Privacy

1. Your version of TRKHub

Sign in with Google to open your company account in the current Android release. Your subscription and cloud records belong to that signed-in account. Signing out returns you to sign-in; it does not close the account or cancel billing. More, Cloud backup and Your subscription show the connected account, backup status and available purchase options. Older local-only test builds did not connect an account; their device-only records were not automatically uploaded.

Asking for a USDOT lookup sends the number you enter to the public US Department of Transportation Motor Carrier Census at data.transportation.gov. It does not send your document scans or the rest of your fleet records with that lookup.

2. On your device

TRKHub stores the company, equipment, drivers, certifications, dates, bills, reminder settings and files you enter in the app's private device storage. Selected identity fields, such as CDL, passport and visa numbers, VINs and dates of birth, receive an additional encryption layer using the device keystore. If that protection is unavailable, the app displays a storage notice. Scans and photos rely on private app storage and your device's encryption; keep a screen lock enabled.

Android's automatic device backup is disabled for TRKHub. A new phone will not receive your local records through Android backup. Keep independent exports of important paperwork. Cloud restore, where available, restores only information that successfully reached the cloud, and cannot recover a file that was never backed up.

3. Account and cloud backup

When you sign in, Google supplies account identity information such as your name, email, profile image and account identifier. TRKHub uses Google and Supabase authentication to establish your session and associate your company and subscription with the correct account. TRKHub does not receive your Google password.

Cloud-enabled account features can mirror your company name, USDOT number and home state; truck and trailer unit numbers, plates and notes; driver names, languages, experience and notes; certification details; document titles, categories and dates; bills, amounts and recurrence; saved service-provider names, contact people, phone numbers, email addresses, websites and notes; recently used document-pack recipient addresses; activity-history entries; and reminder and language settings. Account, device, synchronization and transaction identifiers support access control, restore and reliable processing. My contacts is information you save in TRKHub; we do not read your phone's address book.

The structured company backup excludes CDL numbers, CDL state, passport and visa numbers, VINs, dates of birth, and local file paths. This exclusion does not redact files or free-text notes. If you back up a scan containing an identity number, or type that number into a note, that content is part of the backup. Select only material you are authorized to store and share.

You may attach occupational medical certificates or other sensitive driver documents. Their images, dates and any notes you enter are handled as part of your account's paperwork and backup, solely to organize records and reminders. TRKHub does not diagnose conditions, recommend treatment or provide medical advice. Bills and amounts are records you enter; TRKHub does not access bank accounts or pay those bills.

Attached files use a private cloud vault when backup is enabled. The Cloud backup screen shows upload status and storage use. The current allowance is 100 MiB per company and 10 MiB per file; fleet record allowances do not imply unlimited file storage. A failed or waiting upload is not a completed backup.

4. Subscriptions

When you deliberately purchase a subscription through Google Play, Google handles checkout and your payment method. TRKHub receives and verifies information needed to provide your subscription, including the selected product, purchase token, order reference when available, current status, renewal and expiry information, and its association with your TRKHub account. We do not receive your complete card number or card security code.

Counts of retained truck, trailer and driver records, including inactive records, are used to calculate required subscription capacity. The server checks that capacity against the verified subscription. Marking a record inactive does not remove it from the count or automatically change billing.

Purchase and entitlement information is processed on our server to validate purchases, prevent duplicate claims, restore access, and respond to renewals, payment failures, cancellations and refunds. The app's evaluation does not automatically charge you. Subscription terms and the complete localized price appear before you confirm a purchase. See subscription terms.

5. Reminders and document sharing

Device reminders are scheduled by your phone. Cloud-enabled versions may also process mirrored due dates, reminder preferences and verified contact details for account or deadline email services when those services are available and enabled. Local-only test builds do not send reminder emails. Do not assume an email service is active unless the app confirms its availability.

Sending a document pack builds the selected paperwork on your phone and hands it to the email, share or print app you choose. You review the recipient and complete the send there. That handoff is separate from cloud backup. The destination app and recipient handle the files under their own policies.

6. Providers and security

Google provides sign-in and Play purchases. Supabase provides authentication, database and private file storage for connected accounts. If server email is enabled, the configured email delivery provider processes the recipient address and message needed for that service. Support email is processed by our email provider.

Our hosting and security providers retain technical request logs, including IP addresses, approximate city and country inferred from IP addresses, response statuses and response times. We use these logs to operate and protect the service, troubleshoot failures, and assess performance and reliability. The app does not request GPS access or collect precise device location.

Connections to these services use HTTPS. Account access rules separate one company's cloud records from another's. Cloud storage is not described as end-to-end encrypted: authorized service infrastructure must process it to provide backup and restore. Keep your Google account and device secure.

The service-provider directory lists public business contact information separately from your saved contacts. A paid directory position, when available, is labelled Sponsored and ordered within its service category. Your private company records and files are not sent to listed businesses to choose placements. Calling, emailing or opening a provider's website is your choice and uses your phone's corresponding app.

• No advertising identifiers, behavioral analytics or third-party advertising SDKs are included in the app.
• We do not sell or rent your personal information.
• Readiness figures and dates are calculated from your records; they are not generated by an AI service.

This website loads fonts from fonts.googleapis.com and fonts.gstatic.com. Google receives those browser requests. The website has no analytics scripts or advertising cookies.

7. Retention and deletion

You can view, edit and export local records. More → Settings & help → Data & privacy → Start over clears the app's local records, scans and settings after confirmation. Uninstalling removes that device's app storage. Neither action cancels a Google Play subscription or requests deletion of an existing cloud account.

To close a connected account, open More → Your subscription → Close Account. After you confirm and the server accepts the request, the app shows a scheduled date seven days later. After this waiting period, TRKHub cancels the Google Play subscription and permanently deletes the account and its associated cloud records and files. Choose Keep my account to withdraw the request before processing begins. Signing in again does not withdraw it; signing out only ends your session.

A renewal during the seven-day wait can still be charged. You can cancel renewal earlier in Google Play subscriptions. Account closure does not issue a refund. Completion is confirmed only after subscription cancellation and data deletion have finished; an unfinished request remains in processing.

When a device can confirm that closure is complete, the app clears local records, cached files and reminders belonging to that account. An offline device cannot receive this confirmation or be erased remotely. Use the local reset or uninstall if a device cannot confirm closure. Exports and files saved outside the app, and copies shared with other people, are not removed by account closure.

If you cannot access the app, follow the web deletion instructions to contact support without reinstalling it. Support verifies ownership and confirms the scope and scheduled date. Sending an email alone does not schedule closure or stop a subscription.

Encrypted disaster-recovery backups are retained on a rolling 30-day basis. A last verified backup may be retained longer if a replacement fails. These restricted copies are used only for recovery and must not reactivate closed accounts. Restored services stay isolated until completed account-deletion requests have been reconciled. Copies saved or shared outside TRKHub remain outside this process.

After subscription access ends, existing local paperwork remains available to read and export. Cloud retention is separate: any scheduled removal date and applicable notice are shown for the account. Removal of a cloud backup under that retention policy does not itself erase the original files on your phone. Voluntary account closure follows the separate process above. Keep your own exports before removal; deleted cloud files cannot be restored by TRKHub.

After account closure, we retain a minimal closure confirmation record and an opaque purchase association to confirm completion and stop later billing events from restoring a closed account. These records exclude your name, email and company content after completion. Limited transaction or security records may also be retained where needed for legal obligations, disputes or fraud prevention; contact support about any applicable retention. Google handles Play transaction records under its own policies. Do not send identity-document scans or payment card details with a deletion request.

8. Permissions

• Notifications: to deliver reminders with your chosen settings.
• Vibrate: to vibrate for reminders when enabled in your notification settings.
• Run after restart: to restore scheduled reminders after reboot or app update.
• Internet: USDOT lookup, and sign-in, backup, purchase verification and account services when enabled.
• Google Play billing: to open the store purchase flow when you choose a plan.
• Photos and camera: the app hands selection or capture to your device's picker/camera app and copies the selected result; it does not request its own camera permission.

9. Children and changes

TRKHub is a business tool for carrier operations and is not directed at children under 13. Material changes to account, backup, payment or data handling will be described here and in the app before the changed feature is enabled. The date above identifies this version of the policy.

10. Contact

Privacy questions: support@trkhub.app. Account deletion: request instructions.