Bitrack · Fleet telematics for iOS and Android
This policy explains how [Legal entity name] ("we", "us"), registered at [registered address], handles personal data in the Bitrack mobile app for iOS and Android.
Bitrack lets fleet operators monitor vehicles fitted with our GPS tracking hardware: live position on a map, trip and route history, engine and ignition status, event alerts, work orders, and — on supported hardware — dashcam video and intercom audio.
It covers the mobile app only. Separate agreements govern our web platform, our tracking hardware, and the contracts we hold with business customers.
Bitrack is sold to organisations, not to individuals. If you use Bitrack because your employer or fleet operator gave you an account, then that organisation decides which vehicles are tracked, who can see the data, and how long it is kept. They are the controller of that data; we process it on their instructions under our service agreement with them.
This matters for requests about your own data: we will usually refer you to your fleet administrator first, because we are not permitted to alter or release a customer's data on our own initiative. Section 11 explains how to make a request.
Your name, email address, phone number, the company you belong to, and your assigned role and permissions. This is supplied when your account is created — by you or by your fleet administrator — and is used to sign you in and to decide which vehicles and features you can access.
Your email address and password are sent to our servers over an encrypted connection when you sign in.
If you turn on biometric sign-in, your credentials are stored on your device only, in the iOS Keychain or the Android Keystore, so the app can sign you in after Face ID, Touch ID or a fingerprint check. Your fingerprint and face data are handled entirely by your device's operating system — they are never sent to us and we cannot access them. Turning biometric sign-in off, or signing out, removes the stored credentials from the device.
Position, speed, heading, ignition and engine status, trip and route history, mileage, and event alerts for the vehicles your account is allowed to see.
This data is produced by the GPS tracking device installed in the vehicle and transmitted to our servers by that device. The app reads it from our servers; it is not collected from your phone, and Bitrack never asks for location permission.
Where a vehicle is assigned to a named driver, this data can indirectly reveal that person's movements during working hours. Fleet operators are responsible for informing their drivers and for having a lawful basis to monitor them.
Maintenance and job records linked to a vehicle, together with any photos you attach as evidence. Photos are taken with the camera or chosen from your photo library at the moment you attach them, and are uploaded to our servers as part of the work order. The app does not scan, index or read your photo library in the background.
On vehicles fitted with a supported dashcam, the app can stream live video from the vehicle and open a two-way intercom with the cabin. Your microphone is active only while an intercom session is open, and the audio is used solely to carry that conversation. These streams are delivered through our dashcam provider (see section 8).
Your language preference and notification settings are stored locally on your device.
When the app talks to our servers, those servers record standard technical information such as IP address, request time, app version and operating system version. We use it to deliver the service, diagnose faults, and detect abuse.
Bitrack asks for a permission only at the point where a feature needs it. You can refuse any of them, or withdraw them later in your device settings; the rest of the app keeps working.
| Permission | Why | When it is used |
|---|---|---|
| Face ID / biometrics | Sign in without retyping your password | Only if you enable biometric sign-in |
| Camera | Take work order evidence photos | Only when you tap to add a photo |
| Photo library | Attach an existing photo to a work order | Only when you choose a photo |
| Microphone | Speak to the vehicle cabin over the dashcam intercom | Only while an intercom session is open |
Bitrack does not request access to your location, contacts, calendar, health data, or files other than the photos you pick yourself.
The login screen may offer Continue with demo. Demo mode signs you into a sample dataset so the app can be evaluated without an account. It creates no account, is not linked to any real vehicle or person, and sends no personal data to our servers. Leaving demo mode clears the sample session from the device.
We do not use your data to build advertising profiles, and we do not make decisions about you by automated means that produce legal effects.
Data is stored on servers located in [country / region]. Some of the providers listed above operate globally, so data may be processed outside that country; where that happens we rely on the safeguards required by applicable law.
We keep account data for as long as your organisation's account is active. Telematics and trip history are retained for [retention period], work order records for [retention period], and dashcam recordings for [retention period], unless your organisation has agreed a different period with us or the law requires otherwise. After that, data is deleted or irreversibly anonymised.
Traffic between the app and our servers is encrypted in transit with TLS. Credentials kept for biometric sign-in are stored in the iOS Keychain or Android Keystore rather than ordinary app storage. Access to fleet data is restricted by the role and permissions your organisation assigns, and our administrative access is limited to staff who need it.
No system is perfectly secure. If a breach affects your personal data, we will notify the affected organisations and the relevant authority as required by law.
Subject to the law that applies to you — including Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and the GDPR where it applies — you may ask to access your personal data, correct it, delete it, restrict or object to its processing, or receive a copy in a portable format.
Because your organisation controls the fleet account, start with your fleet administrator. You can also write to us at [privacy@email] and we will respond within [30] days, forwarding the request to the controlling organisation where we are not permitted to act alone.
You can also, at any time: withdraw the camera, photo library or microphone permission in your device settings; turn off biometric sign-in inside the app; or stop using the app and ask your administrator to close your account.
Bitrack accounts are not created from inside the app by the general public. They are issued by [Company] to organisations that purchase our GPS tracking hardware, and additional users are added by that organisation's administrator.
To have an account and its personal data deleted, ask your fleet administrator, or email [privacy@email] from the address on the account. We will delete the account and associated personal data within [30] days, except where we must retain records to meet a legal or accounting obligation.
Bitrack is a workplace tool intended for adults. It is not directed to children, and we do not knowingly collect personal data from anyone under 17. If you believe a child's data has reached us, contact us and we will delete it.
We may update this policy as the app changes. The effective date at the top always reflects the current version. For material changes we will give notice in the app or by email to account administrators before the change takes effect.