REMAC Central - Privacy Policy

1. Introduction

REMAC Central is a mobile application designed for transportation and logistics operations, enabling drivers, warehouse workers, and fleet personnel to manage loads, scan documents, communicate with team members, and track work status. This privacy policy explains what data we collect, how we use it, and your rights regarding your personal information.

We are committed to protecting your privacy and handling your data in an open and transparent manner. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Google Play Store requirements.

2. Information We Collect

2.1 Account Information

When you create an account or log into REMAC Central, we collect:

• Email Address: Used for authentication and account identification
• Name: Your full name for identification within the app
• Password: Encrypted and stored securely via Auth0
• Account ID: Unique identifier linking you to your employer account
• User Role: Your role within the organization (driver, warehouse worker, etc.)

2.2 Photos and Documents

The app collects photos and documents you capture or upload:

• Load Photos: Images of cargo, delivery locations, or damage documentation
• Bills of Lading (BOLs): Scanned shipping documents
• Proof of Delivery (PODs): Signed delivery confirmation documents
• Inspection Photos: Vehicle or cargo inspection images
• Document Scans: PDF files generated from multi-page document scans

Photos and documents are uploaded to secure cloud storage (AWS S3) and associated with specific loads or work records.

2.3 Location Data

If you enable GPS tracking features, we may collect:

• GPS Coordinates: Your device location for delivery tracking and route verification
• Location History: Historical location data during active work periods
• Geofence Events: Entry/exit events at customer locations or facilities

Location tracking is optional and can be disabled in device settings. The app functions without location services, though some features may be limited.

2.4 Work Status Information

We collect work-related status information:

• Clock In/Out Times: Work session start and end times
• Work Status: Current status (On Duty, Driving, On Break, Off Duty)
• Status History: Timeline of status changes throughout the day
• Duration Tracking: Time spent in each work status

2.5 Messages and Communications

The app facilitates workplace communication:

• Direct Messages: Text messages sent to individuals
• Group Messages: Communications in group chats (warehouse teams, dispatchers)
• Message Attachments: Photos or files shared in conversations
• Read Receipts: Message delivery and read status
• Message Timestamps: Date and time of all messages

2.6 Device Information

We automatically collect device-related information:

• Device Identifier: Unique device ID for security and session management
• Push Notification Token: Firebase Cloud Messaging token for delivering notifications
• Device Model: Hardware model for troubleshooting
• Operating System: OS version for compatibility verification
• App Version: Installed app version for support purposes

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Providing App Functionality

• Authenticating your identity and maintaining your session
• Displaying your assigned loads and work orders
• Processing and storing captured documents and photos
• Enabling real-time messaging with team members
• Tracking and displaying your work status

3.2 Document Management

• Storing Bills of Lading and Proof of Delivery documents
• Associating documents with specific loads and shipments
• Making documents accessible to authorized personnel
• Maintaining audit trails for compliance purposes

3.3 Work Management

• Tracking work hours for payroll and compliance
• Monitoring load status and delivery progress
• Coordinating with dispatch and warehouse teams
• Generating work reports and analytics

3.4 Customer Support

• Troubleshooting technical issues
• Responding to your questions and requests
• Improving app performance and reliability

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties.

We share information only in the following circumstances:

4.1 Service Providers

We use trusted third-party services to operate the app:

• Auth0: Identity and authentication management - receives email and password for secure login
• Amazon Web Services (AWS S3): Secure cloud storage for photos and documents
• MongoDB Atlas: Database hosting for app data storage
• PartyKit: Real-time messaging infrastructure
• Firebase Cloud Messaging: Push notification delivery service (Google)
• Expo: App development and build infrastructure

These providers process data only as necessary to provide their services and are bound by confidentiality agreements.

4.2 Your Employer

As a workplace application, certain information is shared with your employer or authorized supervisors:

• Work status and time tracking information
• Load completion status and delivery documentation
• Photos and documents associated with loads
• Messages sent through work-related group chats

4.3 Legal Requirements

We may disclose information when required by law:

• To comply with legal obligations, court orders, or government requests
• To protect REMAC's rights, property, or safety
• To investigate potential violations of our terms of service
• To prevent fraud or unauthorized access

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Encryption in Transit

• All data transmitted between the app and our servers uses HTTPS/TLS encryption
• WebSocket connections for messaging are encrypted
• API communications are secured with authentication tokens

5.2 Encryption at Rest

• Documents and photos stored in AWS S3 are encrypted using AES-256
• Database records in MongoDB Atlas are encrypted at rest
• Sensitive credentials stored on device use platform-secure storage

5.3 Access Controls

• Authentication required for all app access
• Role-based permissions limit data access to authorized users
• Session tokens expire and require re-authentication
• Audit logs track data access and modifications

6. Data Retention

We retain your information for the following periods:

• Account Information: Retained while your account is active, deleted within 30 days of account deletion request
• Photos and Documents: Retained for 7 years for compliance and audit purposes, unless earlier deletion is requested
• Work Status History: Retained for 3 years for payroll and regulatory compliance
• Messages: Retained for 2 years, then automatically archived or deleted
• Device Information: Cleared immediately upon logout or account deletion
• Location Data: Retained for 90 days, then automatically deleted

Certain records may be retained longer if required by law or for legitimate business purposes such as legal disputes or regulatory audits.

7. Your Rights

You have the following rights regarding your personal information:

7.1 Right to Access

You can request a copy of the personal information we hold about you. Contact us at privacy@remacenterprises.com.

7.2 Right to Deletion

You can request deletion of your personal data. See our Data Deletion Policy for the process and limitations.

7.3 Right to Opt-Out

• Location Tracking: Disable location permissions in your device settings
• Push Notifications: Disable notifications in app settings or device settings
• Camera Access: Revoke camera permission (document scanning will be unavailable)

7.4 Right to Correction

You can request correction of inaccurate personal information by contacting us.

7.5 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. See our California Privacy Notice for details.

8. Children's Privacy

REMAC Central is not intended for use by individuals under 18 years of age. The app is designed for workplace use by adult employees in transportation and logistics operations. We do not knowingly collect personal information from anyone under the age of 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@remacenterprises.com. We will take steps to delete such information from our systems.

9. Permissions Required

REMAC Central requests the following device permissions:

Required Permissions:

• Camera: Required for scanning documents and capturing photos of loads, deliveries, and inspections
• Storage (Read/Write): Required for saving captured photos and documents to the device before upload
• Internet Access: Required for syncing data, uploading documents, and messaging

Optional Permissions:

• Location: Optional for GPS tracking features - can be denied without affecting core functionality
• Notifications: Optional for receiving push notifications about messages and load updates
• Microphone: Optional for video recording features

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending a push notification or email for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

12. Consent

By using REMAC Central, you consent to this Privacy Policy and our collection, use, and sharing of your information as described herein. If you do not agree with this policy, please do not use the application.