Privacy Policy
Last updated: March 20, 2026 · Version 1.0
1. Who we are
TruckHub ("we", "our") operates the website truckhub.ro and the TruckHub mobile application (together, the "Service"). We are the personal data controller within the meaning of the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).
Our Service is a community platform for truck drivers, offering parking search, group and private chat, voice/video calls, traffic alerts, road restrictions and social networking.
2. What data we collect
a) Identity data
- Name, surname, username
- Email address
- Phone number
- Profile photo
- Social authentication identifiers (Google, Facebook, Apple)
b) Location data
- Precise GPS coordinates (foreground — when using the app)
- Background GPS coordinates (when the app is minimized or closed — only with your explicit consent)
- Location history and routes
- Timestamps associated with each position
c) Communication data
- Group and private chat messages (text content)
- Voice/video call metadata (duration, participants, timestamps)
- Files and photos sent in chat
d) Media content
- Uploaded photos (parking, profile, chat)
- Reviews and written text
e) Technical and device data
- Device type, model, OS version
- Firebase Cloud Messaging tokens
- IP address
- Browser type and version (website)
- App version
f) Usage data
- Features used, screens viewed
- Points earned, leaderboard activity
- Referral activity
- Searches performed
3. How and why we process data
| Purpose | Legal basis (GDPR) |
|---|
| Account creation and authentication | Performance of contract (Art. 6(1)(b)) |
| GPS parking search | Performance of contract |
| Background GPS tracking | Explicit consent (Art. 6(1)(a)) |
| Group and private chat | Performance of contract |
| Voice/video calls | Performance of contract |
| Traffic alerts and restrictions | Legitimate interest |
| Social features (profile, friends, followers) | Performance of contract |
| Points system and leaderboard | Legitimate interest |
| Photo uploads | Consent / Performance of contract |
| Push notifications | Consent |
| SMS OTP verification (Twilio) | Performance of contract |
| Referral system | Consent / Legitimate interest |
| AI review analysis | Legitimate interest with notification |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
4. GPS Location and background tracking
Important section: The TruckHub app may collect location data even when the app is not in use (background tracking). This feature requires your explicit consent and can be disabled at any time.
What we collect
- Foreground: GPS position when actively using the app (parking search, map navigation)
- Background: GPS position at adaptive intervals — every 15 seconds when moving, every 5 minutes when stationary
Why we collect
- Display your position on the map for friends and community
- Geofencing alerts (notifications when you arrive at a destination)
- Driving reports (distance, speed, route)
- Improving the parking search service
How you control it
- You can enable/disable background tracking from the app settings
- You can revoke the location permission from Android/iOS settings
- The app works without background tracking (with reduced functionality)
- You can choose who sees your location: everyone, friends only, followers, or no one
Retention
Location history is kept for 30 days, after which it is automatically deleted.
5. Communications: Chat, Voice and Video
Text messages
- Group and private chat messages are encrypted in transit (TLS/SSL) but not end-to-end encrypted
- Messages are stored on our servers to allow cross-device synchronization
- Group administrators can moderate their group's content
- You can delete your own messages (soft delete — marked as deleted)
Voice and video calls
- Calls use WebRTC technology (peer-to-peer when possible)
- We do not record the content of voice or video calls
- We only store metadata: duration, participants, timestamps (retention: 90 days)
- When a direct connection is not possible, data passes through TURN servers — we do not store any audio/video content in transit
6. AI review analysis
We use an AI service (Anthropic Claude) to analyze parking reviews and extract useful information (shower availability, security, prices). In this process:
- Review text (without personally identifiable data) is sent to the Anthropic API
- Anthropic processes data according to their privacy policy
- Analysis results are stored to improve parking information
- Anthropic acts as a data processor under a data processing agreement (DPA)
7. Social features and public profiles
- Public information: username, profile photo, country, points ranking, badges
- Private information: email, phone number, exact location (according to your visibility settings)
- You can control who sees your profile and location from account settings
- The leaderboard publicly displays: username, avatar, points, country
- You can block other users — they will no longer be able to see your profile or location
8. Photos and media
- Uploaded photos are stored on Cloudinary (image hosting service)
- EXIF metadata may be retained on upload
- Parking photos are publicly visible
- Chat photos are visible only to conversation participants
- Cloudinary processes data according to their privacy policy
9. Push notifications
- We use Firebase Cloud Messaging (FCM) for push notifications
- Your device token is stored on our servers
- Notification types: chat messages, friend requests, geofencing alerts, app updates
- You can disable notifications from device settings or from the app
- You can choose which types of notifications to receive from account settings
10. Referral system
- When you recommend TruckHub to others, we store the referral relationship (who referred whom)
- Your referral code does not contain personal data
- Points awarded for referrals are visible in your points history
11. Third-party services and data sharing
We share data with the following third-party services, each acting as a data processor:
| Service | Data shared | Purpose |
|---|
| Google Firebase | Device tokens, analytics data | Push notifications, authentication |
| Google Maps | GPS coordinates, searches | Map display, parking search |
| Cloudinary | Photos, image metadata | Image hosting and processing |
| Twilio | Phone number, OTP codes | SMS verification |
| Anthropic (Claude AI) | Review text (anonymized) | AI analysis of parking information |
| Google/Facebook/Apple OAuth | Auth tokens, email, name | Social authentication |
| TURN/STUN Servers | IP addresses, connection metadata | Voice/video call relay |
We do not sell your personal data to third parties. We only share data for the purposes described above and in accordance with data processing agreements (DPA) concluded with each service.
12. International data transfers
Some of the third-party services listed above are located outside the European Economic Area (EEA):
- USA: Google, Anthropic, Twilio
- USA/Israel: Cloudinary
These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or by the EU-US Data Privacy Framework, as applicable.
13. Data retention periods
| Data category | Retention period |
|---|
| Account data (profile, email, phone) | As long as the account is active + 90 days after deletion |
| GPS location history | 30 days |
| Live location | 7 days after last update |
| Chat messages | As long as the account is active |
| Voice/video call metadata | 90 days |
| Photos | Until deleted by user or account deletion |
| Points and activity | As long as the account is active |
| OTP/verification logs | 30 days |
| Device FCM tokens | 90 days of inactivity, then auto-deleted |
| Server logs | 90 days |
14. Data security
- Encryption in transit: All communications use TLS/SSL (HTTPS)
- Passwords: Stored using bcrypt hashing (not in plain text)
- Sessions: Unique 64-character hexadecimal tokens with automatic expiration
- Restricted access: Only authorized personnel have access to databases
- Monitoring: Access logs and alerts for suspicious activities
In the event of a data security breach, we will notify the competent authority (ANSPDCP) within 72 hours and affected users without undue delay, in accordance with Art. 33-34 GDPR.
15. Your rights under GDPR
Under the General Data Protection Regulation, you have the following rights:
Your rights
- Right of access (Art. 15) — you can request a copy of all your personal data
- Right to rectification (Art. 16) — you can correct inaccurate data
- Right to erasure (Art. 17) — you can request deletion of your data ("right to be forgotten")
- Right to restriction of processing (Art. 18) — you can limit how we use your data
- Right to data portability (Art. 20) — you can receive your data in a structured format (JSON/CSV)
- Right to object (Art. 21) — you can object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) — you can withdraw your consent at any time
- Right not to be subject to automated decisions (Art. 22) — including profiling
To exercise any of these rights, contact us at contact@truckhub.ro. We will respond within 30 days. Exercising your rights is free of charge.
If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with:
National Supervisory Authority (ANSPDCP)
Blvd. G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
Website: www.dataprotection.ro
16. Children's privacy
Our Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from children under 16. If we discover that a child under 16 has provided us with personal data, we will delete it immediately.
If you are a parent or guardian and believe your child has provided us with personal data, contact us at contact@truckhub.ro.
17. Cookies and similar technologies
Website (truckhub.ro)
| Cookie | Purpose | Duration |
|---|
| tp_session | Authentication session | 30 days |
| theme | Theme preference (dark/light) | Persistent |
| lang | Language preference | Persistent |
Mobile app
The app uses localStorage and Capacitor Preferences for local storage of the authentication token and preferences. This data remains on your device and is not transmitted to third parties.
18. Changes to this policy
We reserve the right to update this privacy policy. We will notify you through:
- In-app notification (push notification)
- Website banner
- Email (for significant changes)
The date of the last update is displayed at the top of this page. Continued use of the Service after changes constitutes acceptance of the new policy.
19. Contact and complaints
Legal framework: This policy complies with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 (GDPR implementation in Romania) and Directive 2002/58/EC (ePrivacy).
← Back to TruckHub