Privacy Policy

Who we are

NileTrack GPS (“we”, “us”) provides a fleet-tracking service for businesses that operate vehicles fitted with GPS tracking hardware. The Android app is a secure wrapper around the same dashboard served at niletrackgpss.duckdns.org — it displays data recorded by tracking devices your organisation owns.

Accounts are not self-registered. Your fleet administrator creates the account and decides which vehicles it can see. If you use NileTrack as an employee or contractor of such an organisation, that organisation decides what is tracked and for how long; we process the data on its behalf.

What we collect

Account information. Your name, email address, phone number (if provided), password, and the account settings and preferences stored against your profile — language, theme, display density, and the notification types you have enabled.

Vehicle telemetry. Location, speed, heading, ignition state, fuel level, mileage, alarms, and similar readings are transmitted by the GPS tracking devices installed in your organisation’s vehicles, together with each device’s identifier and reporting timestamps. This data comes from the tracking hardware, not from your phone.

Your device’s location — only when you ask for it. The Monitoring map has a “show my location” button. Tapping it asks Android (or your browser) for your current position and centres the map there, so you can see where you are in relation to your vehicles. Your position is used on your device to draw the map and nothing else: it is never sent to our servers, never stored, never attached to your account, and never shared with anyone. Nothing happens until you press the button, and if you decline the permission every other part of the app continues to work.

Push notification registration. If you allow notifications, Google’s Firebase Cloud Messaging issues a token identifying this installation of the app. We store it on your user profile so alerts can be delivered to your device, and remove it when you sign out.

Advertising data (Android app only). The Android app shows a small banner advertisement served by Google AdMob. To serve and measure it, the AdMob SDK collects your device’s advertising ID, approximate (coarse) location derived from your IP address, device and app information, and how you interact with the ads (views and taps), and may report crashes and diagnostics of its own. This data goes to Google, not to us; we never see the advertising ID or the location it derives. The web dashboard contains no advertising.

Technical and operational data. Our servers keep standard request logs — IP address, timestamp, requested address, and browser or app user-agent — for security and troubleshooting. The dashboard also stores your sign-in session and preferences locally on your own device so you are not asked to sign in on every launch.

What we do not collect

• We do not track you or your phone. The app holds location permission solely for the “show my location” button described above, which reads your position once, on demand, and uses it only to move the map on your screen. It runs no background location tracking, keeps no history of where you have been, and transmits none of it. Every position that is stored, shared, or reported comes from a vehicle tracking device, not from your phone.
• We do not collect contacts, photos, files, calendar entries, microphone or camera input, call logs, SMS messages, or the list of other apps installed on your device.
• We do not sell or rent personal information, and we do not share it with data brokers. The only advertising partner is Google AdMob, in the Android app, and it receives only the data listed under “Advertising data” above — never your account details, your fleet’s vehicles, or their positions.

How we use the data

• To sign you in and keep your session secure.
• To display live vehicle positions, route history, reports, geofences, and fuel analytics to the accounts authorised to see them.
• To send the alerts you have enabled — such as geofence entry and exit, ignition, speeding, or device offline events.
• To operate, secure, debug, and improve the service, and to detect and investigate abuse.
• To meet legal obligations and to enforce our Terms of Service.

Third-party services

We keep third-party involvement to what the product needs to function. The services below receive only what is described here.

• Google Firebase Cloud Messaging — delivers push notifications to your device. It receives the notification content and your device’s messaging token.
• Google AdMob — serves the banner advertisement in the Android app. Google uses the advertising data described above to select and measure ads, under Google’s advertising policies and Google’s privacy policy.
• Map tile providers — map imagery is loaded from the provider selected in your map settings (by default OpenFreeMap and OpenStreetMap). Loading a map tile reveals your IP address and the map area being viewed to that provider.
• Geoapify and LocationIQ — convert vehicle coordinates into street addresses when our own server has no cached address for that point. They receive coordinates only; no account details, no device names, and nothing identifying you are sent. Resolved addresses are cached on our server so the same point is never looked up twice.
• Hosting and infrastructure — our servers, and the Traccar platform that stores fleet data, are operated for us under contract and may process data solely to run the service.

The dashboard may also record anonymous, aggregate page-view statistics to understand which screens are used. These statistics carry no cookies and no cross-site identifiers, and are not used to build a profile of you.

When we share information

We disclose personal information only in these situations:

• With your organisation. Administrators of your fleet account can see the vehicles, drivers, and activity within that account, including the accounts they manage.
• With service providers named above, limited to what each needs to perform its function.
• For legal reasons — when we are required to by law, or where disclosure is necessary to protect the rights, safety, or property of users or the public.
• In a business transfer — if the service is acquired or merged, data may transfer to the successor under this same policy until it is replaced with notice to you.

How long we keep it

Account information is kept for as long as the account exists. Vehicle telemetry is retained according to the retention period your fleet administrator configures for your organisation, so it remains available for the historical reports the service provides. Cached street addresses are stored indefinitely and are not linked to any account or vehicle. Server request logs are kept for a limited operational period and then discarded.

How we protect it

All traffic between the app and our servers travels over HTTPS. Access to fleet data is restricted to accounts your administrator has authorised, and permissions such as read-only access are enforced on the server. On Android, the app opts out of Android’s automatic cloud backup, so your stored session is never copied to Google Drive or restored onto another phone. No system is perfectly secure, but we work to protect your information and to respond promptly to problems we discover.

Your choices and rights

• Access and correction. You can view and update your name, email, phone number, and password from the Settings screen in the app.
• Notifications. You can turn push notifications off at any time in Android’s system settings for the app, or by adjusting the alert types on your profile. Signing out removes this device’s notification registration.
• Advertising. On Android you can reset or delete your advertising ID, and opt out of personalised ads, under Settings → Google → Ads (or Settings → Privacy → Ads). Ads in the app are then non-personalised. Ads are not shown in the web dashboard.
• Local data. Signing out clears the session and cached data held on your device.
• Account and data deletion. You can ask for your account and its personal information to be deleted at any time — see Deleting your account below.

Deleting your account

NileTrack accounts are issued by a fleet administrator rather than self-registered, so deletion is handled as a verified request. You do not need the app installed or to be signed in to make one.

1. Email us. Send a message to niletrack@gmail.com with the subject “Account deletion request”, giving the email address on the account, the name it is registered under, and your organisation or fleet name.
2. Or ask your fleet administrator. Whoever set up your account can remove it directly from the admin area of the dashboard, usually faster than email.

We confirm the request comes from the account holder before acting, acknowledge it within five working days, and delete the account within 30 days of verifying it. You can cancel before then by replying to the same email thread. Once deleted, sign-in stops working and the deletion cannot be undone.

What is deleted: your user record (name, email, phone number, password), your settings and preferences, the push-notification registration for every device you signed in from, and the permissions linking your account to vehicles, groups, and geofences.

What is kept: vehicle tracking data — positions, trips, fuel readings, alerts — belongs to your organisation, not to your login, so it stays for the fleet’s other users. If you are the fleet owner and want that data removed too, say so in your request and we will confirm the scope with you first. We may also keep limited records, such as server security logs or information the law requires, for a limited period.

Children

NileTrack is a business tool intended for use by adults in a commercial fleet. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

International transfers

Our servers and the third-party services listed above may process data in countries other than your own. Wherever data is processed, this policy governs how we handle it.

Changes to this policy

We may update this policy as the service changes. The date at the top of the page always reflects the current version, and material changes will be announced in the app before they take effect. Continuing to use NileTrack after an update means you accept the revised policy.

Contact us

Questions about this policy, or about the information we hold, go to niletrack@gmail.com. We aim to respond within five working days.