Driver App Privacy Policy

The ShuttleSync Driver mobile application (the “App”) is provided by Naroko (Pty) Ltd, a South African company that operates the ShuttleSync shuttle operations management platform. In this policy, “we”, “us”, and “our” refer to Naroko (Pty) Ltd. For the purposes of South Africa’s Protection of Personal Information Act (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR), we are the responsible party / data controller for personal information collected through the App.

The App is used by drivers employed or contracted by shuttle operators who subscribe to ShuttleSync (each, a “Tenant”). Your Tenant is also a controller of your data under these laws — please refer to your employer’s internal privacy policy for additional information about how they handle your data.

The App collects the following categories of personal information:

2.1 Location data

The App collects your precise GPS location while you are signed in and have active shifts or trips assigned to you. Location is collected continuously, including when the App is running in the background, when your screen is locked, and when you are using other apps such as navigation. This is essential to the operation of the App — see Section 3 for the reasons.

Each location reading includes latitude, longitude, heading, speed (when available), and the time of the reading. We do not collect location data outside of your active shift periods.

2.2 Account information

Your name, email address, mobile number, employee identifier, and the Tenant you belong to. This information is provided by your Tenant when they create your driver account.

2.3 Trip and shift data

Bookings assigned to you, including passenger names, pickup and dropoff locations, scheduled times, and the trip status updates (en route, arrived, in progress, completed) that you record in the App.

2.4 Device and usage data

The model and operating system version of your device, the App version, IP address, and event logs that help us diagnose issues. We do not use third-party advertising or analytics SDKs in the driver App.

We collect and process your personal information for the following purposes:

• Dispatch coordination: your real-time location is shared with your Tenant’s dispatcher and manager so they can assign trips, coordinate between drivers, and respond to schedule changes.
• Passenger ETAs: your location is used to provide accurate estimated arrival times to the passengers you are transporting.
• Background location specifically is required because drivers routinely use navigation apps and may have the App in the background during a trip. Without background access, your Tenant would lose visibility of you exactly when it matters most.
• Trip records: to maintain an accurate history of completed trips for operational reporting, billing, and any incident investigations.
• App functionality: to authenticate you, deliver trip assignments to your device, and notify you of relevant changes.
• Service improvement and security: to debug issues, prevent fraud, and improve the App.

Our legal basis under POPIA is the legitimate operational interests of your Tenant in running their shuttle business, and the performance of the employment or services contract between you and your Tenant. Where GDPR applies, the same lawful bases apply (Article 6(1)(b) and 6(1)(f)).

We share your personal information with the following recipients:

• Your Tenant: managers, dispatchers, and authorised administrators at the shuttle operator you work for can see your live location, your assigned trips, your shift status, and your account details. They cannot see your location outside of active shifts.
• Other drivers within your Tenant: have visibility of trip details (not your location) where coordination requires it.
• Service providers that help us operate the App. We currently use Supabase (database and authentication), Vercel (application hosting), Resend (transactional email), Cirium (flight data lookups for airport transfers), Google Maps (in-app navigation links), and Sentry (error monitoring). These providers process your data on our instructions and are bound by contractual confidentiality.
• Law enforcement or regulators where we are legally required to disclose your information — for example in response to a court order or a valid subpoena.

We do not sell your personal information. We do not share your location with advertisers or third parties for marketing.

Your personal information is stored on servers operated by Supabase and Vercel. Data is encrypted in transit (TLS) and at rest. Access within the ShuttleSync platform is enforced via row-level security so that one Tenant cannot see another Tenant’s data, and only the roles within your Tenant who require it can see your records.

We retain different categories of your personal information for different periods:

• Location pings: 12 months from the time of recording, after which they are deleted.
• Trip and booking records: 7 years, to comply with the record-keeping requirements of the South African Revenue Service (SARS) and to support any operational dispute that may arise after the fact.
• Account information (name, email, phone, employment identifiers): while you are an active driver on the platform, and for 2 years after you stop driving for your Tenant.

On written request, we will delete your personal information sooner where we are not required to retain it by law (for example, we cannot delete trip records still inside the SARS retention window).

You have the following rights regarding your personal information:

• Access the personal information we hold about you
• Correct any information that is inaccurate or out of date
• Request deletion of your personal information, subject to legal retention obligations — see our Account Deletion page for the process
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator of South Africa (or your local supervisory authority if you are outside South Africa)

You can also revoke location, notification, or any other Android permission for the App at any time via your device’s system settings. Doing so will prevent the App from operating correctly, and your Tenant will lose visibility of your shift, but it is your right to do so.

The App is not intended for, and we do not knowingly collect personal information from, anyone under 18 years of age.

Your personal information is primarily stored in cloud regions selected by our service providers. Some processing may occur outside of South Africa. Where this happens, we rely on contractual safeguards provided by our service providers to ensure your data receives an adequate level of protection.

We may update this policy from time to time. Any material changes will be communicated to you in the App, and the “Last updated” date at the top of this page will be revised accordingly.

If you have questions about this policy, want to exercise any of your rights, or want to lodge a complaint, please contact us at:

privacy@shuttlesync.app

Naroko (Pty) Ltd
South Africa