPS uses essential cookies and local storage for:
- Session management and authentication
- Saving your vehicle preferences and route settings
- Caching route data for offline access
We use Google Analytics 4 which may set cookies. You can disable analytics in app settings or via your browser's cookie settings.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. For material changes, we will provide notice via email or in-app notification at least 30 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
14. Contact Us