Privacy Policy
Last updated: 29 September 2026
This policy explains how personal data is handled in Trackbits: the web application at web.trackbits.app, the Trackbits mobile app for drivers, and this website. Trackbits is provided by Fewbits. You can reach us about privacy at hey@trackbits.app.
1. Our role
Trackbits is used by transport companies (our customers) to plan and record their work. Each customer decides whose data goes into Trackbits and why. For that data the customer is the controller and Fewbits is the processor: we handle it only on the customer's instructions and to provide the service.
The customer is responsible for the personal data that it and its users put into Trackbits, including notes and photos taken with the mobile app, and for having a lawful basis to collect it.
Fewbits is the controller only for the data we need to run our own business: the contact details of the people we deal with at our customers, security logs, and messages you send us.
If you are a driver or other employee using Trackbits, your company created your account and controls your data. Questions or requests about it are best sent to your company first. We will help them answer you.
2. What data we collect
Account data
- First and last name, email address, company, and role (for example administrator, route planner or driver).
- For drivers, a mobile phone number if the company enters one, and the truck assigned to them.
- Your password, stored only as a one-way hash. We cannot read it.
- When you last signed in and the number of failed sign-in attempts, used to lock out password-guessing.
Work data
- Jobs and routes: client names and contact details, cargo details (such as vehicle make, model and licence plate, container number or cargo description), pickup and delivery locations, deadlines and notes.
- What happened on each route: pickup, delivery or no-show, when it happened and which user recorded it.
- Photos taken at pickup and delivery as proof of condition.
Data from the Trackbits mobile app
- Photos that the driver takes with the camera or chooses from the phone's gallery. The app only accesses the photos the driver selects.
- A push notification token, so we can notify the driver of new routes.
- The app version, to tell the driver when an update is required.
- Crash reports: when the app crashes, technical details such as the phone model, Android or iOS version, and the error are sent to us to fix the problem. These reports do not include route details or photos.
The app does not track the phone's location, and it does not access contacts, the microphone, or advertising identifiers. It contains no advertising and no third-party analytics.
Security and technical logs
- Requests to our servers, including IP address and time, used to keep the service secure, limit abuse and investigate problems.
- Error reports when something goes wrong on our servers, with technical details of the request that failed.
- An audit log of changes made in Trackbits: who made the change, what changed, when, and from which IP address.
- Copies of the service emails we send, such as password reset emails, so we can resend them if delivery fails.
3. Why we use it
- To provide Trackbits to our customers and their users, as agreed in our contract with the customer.
- To keep the service secure and working: preventing unauthorised access, fixing errors and crashes. This is our legitimate interest, and our customers' interest, in a secure and reliable service.
- To send service messages, such as password resets and notifications of new routes.
- To meet legal obligations, for example accounting and tax records for our customers.
We do not sell personal data, use it for advertising, or use it to train AI models.
4. Who we share it with
Within Trackbits, data is only visible to users of the same company, according to their role. Drivers see only the routes assigned to them.
We use the following service providers to run Trackbits. They process data only on our instructions.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online | Infrastructure provider | All service data | European Union |
| Amazon Web Services | Stores photos | Pickup and delivery photos | Frankfurt, Germany |
| Google (Firebase Cloud Messaging, Crashlytics) | Push notifications to the driver app; crash reports | Push token, notification text, crash reports | EU and USA |
| Zoho (ZeptoMail) | Sends service emails | Email address, name, email content | EU and USA |
When data is transferred outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
We may also disclose data when the law requires it, for example to comply with a court order.
5. How long we keep it
We keep personal data only for as long as we need it for the purposes in this policy:
- Account and work data, including photos: for as long as the company uses Trackbits, and afterwards only for as long as we are legally required to keep it or need it to establish, exercise or defend legal claims. The company can ask us to return or delete its data when its contract ends.
- Security logs, service email copies and crash reports: for as long as they are needed to keep the service secure and working, and then deleted.
Data that is no longer needed is deleted or anonymised.
6. How we protect it
- All traffic between the apps and our servers is encrypted with HTTPS.
- Passwords are stored as one-way hashes. Sign-in tokens in the driver app are kept in the phone's secure storage.
- Each company's data is kept separate, and access within a company follows each user's role.
7. Your rights
Under the EU General Data Protection Regulation (GDPR) you have the right to:
- access the personal data held about you and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how it is used;
- receive your data in a portable format.
If you use Trackbits through your company, send your request to your company, which controls your data. You can also write to us at hey@trackbits.app and we will pass it on and help them respond. We answer requests within one month.
If you think your data has been handled unlawfully, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or the data protection authority in your country.
8. Deleting your account
Accounts are created by a company's administrator; the Trackbits mobile app has no sign-up. To delete your account and its data, ask your company's Trackbits administrator, or email hey@trackbits.app from the email address of the account. We confirm with the company and delete the account without undue delay. Records a company must keep for legal reasons, such as delivery records, may be kept with your name removed.
9. Children
Trackbits is a tool for businesses and is not intended for anyone under 16.
10. Changes to this policy
We will update this page when our practices change, and change the date at the top. For significant changes we will inform our customers' administrators by email before they take effect.
11. Contact
For any question about this policy or your data: hey@trackbits.app.