Privacy Policy
This Privacy Policy explains how QRAALYS ("we", "us", "our") collects, uses, shares, and protects information about users of the QRAALYS fleet management platform (the "Service"). By creating an account or using the Service, you acknowledge that you have read this policy.
1. Information we collect
Account information
When you register or your administrator creates an account on your behalf, we collect your name, email address, organisation, role, and contact details.
Fleet telemetry
The Service receives location, ignition, fuel level, speed, and other vehicle telemetry from GPS devices installed in vehicles you operate. Where these devices are assigned to identifiable drivers, this data may constitute personal data under applicable law.
Usage and security
We log authentication events, IP addresses, browser/user-agent strings, and actions taken in the Service for security and audit purposes.
Mobile applications
QRAALYS publishes three Android applications: QRAALYS Operator
(com.qraalys.fleet) for fleet operators and managers,
FleetChat (com.qraalys.fleet.lite), a chat-focused
companion app for fleet operators, and QRAALYS Driver
(com.qraalys.driver) for drivers. When you install and use these
apps, the following additional information may be collected:
- Camera (driver app only). The driver app uses your device camera to capture photos of vehicle defects, proof of delivery, vehicle handovers, and similar trip artefacts. Photos are uploaded to the Service and stored against the related record. The app does not access the camera in the background or without an in-app action initiated by you.
- Precise (GPS) location (driver app only). With your consent, the driver app uses your device's GPS to record your location while you have an active trip in progress. Location is sampled at intervals and uploaded as part of trip telemetry. We do not collect your location when no trip is active, when you are signed out, or in the background outside of an active trip.
- Push notification token (Operator and FleetChat apps only). When you enable notifications, these apps register a Firebase Cloud Messaging (FCM) token with the Service so we can deliver chat and fleet notifications. The token is stored against your account and is revoked when you sign out, uninstall the app, or disable notifications in your device settings.
The Operator and FleetChat apps do not request camera or location permissions. The Driver app does not register for push notifications. You can withdraw any of these permissions at any time from your device's app settings; some features will be unavailable if you do.
2. How we use information
- To operate the Service — show you your fleet, generate reports, deliver alerts, and bill your organisation.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations and respond to lawful requests.
- To improve the Service and develop new features. Aggregated, anonymised data may be retained indefinitely for this purpose.
3. Sharing
We do not sell personal data. We share information with:
- Your organisation — administrators of your organisation can view records associated with your account.
- Service providers — infrastructure, email delivery, payment processing, and similar vendors bound by data-processing terms.
- Authorities — when required by law or to protect rights, property, or safety.
4. Retention
We retain account data while your account is active and for a reasonable period afterwards to satisfy legal, accounting, and dispute-resolution requirements. Telemetry retention is configurable per organisation.
5. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to certain processing. Contact your organisation administrator first; for unresolved requests, contact us at privacy@qraalys.com.
6. Security
We use industry-standard safeguards including TLS in transit, encrypted storage, hashed passwords, role-based access controls, and audit logging. No system is perfectly secure; you are responsible for safeguarding your credentials.
7. International transfers
Data may be processed in countries other than the one where you reside. We put in place appropriate safeguards for such transfers as required by law.
8. Changes to this policy
We may update this Privacy Policy. When we do, we increment the version number and prompt you to accept the new version on your next sign-in. Continued use after acceptance constitutes acknowledgement of the change.
9. Contact
Questions about this Privacy Policy: privacy@qraalys.com.