Privacy Policy

1. Who we are

Fretla is a marketplace platform that connects people who need to move freight, large items, or oversized loads ("Load Owners") with independent truck, van, and vehicle owners or drivers ("Drivers / Truck Owners") who can carry them. This policy covers the Fretla mobile apps (iOS and Android) and this website.

Data controller: Fretla Technologies Ltd. Contact: dispatch@fretla.com.

2. App Store Guideline 5.1.1 Compliance (Data Collection & Storage)

In accordance with Apple App Store Guideline 5.1.1 (Legal: Privacy - Data Collection and Storage) and major privacy regulations, Fretla provides full transparency into the data collected, the specific purpose for each data point, how data is stored securely, and your controls over your personal information.

• Data Minimization: We only request permissions and collect data strictly necessary to provide freight logistics services, process secure transactions, and maintain account security.
• Data Storage & Encryption: All personal data and user documents are stored in secure cloud infrastructure (Supabase) encrypted in transit using TLS 1.3/HTTPS and at rest using industry-standard AES-256 encryption. Sensitive documents (such as identity files) are uploaded directly to secure storage and are not cached or stored on your local mobile device.
• Access Control: Database access is governed by strict Row-Level Security (RLS) policies ensuring users can only view data relevant to their active shipments, account, or transactions.
• User Consent & Control: You can modify your permissions in device settings at any time or request account and data deletion via our dedicated Data Deletion Portal.

3. Information we collect

We collect the following categories of information when you create an account and use the app:

Category	Examples & Purpose
Account information	Full name, email address, phone number, account type (Load Owner, Truck Owner / Fleet Owner), profile photo. Used for user identity verification and account management.
Location data	Pickup and drop-off addresses and coordinates you enter; a Truck Owner's approximate location when browsing available loads; precise GPS location (foreground only) used to pre-fill your pickup address when booking a delivery and — while an assignment is active — shared with the matched Load Owner for real-time tracking.
KYC / identity documents	Vehicle type, capacity, plate number; driving license number and expiry date; photos of identity documents and vehicle registration uploaded during Truck Owner KYC verification. Documents are uploaded directly to encrypted cloud storage (Supabase Storage) and are not stored on your local device after upload.
Payment & wallet data	Wallet balance and transaction history; payment method selection (in-app wallet or cash on delivery); bank account details you add for payouts. Card details are handled directly by our PCI-DSS compliant payment processor, Stripe — we do not store full card numbers or CVVs.
Subscription & entitlement data	Your subscription plan (Basic, Pro, or Fleet), subscription status, and entitlement flags. Subscription purchases on iOS and Android are processed through Apple App Store / Google Play via RevenueCat — we receive subscription status and entitlement data, not your payment card details.
Communications & Photos	Messages exchanged between a Load Owner and Truck Owner about a specific shipment; delivery proof photos uploaded at pickup or drop-off; support tickets you open with us.
Device & usage data	Push notification token, app version, device model and OS version, general usage patterns, and crash/error diagnostics collected automatically by Sentry to help us identify and fix bugs.
Newsletter & marketing	If you subscribe to Dispatch Alerts on our website, we collect your email address to send you capacity updates, rate news, and fleet announcements. You can unsubscribe at any time using the link in any email.

4. How we use this information

• To create and manage your account, and verify Truck Owner eligibility (license, vehicle, KYC documents)
• To match Load Owners with available Truck Owners and calculate estimated routes, pricing, and ETAs
• To process payments, wallet top-ups, and subscription purchases, and to maintain accurate transaction records
• To enable in-app messaging and photo sharing between a Load Owner and the Truck Owner assigned to their shipment
• To send push notifications about order status, new load offers, and account activity
• To send newsletter emails to subscribers who opt in on our website (you can unsubscribe at any time)
• To provide customer support and investigate reported issues
• To detect and prevent fraud, abuse, and violations of our Terms of Service
• To monitor app health, identify crashes, and improve performance (via Sentry)
• To comply with legal, tax, and regulatory obligations

5. How we share information

• With the other party to a shipment. When a Truck Owner accepts a load, we share the Load Owner's pickup/drop-off details and contact information with the Truck Owner, and the Truck Owner's name, vehicle, and live location with the Load Owner so the delivery can happen.
• Stripe (payment processing). Stripe processes card payments and wallet top-ups on our behalf. Stripe's privacy policy is available at stripe.com/privacy.
• RevenueCat (subscription management). RevenueCat manages in-app subscription purchases on iOS and Android, communicating with the Apple App Store and Google Play on our behalf. We receive subscription status and entitlement data.
• Supabase (infrastructure & storage). We use Supabase to host our database, authentication, encrypted file storage (including KYC document uploads), and real-time messaging.
• Expo (push notifications). We use Expo's push notification service to deliver order and account alerts to your device.
• Mapbox (maps & location). We use Mapbox to display maps, calculate routes, and geocode pickup and drop-off addresses.
• Sentry (error monitoring). Sentry automatically collects crash reports and diagnostic logs from the app to help us identify and fix bugs.
• Legal reasons. If required by law, court order, or to protect the rights, safety, or property of Fretla, our users, or the public.
• Business transfers. If Fretla is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties.

6. Location data specifically

We collect precise location data only in the foreground (when you have the app open). We do not collect background location data. Location is used in two ways: (1) to pre-fill your pickup address when you start a booking or load listing, and (2) from a Truck Owner's device while they have an active, accepted assignment, so the Load Owner can track their delivery in real time. You can revoke location permission at any time in your device settings; doing so will prevent address pre-fill and live tracking, and may prevent Truck Owners from receiving nearby load offers.

7. Camera & photo library access

The app requests camera and photo library access only when a Truck Owner uses the document upload feature in their profile to complete KYC verification or upload proof of delivery photos. Photos are uploaded directly to secure cloud storage (Supabase Storage) and are not stored locally on your device after upload. The app does not save any images to your device's photo library.

8. Data retention & security

We keep account and transaction data for as long as your account is active, and for 7 years afterward to meet tax, accounting, and fraud-prevention obligations (consistent with standard financial record-keeping requirements). KYC documents are retained for the same period for regulatory compliance. Messages and support tickets are retained to resolve disputes and improve support quality.

All stored data is protected using TLS 1.3 transport encryption, AES-256 storage encryption at rest, and Supabase Row-Level Security. You can request earlier deletion of non-mandatory data — see Account & Data Deletion.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Nigerian users have these rights under the Nigeria Data Protection Act (NDPA) 2023; users in the European Economic Area have similar rights under the GDPR. To exercise any of these rights, email dispatch@fretla.com.

10. Account & data deletion

You can request deletion of your account and associated personal data at any time directly through the app settings or via our web portal. See our Account & Data Deletion page for instructions on what gets deleted, what we may need to retain for legal or financial reasons, and how long it takes.

11. Children's privacy

Fretla is not directed at children, and you must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

12. Security safeguards

We use industry-standard safeguards — including encrypted connections (HTTPS/TLS 1.3), Supabase Row-Level Security (RLS) access controls, a PCI-compliant payment processor (Stripe), and automatic crash monitoring (Sentry) — to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

13. International data transfers

Some of our service providers — including Stripe, RevenueCat, Supabase, Sentry, Expo, and Mapbox — may process data outside your home country. Where this happens, we take steps to ensure your information receives an adequate level of protection consistent with this policy and applicable law.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you in-app or by email before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

15. Contact us

Questions about this policy or your data? Email dispatch@fretla.com.