FleetCentral — Privacy Policy

This Privacy Policy explains how FleetCentral (“we,” “our,” or “us”) collects, uses, and shares your personal information.

It applies to our app, website, and associated subdomains (collectively, our “Service”). By using the Service, you agree to the handling of your personal information described in this Privacy Policy and our Terms of Service.

Definitions and key terms

The following terms are used throughout this Privacy Policy:

• Company: when this policy mentions “Company,” “we,” “us,” or “our,” it refers to Resonant Technologies Limited, based in Zambia, that is responsible for your information under this Privacy Policy.
• Country: where FleetCentral or the owners/founders of FleetCentral are based — in this case, Zambia.
• Customer: refers to the company, organization, or person that signs up to use the FleetCentral Service to manage the relationships with their consumers or service users.
• Device: any internet-connected device such as a phone, tablet, or computer that can be used to access FleetCentral and use the services.
• End user / You: a person or entity that is registered with FleetCentral to use the Services — typically a professional driver or fleet manager.
• IP address: every device connected to the internet is assigned a number known as an Internet Protocol (IP) address. An IP address can be used to estimate the general region from which a device is connecting.
• Personnel: refers to those individuals who are employed by FleetCentral or are under contract to perform a service on behalf of one of the parties.
• Personal Data: any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
• Service: refers to the service provided by FleetCentral as described in the relative terms (if available) and on this platform.
• Service provider: a third party that processes data on our instructions to help us deliver the Service — for example, our cloud host or payment processor.

What Information Do We Collect?

We collect information from you when you register on our app, create or update your account, log activity, or contact us. Depending on how you use FleetCentral, this may include:

• Name
• Phone number
• Email address
• Role (driver or fleet manager)
• Password (stored only as a salted hash; we never see your plain-text password)
• Shift cashing entries, expense records (category, amount, optional note), and wallet balance
• Receipt photos you choose to attach to an expense

We also collect limited information automatically from your device to operate and secure the Service: a device identifier issued by the operating system, a push notification token (issued by the Expo / Firebase Cloud Messaging push services), approximate device information (model, OS version, app version, language), and coarse usage and error events used to diagnose crashes and improve the app.

What we do not collect. FleetCentral does not collect your precise GPS location, does not access your contacts or phonebook, does not use advertising or remarketing trackers, and does not embed third-party maps. We do not store your card primary account number (PAN), CVV, or banking credentials.

How Do You Sign In?

You can create an account with an email and password, or sign in using Sign in with Google. When you use this option, the provider confirms your identity and shares a limited set of details with us — typically your name and email address — so we can create or match your account. We do not receive your provider password. Your use of this sign-in option is also subject to Google's own privacy policy.

When Does FleetCentral Use End User Information From Third Parties?

If you join FleetCentral through an existing organization, your fleet operator may pre-populate certain details such as your name, phone number, role, and active assignments. We use this information only to provide the FleetCentral Service to you and your fleet.

When Does FleetCentral Use Customer Information From Third Parties?

We may receive limited information from service providers we engage to operate the Service — for example, confirmation from our push delivery providers that a notification was sent, or security signals used to detect suspicious sign-ins. We do not purchase personal information about you from data brokers or social media platforms.

Do We Share the Information We Collect With Third Parties?

We share information only as needed to run the Service, and never for advertising or third-party marketing. We may share information with:

• Your fleet operator, if your account is linked to one — for the entries you submit in the course of your work (shifts, expenses, assignments).
• Cloud infrastructure providers — to host the app's servers and store your data. These providers process data only on our instructions.
• Push delivery providers — Expo Push Service and Firebase Cloud Messaging, only to deliver notifications you have enabled.
• DPO Group (DPO Pay) — once in-app payments are enabled (see below), to process payments you initiate.
• Authorities — where we are required by law, court order, or to defend our rights.
• A successor entity — if we are involved in a merger, acquisition, or asset sale, your information may be transferred, subject to this Privacy Policy.

We do not sell your personal information.

Where and When Is Information Collected From Customers and End Users?

FleetCentral collects personal information that you submit to us directly through the app. We may also receive personal information about you from your fleet operator and from the service providers described above.

How Do We Use the Information We Collect?

Any of the information we collect from you may be used in one of the following ways:

• To provide and operate core app functionality — logging shifts, expenses, and your wallet;
• To deliver push notifications you have enabled about assignments, payments, and fleet messages;
• To secure accounts, detect fraud, and investigate abuse;
• To diagnose crashes and improve the app;
• To respond to your support requests;
• To comply with applicable law (for example, tax and anti-money-laundering obligations).

How Do We Use Your Email Address?

We use your email address to operate your account: to verify your identity, send essential service messages (such as security alerts, assignment notifications, and receipts), and respond when you contact support. We do not send marketing emails and we do not use your email address for advertising or audience targeting on third-party platforms. If we ever introduce optional updates, you will be able to opt out.

How Long Do We Keep Your Information?

We keep your information only as long as we need it to provide FleetCentral to you and to fulfil the purposes described in this policy. Specifically:

• Account data — kept while your account is active, plus up to 30 days after deletion for backups.
• Financial records — kept for as long as required by applicable tax and anti-money-laundering law (typically 5–7 years), even after account deletion.
• Receipt photos — kept while the related expense is retained, then deleted on the same schedule.
• Diagnostic logs — kept up to 90 days.

When we no longer need your information and there is no legal obligation to keep it, we either remove it from our systems or depersonalize it so that we can't identify you.

How Do We Protect Your Information?

Data is encrypted in transit (HTTPS) and at rest. Your password is hashed using industry-standard algorithms and is never stored in plain text. Authentication tokens are kept on your device using Expo SecureStore, which uses the platform Keychain (iOS) or Keystore (Android). When in-app payments are enabled, card details are entered on and handled by DPO Group's secure hosted payment page and are never stored by the app. No system is completely secure, so while we use reasonable efforts to protect your information, we cannot guarantee its absolute security. If you believe your account has been compromised, contact us immediately.

Could My Information Be Transferred to Other Countries?

FleetCentral is operated from Zambia. Information collected through the app may be processed and stored by us and our service providers in countries other than your own, which may have different data-protection laws. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses, adequacy decisions, or your explicit consent where required). By using the Service, you consent to such transfer and hosting to the extent permitted by applicable law.

Can I Update or Correct My Information?

Yes. You can update or correct most of your account information directly in the app. You may also contact us to (1) update or correct your information, (2) change your communication preferences, or (3) delete your account and the personal information associated with it, subject to the legal retention obligations described above. Such updates and deletions will have no effect on information we have already shared with third parties (for example, your fleet operator) in accordance with this Privacy Policy prior to the change.

If you are an end user and wish to update, delete, or receive information held by your fleet operator about you, you may need to contact that organization directly, as they act as a controller for the work information you submit through them.

Personnel

If you are a FleetCentral worker or applicant, we collect information you voluntarily provide to us. We use this information for human-resources purposes — to administer benefits and to screen applicants. You may contact us to update or correct your information, or to receive a record of the information we hold about you.

Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger, reorganization, or other transfer of all or substantially all of the assets of Resonant Technologies Limited, provided that the third party agrees to adhere to the terms of this Privacy Policy.

Governing Law

This Privacy Policy is governed by the laws of Zambia without regard to its conflict-of-laws provisions. Your use of the app may also be subject to other local, national, or international laws. By using FleetCentral or contacting us directly, you signify your acceptance of this Privacy Policy.

Your Consent

By using FleetCentral, registering an account, or signing in, you consent to this Privacy Policy and agree to its terms.

Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by FleetCentral. We are not responsible for the content or privacy practices of those websites. When you leave our Service, this Privacy Policy no longer applies, and you should read the privacy policy of any website you visit.

Permissions We Request on Your Device

Payment Details

In-app payments are not currently enabled. When we enable them, payments will be processed by our payment provider DPO Group (DPO Pay, dpogroup.com). DPO Group will collect your payment details on its own secure hosted payment page and send us only the transaction reference, status, amount, and currency. We will not receive or store your full card number, CVV, or banking credentials. DPO Group operates under its own privacy policy at dpogroup.com/privacy-policy.

Kids' Privacy

FleetCentral is a business tool intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to Our Privacy Policy

We may change our Service and policies, and we may need to update this Privacy Policy so that it accurately reflects our Service and practices. Unless otherwise required by law, we will notify you (for example, through the Service) before we make material changes and give you an opportunity to review them. We will also revise the “Last updated” date at the top of this page. Your continued use of FleetCentral after a change takes effect means you accept the updated Policy.

Third-Party Services

We may make available, or provide links to, third-party content or services (“Third-Party Services”) — for example, our cloud host, push delivery providers, sign-in providers, and (when enabled) our payment processor. You acknowledge that FleetCentral is not responsible for the content or practices of Third-Party Services, and your use of them is subject to their own terms and policies.

Tracking Technologies

• Local / secure storage on your device — we store a small amount of data on your device, such as your authentication token and app preferences, so you stay signed in and the app remembers your settings. This data stays on your device.
• Sessions — we use sessions to keep you signed in and to identify the areas of the app you are using, so the Service functions correctly.
• Website cookie — the FleetCentral website sets a single, strictly necessary cookie to keep you signed in. We describe it in full in our Cookie Policy.

FleetCentral does not use advertising cookies, web beacons, or remarketing/retargeting technologies.

Information About General Data Protection Regulation (GDPR)

We may collect and use information from you if you are in the European Economic Area (EEA). Although FleetCentral is operated from Zambia, we apply GDPR-aligned controls as our baseline standard for all users, wherever they are located.

What is personal data?

Any data that relates to an identifiable or identified individual. This can include a name, email address, IP address, financial information, and similar identifiers. The data protection principles require that personal data be processed fairly and transparently, collected only for specified purposes, held no longer than necessary, and kept secure.

Your rights under GDPR and similar laws

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data (subject to the legal retention obligations above);
• Export your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time (this does not affect processing carried out beforehand).

To exercise any of these rights, email support@resonantt.com. We respond within 30 days. If you are unhappy with our response, you may complain to your local data protection authority.

Contact Us

If you have any questions about this Privacy Policy, contact us:

• Via Email: support@resonantt.com
• Via Phone: +260 770 785275
• Resonant Technologies Limited, Zambia