Truck Assist Privacy Policy

Version of 31 August 2026

Who processes your data

Truck Assist is developed and operated by an individual, Yevhen Bashchak. That person is the data controller under the GDPR: the law does not require a company for this. Send questions about this policy, or requests to exercise your rights, to privacy@truck-assist.top.

The app is free. It contains no advertising, no paid features, no in-app purchases and no donations, and we earn nothing from your use of it.

Data is stored on a server in Germany (Hetzner Online GmbH, Nuremberg) — inside the European Economic Area.

What we collect, and why

Your account

Data	Why
Name, e-mail, password (stored only as a bcrypt hash)	Creating and protecting your account
Phone number, profile photo, company name	Optional profile fields
Google or Apple account identifier	Only if you sign in with one of them instead of a password

Location

This is the core of the product: the app warns you by voice about jams, border queues, road works and weather ahead of you on your route, and it cannot do that without knowing where you are and which way you are going.

Data	Why
Coordinates, speed, heading, time of the last fix	Selecting what is ahead of you; announcements are held back while you are stationary
The same, in the background — while the app is closed and the screen is off	Without it the operating system freezes the app and the radio falls silent exactly while you are driving
An anonymised movement trace (`track_cells`)	Finding new corridors. Recorded under a pseudonym that changes every week — `sha256(driver + week + secret)`, irreversible and not stable across weeks. Your driver id is not stored with it.

Background collection is requested separately, and the app explains why before asking. You may refuse: everything else keeps working, but the radio will go quiet whenever the screen is off. You can withdraw the permission in your system settings at any time.

Voice messages

When you hold the button and speak, the recording (up to 12 seconds) is sent to the server so that other drivers on the same stretch hear it in your own voice. The recording is deleted 15 minutes after the event stops being current — from 90 minutes for a jam to 14 days for road works. No speech recognition is performed; the recording is never turned into text.

Reports and chat

Reports (type, place, and your confirmations of other drivers' reports) and chat messages are stored so other drivers can see them. A report is kept for 30 days after it expires, which is what the reliability calculation needs.

Driver profile

Filling in the driver profile is optional.

Data	Why
Licence categories and their expiry dates, Code 95 (CPC), ADR, forklift, years of experience, work history	Your qualification card

Document scans are not being collected. Uploading licences, medical certificates, criminal record certificates and passports is switched off in the app. These are special categories of data under GDPR art. 9, and while there is neither a human review of them nor a party that needs them, we do not ask for them. If that ever changes, this policy changes first, and each document will be uploaded only with your separate explicit consent.

The driver profile is not published anywhere and is not shared — only you can see it.

Vehicle profile

Height, weight and axles, so routes are calculated for a truck rather than a car.

Technical data

A device token for notifications (Firebase / APNs) and the platform. The server keeps request logs, which contain your IP address.

Who we share it with

Who	What	Why
Google (Firebase Cloud Messaging), Apple (APNs)	Device token and the notification text	Delivering push notifications
OpenFreeMap	Your IP and the map area you are viewing	Map tiles
FOSSGIS (Valhalla, `valhalla1.openstreetmap.de`)	Start and end coordinates of a route, and your vehicle dimensions	Route calculation
Hetzner Online GmbH	All data, as the host	Running the server

We do not sell your data, do not pass it to advertising networks and do not use it for profiling outside the app. An internal reliability score for your reports is computed but shown to nobody — not to you and not to other drivers.

How long we keep it

Data	Retention
Voice recording	15 minutes after the event expires
Report	30 days after it expires
Anonymised trace	The pseudonym changes weekly
Account, profile, chat	Until you delete your account

Your rights

Under the GDPR you have the right to:

obtain a copy of your data;
correct inaccurate data — the profile is editable in the app;
delete your account together with your data — Account → Settings → Delete account;
restrict processing, or object to it;
withdraw consent for background location, in your system settings;
lodge a complaint with a data protection supervisory authority.

Send requests to privacy@truck-assist.top.

Children

The app is intended for professional drivers and is not directed at anyone under 18. We do not knowingly collect children's data.

Security

All traffic between the app and the server goes over HTTPS. Passwords are stored as bcrypt hashes and cannot be recovered. Access to the server is restricted.

Changes

We will announce material changes to this policy in the app. The version date is at the top.