Roadial Driver app

The app processes the following data:

• Account details: the name and email address your company enters, and your phone number if your company adds it. Your sign-in account with Firebase Authentication holds your name and email address.
• Location during a shift: from the moment you tap “Aloita työvuoro” (start shift) until you end the shift, the app sends your phone’s position with its accuracy, direction, speed and time, and the time your truck stopped. It does so also when the app is in the background or the screen is locked, and the phone then shows that location is in use. Outside a shift, the app of a driver account sends no location, and Roadial’s server stores none.
• Pickup point of a job you create: if your account can create jobs (a company owner or dispatcher), creating a job in the app sends your phone’s current position as the job’s pickup point, also outside a shift. It is stored with the job.
• Shift times: when you started and ended each shift.
• Phone and push identifiers: a push token for notifications, an installation identifier that the app creates itself (not your phone’s hardware identifier), the phone’s operating system and when the phone was last active.
• App updates: when the app starts, and when you return to it if at least 30 minutes have passed since it last asked, the app asks Expo whether there is an update from Roadial. The request carries a random identifier of the app installation, which Expo’s software creates on your phone and which is not linked to your name or account, and the phone’s operating system, the app version and which update the app runs. If the app failed while starting, the next request also carries a short technical description of that error. Like any connection over the internet, it shows Expo your phone’s IP address and the usual technical details of the connection. The app adds nothing else to it.
• Usage counts per job: taps per job stage, taps while the truck is moving, how long you took to answer a job offer, missed offers and cancelled actions, with the app version. They contain no names, places or typed text, but they are linked to the job and, through it, to you.
• Messages you write in the app about a job, to your company or to Roadial’s staff.
• Crash reports: if the app fails, technical details of the error and of the phone and app at the time, such as the phone model, operating system, app version, an identifier of the app installation, and the app’s last steps before the error (for example screens opened and requests to Roadial’s server, which can include a job’s identifier). They never include your name, email address or position.

• Your company’s office and Roadial’s staff see your latest position during your shift. Roadial’s staff also see the positions recorded during a job, until they are deleted after 30 days.
• The customer sees your position for their job only, from when the job is accepted until it is completed, together with your first name, the initial of your last name, and the make, model and registration plate of your truck.
• The partner who ordered the job (for example an insurance company) sees only your latest position for that job, while the job is assigned, on its way or at the scene, together with your company’s name and phone number.

We use this data to show your company and Roadial who is on shift and where, to show the customer and the ordering partner where help is, to guide you to the job, to send you notifications about job offers and messages, to find and fix errors in the app, to deliver app updates, and to make the app quicker to use, for example with fewer taps per job.

• Google Maps Platform (Google): the map in the app and, on iPhone, the route guidance. On iPhone, during route guidance, Google’s navigation software receives your phone’s position. As Google itself declares, its map and navigation software also receives a device identifier and usage, performance and crash data.
• Firebase Authentication (Google): signing in. It holds your sign-in account with your name and email address in the United States.
• Expo: delivers notifications about job offers and messages to your phone, and receives the push token and the notification. A notification on the lock screen shows no job or customer details; those open only inside the signed-in app. Expo also delivers app updates and receives the details listed under “App updates”. Expo may process this data in the United States.
• Sentry: crash reports. They are stored in Sentry’s data centre in Frankfurt, Germany; Sentry’s agreement still allows it to process data in the United States.
• Microsoft Azure: Roadial’s own servers and server logs.

Expo, Google and Sentry may process data in the United States. Each of them states that it follows the EU–US Data Privacy Framework and uses standard contractual clauses where they are required. See “International Data Transfers” in Roadial’s privacy policy.

• Your latest position: deleted when you end the shift with “Lopeta työvuoro” or “Hätäpysäytä seuranta”. If the shift is not ended, for example because the phone switches off, it is deleted once no new position has arrived for 24 hours.
• Your positions during a job: deleted 30 days after they were recorded.
• Phone and push identifiers: deleted when you sign out, when your company removes you as a driver, or when the notification service reports that the push token no longer works.
• App updates: the installation identifier stays on your phone until you delete the app or clear its data. Expo gives no fixed period for keeping the update requests; its privacy policy says it keeps information only as long as reasonably necessary for its purposes.
• Usage counts: kept in the server logs as technical log data (see “Retention Periods” in Roadial’s privacy policy).
• The pickup point of a job you create: kept with the job for as long as your company is Roadial’s customer and up to 3 years after that.
• Shift times and messages: up to 24 months.
• Your name and email address: for as long as your company is Roadial’s customer and up to 3 years after that, also after your company removes you as a driver. Your phone number: deleted when your company removes you as a driver. Your sign-in account: deleted when your company removes you as a driver, unless the same sign-in account is still in use elsewhere in Roadial’s service, for example because you also drive for another company; then it stays for that use.
• Crash reports: kept in Sentry for at most 90 days after they arrive.

You have the rights listed under “Rights of the Data Subject” in Roadial’s privacy policy. To use them, for example to see your data or to ask for it to be deleted, write to info@roadial.com. If your company removes you as a driver, your shift ends, and your stored position, your phone number, your push registration and your sign-in account are deleted at once (the sign-in account only if it is not in use elsewhere in Roadial’s service); the rest of your data, such as your name, email address, shift times and messages, is kept for the periods above. You can change the app’s location and notification permissions at any time in your phone’s settings.

Roadial processes this data on the basis of legitimate interest (see “Legal Bases for Processing” in Roadial’s privacy policy). The interest for each use:

• Location during a shift, also when the app is in the background: your company and Roadial see who is on shift and where, the customer and the ordering partner see where help is, and the app can guide you to the job. On a driver account, the app collects location only during a shift, which starts when you tap “Aloita työvuoro”, and the phone shows when location is in use.
• The pickup point of a job you create: the job gets the place where the vehicle is picked up.
• Account details, sign-in, shift times, phone and push identifiers, and messages: you can sign in, receive job offers and messages, and carry out jobs with your company and Roadial.
• Crash reports, app updates and usage counts: the app works reliably, gets fixes quickly and becomes quicker to use.