Privacy Policy — Fleetbit Client App

About this document

This Privacy Policy explains how Fleetbit ("Fleetbit," "we," "us," or "our") — operated by Fleetbit LLC, with a registered address at 330 E 75th St Apt 35B, New York, NY 10021 — collects, uses, shares, and protects information about you when you use our client mobile app, the Fleetbit website at https://fleetbit.app, and related services that link to this policy (together, the "Service").

The Service is an on-demand marketplace that connects you ("Client") with independent truck drivers ("Drivers") for the collection, transport, and disposal of waste within New York City.

This policy applies to Clients. Drivers are covered by a separate Privacy Policy for Drivers. Website visitors are also covered by our Cookie Policy.

Effective date: 2026-04-18. Contact: [email protected].

At a glance

• We collect the information you give us when you create an account and book pickups, plus technical data your phone sends.
• We use location only while the app is open (foreground) to show nearby drivers and help drivers find your pickup address.
• We share certain details with the Driver who accepts your job (your name, pickup/drop-off address, job notes, and phone number if you provide one), with our technology vendors, and with law enforcement when we have to.
• We do not sell your personal information.
• You can delete your account and data from inside the app under Settings → Account → Delete account, or by emailing [email protected].

This is a summary only; the full terms below control.

1. Information we collect

1.1 Information you give us

• Account information: name, email address, and — if you choose to provide them — phone number and profile photo.
• Sign-in credentials: a password (stored only as a salted hash) or, if you use Google or Apple sign-in, the provider's unique user ID and the email address they share with us. We do not receive or store your Google/Apple password.
• Job details: pickup address, optional drop-off address, waste type, container size, estimated weight, scheduled time, notes to the Driver, and photos you attach.
• Communications: the content of messages you send us (support tickets, legal notices, survey replies).
• Payment details: if you pay through the Service, we (or our future payment processor) collect the information needed to process the transaction. We do not store full card numbers on our systems.

1.2 Information collected automatically

• Device and app data: device model, OS version, app version, language, time zone, crash logs and stack traces (via Sentry), and a Firebase Cloud Messaging (FCM) push token.
• Log data: IP address, approximate location derived from IP, request timestamps, and URLs/screens accessed.
• Location — foreground only: once you grant permission, the app reads your device's GPS location while the app is open in order to show nearby Drivers, geocode your pickup address, and place your pickup pin on the map. The client app does not request background location.
• Photos: when you add a photo to a job, we upload that photo to our servers. We do not read any other photos on your device.
• Ratings and feedback: the star rating and comment you leave for a Driver after a completed job.

1.3 Information from third parties

• OAuth sign-in providers (Google, Apple): basic profile data (name, email, provider user ID) as permitted by your provider settings.
• Geocoding providers (Google Maps): resolve an address you type into a latitude/longitude.

2. How we use information

We use the information we collect to:

• Create and maintain your account and verify your identity.
• Match your pickup request with an available, compatible Driver.
• Show pickup and drop-off locations, Driver ETA, and related maps.
• Process payments and issue refunds for cancellations.
• Send you operational messages — booking confirmations, Driver-on-the-way notices, receipts, service announcements — by push notification, email, or (if you give us your phone number) SMS.
• Respond to support requests and legal claims.
• Detect and prevent fraud, abuse, and violations of our Terms or applicable law.
• Improve the Service by analyzing error reports and aggregate usage patterns.
• Comply with legal obligations (tax, law enforcement requests, regulatory reporting).

3. Legal bases (for users in regions that require them)

Where applicable, we rely on the following bases:

• Contract performance: to provide the Service you request.
• Legitimate interests: to operate, secure, and improve the Service and prevent fraud.
• Consent: for optional permissions (location, notifications, marketing emails). You can withdraw consent at any time.
• Legal obligation: tax, subpoena compliance, breach notifications.

4. How we share information

4.1 With the Driver who accepts your job

When a Driver accepts your job, we share with them your first name, last initial, job notes, pickup and drop-off addresses, waste type, container size, photos you attach, and your phone number (so they can contact you about the pickup). Drivers do not receive your email address.

4.2 With service providers

We share limited data with companies that help us operate the Service:

We contractually require these vendors to protect your information and use it only to perform the service we've hired them for.

4.3 For legal or safety reasons

We may disclose information to law enforcement, regulators, or other parties when we reasonably believe disclosure is necessary to comply with law, respond to a lawful request, protect the rights, property, or safety of you, us, or others, or investigate fraud.

4.4 Business transfers

If Fleetbit is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you (via email or in-app notice) before your information becomes subject to a different privacy policy.

4.5 With your direction

Any sharing you explicitly direct — for example, leaving a public review.

4.6 We do not sell your personal information

We do not sell your personal information for money, and we do not share it with third parties for cross-context behavioral advertising. If this ever changes we will update this policy and give you an opportunity to opt out.

5. Retention

We keep your information for as long as your account is active and for a reasonable period after closure to satisfy legal, tax, accounting, fraud-prevention, and dispute-resolution obligations. Specific retention periods:

When a retention period ends we delete or anonymize the data. Anonymized data (stripped of identifiers and not reasonably re-identifiable) may be kept indefinitely for analytics and training.

6. Your choices and rights

6.1 In-app controls

• Location: turn location permission on or off in your phone's Settings. If off, you can still book pickups by typing an address.
• Push notifications: turn on or off in Settings → Notifications.
• Email marketing: unsubscribe via the link in any marketing email. Operational messages about active jobs will continue.
• SMS: reply STOP to any SMS to opt out.

6.2 Rights under U.S. state laws (California, Colorado, Connecticut, Virginia, Utah, and similar)

You have the right to:

• Know what personal information we collect, use, disclose, and — if applicable — sell or share.
• Access / receive a copy of your personal information.
• Correct inaccurate personal information.
• Delete your personal information, subject to narrow legal exceptions.
• Opt out of sale or sharing for cross-context behavioral advertising (we don't do this).
• Limit use of sensitive personal information (we only use such information to provide the Service).
• Not be retaliated against for exercising your rights.

California residents also have the right to designate an authorized agent and to receive a description of categories of information collected in the last 12 months. We honor Global Privacy Control (GPC) signals on our website as an opt-out of sale/share.

To exercise any of these rights, email [email protected] from the email address on your account, or use the in-app Privacy Requests form at Settings → Privacy. We will verify your identity before we act on your request and respond within 45 days (extendable once, by notice, to 90).

6.3 How to delete your account and data

You can delete your account at any time by:

1. In the app: Settings → Account → Delete account. Confirm by tapping "Delete."
2. By email: send a request from your account email to [email protected] with the subject "Account deletion."
3. On the web: visit https://fleetbit.app/legal/delete-account and follow the prompts.

Deletion removes your profile, saved addresses, reviews, and in-app messages within 30 days. We retain the information we are legally required to keep (for example, invoice records for the 7-year tax period) and we retain anonymized/aggregated statistics.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

• TLS 1.2+ encryption in transit.
• Encryption at rest for database and backup storage.
• Least-privilege access controls for Fleetbit personnel.
• Password hashing with industry-standard algorithms.
• Session tokens stored in platform secure storage (iOS Keychain, Android Keystore) via Expo Secure Store.
• A written information security program in line with our obligations under the New York SHIELD Act.
• A documented incident-response plan and breach-notification procedures.

No method of transmission or storage is 100% secure. If we learn of a security incident that affects your personal information we will notify you as required by law.

8. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, email [email protected] and we will delete it.

9. International users

The Service is designed for users in the United States. If you access the Service from outside the U.S., you do so on your own initiative and consent to your information being processed in the U.S., which may have different data-protection laws than your jurisdiction.

10. Third-party sites and providers

The Service may contain links to third-party sites. Our policy does not apply to them. We encourage you to read the privacy notices of any third-party services you use.

11. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email, push notification, or in-app notice before the change takes effect. The "Last updated" date at the top reflects the most recent change. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

For questions or privacy requests:

• Email: [email protected]
• Mail: Fleetbit LLC, Attn: Privacy, 330 E 75th St Apt 35B, New York, NY 10021

This document is a good-faith description of our practices. It is not legal advice. If you need legal advice about your own use of this policy, consult a lawyer licensed in your jurisdiction.