Privacy Policy

iQ Transport is a fleet and corporate transportation management platform operated by NA Smart Solutions. This policy explains what information the platform collects, how we use that information, and the choices you have.

We collect the following categories of information:

• Account information — name, email address, phone number, and role (Admin, Vendor, Driver, or Employee). Accounts are created by your organization's administrator.
• Authentication credentials — passwords are processed by Google Firebase Authentication; we do not store your password in plain text on our servers.
• Profile information — optional photos, and (for drivers and vehicles) identity or compliance documents such as a driving licence, health certificate, or vehicle insurance, uploaded by you or your administrator.
• Operational data — routes, trip schedules, vehicle and driver assignments, bookings, and notifications created while using the platform.
• Home pickup location — if you choose to set your home pickup point, the app stores the map coordinates you select. The app requests location permission only so you can place this point on a map; it never tracks your device in the background.
• Camera — used only to scan the driver's check-in QR code. Scanned images are not stored.
• Push notification token — a device token from Apple/Google messaging services, used only to deliver trip and booking notifications to your device.
• Audit logs — a record of actions taken within the platform (for example, creating a trip or approving a driver), captured with the actor's email and a timestamp.
• Technical data — standard information your browser or device sends to our hosting provider, including IP address, device type, and timestamps, used to operate the service.

We do not track your device's location in the background, use advertising identifiers, or collect browsing history outside the platform.

We use the information to operate the platform: to authenticate you, route you to the portal for your role, schedule and manage trips, accept and display bookings, send relevant notifications, generate operational dashboards for administrators, and maintain an audit trail of activity.

Personal information is not sold, rented, or shared with advertisers. Information is shared only in these limited ways:

• Within your organization, according to role. Administrators see their organization's operational data; vendors see their own scope; drivers see their own schedule; employees see their own bookings and the relevant trip list.
• With service providers we rely on, strictly to operate the platform. This includes Google (Firebase Authentication, Cloud Firestore, Firebase Storage, and Firebase App Hosting), which processes data on our behalf under its own privacy and security commitments.

We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of users, the public, or NA Smart Solutions.

All traffic between your device and the platform is encrypted in transit using HTTPS. Data at rest is encrypted by our cloud provider. Access is governed by role-based authentication and server-side security rules. Uploaded photos and documents are stored in Firebase Storage with access controlled by signed download URLs.

No internet transmission or electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

Account information is retained while your account is active. Operational records (trips, bookings, notifications) are typically retained for at least 12 months for operational continuity, and audit logs for at least 24 months. We honour deletion requests within 30 days of receipt, subject to legal record-keeping exceptions.

Subject to your jurisdiction, you may have rights to access, correct, delete, port, or restrict the processing of your personal information. To exercise these rights, contact your organization's administrator for tenant-specific data, or contact us directly using the email address in section 10.

To delete your account and the personal data associated with it, see Delete your account and data, which sets out the steps, what is deleted, and what is retained.

iQ Transport is a workplace platform intended for adults and is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can remove it.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the platform after a change constitutes acceptance of the updated policy.

Questions about this privacy policy, or requests to exercise your rights, can be directed to na.smart.solutions@gmail.com. For tenant-specific issues, please also contact your fleet administrator.