Privacy Policy

Information We Collect

Location data

Precise GPS location, including while the app is in the background during active navigation, to provide turn-by-turn directions, live position sharing with nearby drivers, and route/traffic information.

Background location is only requested and used while you are actively navigating — not collected continuously in the background outside of navigation sessions.

Account information

• Email address and/or phone number, if you register using those methods.
• Password, if you register with an email address and password. Your password is handled by Firebase Authentication, which keeps only a protected (hashed) form of it, so we cannot see or retrieve your actual password. If you use “Forgot password?”, Firebase sends a reset email to your address.
• A sign-in session is kept on your device until you sign out, so you do not have to sign in every time. INSIS does not store your password itself on your device.
• Apple ID or Google account identifier (and the email address on that account), if you sign in using Sign in with Apple or Google Sign-In. Google Sign-In is provided through Google and Firebase Authentication.
• Earlier versions of the app allowed use without registering, using an anonymous account identifier that was not linked to your real identity. Current versions require you to create an account.

Profile information

• Nickname / display name. A nickname is generated automatically when you create an account (in the form “Driver1234”, not based on your email or phone number) and is visible to other drivers. You can change it at any time in your profile.
• Vehicle type and dimensions (height, length, width, weight), used to provide truck-legal routing and restriction warnings.
• Profile photo, if you choose to upload one. Before it is saved, the photo is sent to Google Cloud Vision for an automated check for inappropriate content (see Section 3); a photo that fails the check is not saved. Once approved, your profile photo is stored and visible to other INSIS users.

Communications

• Chat messages (text) sent to other drivers within the app.
• Voice notes/audio recordings sent within chat.
• Photos shared within chat.

Marked drivers

• You can ask another driver for permission to mark them on your map, either from their vehicle on the map or by typing their nickname. The other driver is asked (Allow or Decline) and nothing is marked unless they allow it. Sending requests is a Premium feature; answering, declining, blocking and removing marks are free.
• To do this we store, for each request, the two accounts’ identifiers, whether it is waiting or allowed, and the times it was sent and answered. If a driver declines, we keep a record of the decline for 7 days so the same request cannot be sent again straight away. If a driver blocks requests from another driver, that block is kept on their account until they remove it.
• Who sees the star: once allowed, only the driver who asked sees a yellow star on the other driver’s vehicle, and only on their own map. No other driver sees anything different, and the star does not reveal any location that driver was not already sharing. The marked driver sees, in their profile under “Who marked me”, the nickname of each driver who marked them.
• Either driver can remove a mark at any time (“Drivers I marked” or “Who marked me” in Profile → Marked drivers); it disappears for both immediately, without the other driver’s confirmation. These records are deleted when you delete your account.

Speed cameras

• Where speed camera warnings are allowed, the app asks our servers for the fixed speed cameras and average-speed sections in the map areas (squares of about 50 km) your route passes through. The warnings themselves are worked out on your device from your position; your exact position is not sent for this. The camera data comes from OpenStreetMap (© OpenStreetMap contributors, ODbL).
• In some countries warnings are switched off completely (for example Germany, Switzerland and France), and in others only fixed cameras are shown (for example Italy). The list can change; nothing is shown or played where it is off. You can turn the alerts off in Profile → Speed cameras.
• Driver camera reports: where allowed, a driver can report a mobile camera. We store the position of the report, the time and the account identifier of the driver who reported it. Other drivers see only a general zone along their route, for at most 5 hours; the app never shows who made a report. The reports you made are deleted when you delete your account.

Road reports (“Aiutaci” / “Help us”)

• With the “Aiutaci” button a signed-in driver can tell us about a closed road, a narrow road where a truck cannot pass, a low bridge or tunnel, a no-truck sign or something else, and can add a short note and up to 3 photos. This is optional and only works with a registered account, not as a guest.
• For each report we store the type, the position of the spot, the direction you were heading, the time, your optional note, your account identifier, and the photos you chose to add. Photos are taken with the camera or picked from your gallery, reduced in size and re-saved without their hidden data (such as the GPS position and camera details stored inside a photo file), so only the picture itself is kept. Please do not photograph people or number plates.
• Photos can only be added while the vehicle is stopped. While driving, one tap only marks the spot; you add details and photos later when you are parked. If you have no connection the report waits on your phone and is sent later.
• Who sees it: only our team, to check whether the report is correct and to improve the map data. Reports and photos are never shown to other drivers and never appear on any map. If the team accepts a report you see a message and your count in Profile → Your contribution; the counts are stored on your account.
• Reports and photos are stored with Google Cloud (Firebase Firestore and Cloud Storage) in the United States, outside the European Union. Reports the team rejects are deleted, with their photos, 90 days after the rejection (a daily automatic clean-up). Accepted reports are kept for as long as they help to improve the map, and every report and photo is deleted when you delete your account. Because the reports are linked to your account identifier, you can ask us (Section 11) to see or remove a report at any time.
• Notifications: if you allow notifications after your first report, we store your device’s notification token (from Google’s Firebase Cloud Messaging, which delivers to Android and, through Apple, to iPhone) and your app language, only to tell you when the team accepts a report or when you earn a Premium week. You can switch notifications off in your phone settings at any time; the token is deleted when you delete your account, and a token the phone no longer uses is removed automatically.
• Premium reward: every 10 accepted reports give you 1 week of INSIS Premium. We record which reward milestones were given to your account (so none is given twice) and ask RevenueCat to add the week to your account; this record is deleted with your account.
• The sending limit is a number of reports per day per driver, and a repeat of the same spot is not stored twice; this protects the service from misuse.

Anonymous trips (optional)

• The switch “Condividi i miei viaggi in forma anonima” (Share my trips anonymously) is off by default. It is in the Aiutaci screen and in Profile → Privacy & data. If you switch it on, the app records the route of each drive only while a navigation is running.
• At the end of the trip the app cuts the first and last 500 m, removes the link to your account, and keeps only: the route points (position, speed and heading, with the time counted from the start, never the time of day), the day of the trip, and your vehicle class (truck or bus, a height band and a weight band – not your exact dimensions). No name, no account identifier and no device identifier are in the file.
• The app sends one compressed file per trip, by default only over Wi-Fi (a second switch allows mobile data). If you are offline the file waits on your phone and is sent later; files that could not be sent for 30 days are deleted from the phone. Switching the setting off deletes any file still waiting on the phone.
• The file is stored by Google Cloud in the European Union (Belgium) under a random name. To keep abuse out, the request that sends it is made from a signed-in account and limited to a few files a day, but the account is not stored with the file.
• We use the traces to improve the map for trucks and buses (which roads are really used, realistic speeds, checking height, weight and truck-ban signs). Raw traces are deleted automatically 90 days after they arrive; only statistics per road segment are kept, and only where at least 5 different trips contributed, so no single driver can be recognised. Traces are never shown to other drivers, employers or anyone else.
• Because a trace carries no account, we cannot tell which traces are “yours”; deleting your account therefore does not delete traces already sent (they disappear within 90 days). You can switch the setting off at any time to stop any further trip from being recorded or sent.

Trip and usage data

• Trip history, routes traveled, and distance/time statistics.
• Driver ratings you give to or receive from other drivers.

Premium subscription and purchase data

• If you subscribe to INSIS Premium, the purchase is processed by Apple through the App Store (iPhone) or by Google through Google Play (Android). We never receive your payment card, Apple ID or Google account payment details.
• We use RevenueCat, a subscription-management service, to confirm your subscription. While you are signed in with a registered account, the app identifies you to RevenueCat using your INSIS account identifier, and RevenueCat receives your purchase and subscription information (such as which plan you purchased and its purchase, renewal and expiry dates), along with the technical information needed to process it, as described in RevenueCat’s own privacy policy.
• We store whether your Premium subscription is active, which plan it is, and when it expires, so that Premium features can be unlocked for your account.
• Deleting your INSIS account does not cancel an active subscription. You can manage or cancel it at any time in your Apple ID Account Settings (iPhone) or in Subscriptions in Google Play (Android).

Photos and voice commands sent to AI features (Premium)

• Tachograph photo analysis: when you choose to take or select a photo of your tachograph display or printout, the photo and your app language are sent to Anthropic, an AI provider, to read the values it shows.
• Voice assistant: when you speak a command, your device converts your speech to text (on your device or by Apple’s speech recognition service on iPhone, or by Google’s speech recognition service on Android, depending on your device and language). Only the resulting text is sent to Anthropic to generate a reply, together with your app language, the name of your destination if you have an active route, and the names of any nearby places found for you. The audio recording of your voice is not sent to our servers or to Anthropic.
• Address photo-scan: when you choose to take or select a photo of a delivery note or address printout, the photo is sent to Anthropic to read the business name, street and city written on it. The text it reads is then sent to TomTom, through our servers, to find matching places on the map. Your GPS position is not included in either request.
• Your consent for photo analysis: before the first photo of either kind (tachograph or address), INSIS shows “Photo analysis with AI” and asks you to allow it. The date you agreed is stored on your account, and our servers refuse to send a photo for analysis without it, so nothing is sent unless you allow it. You can withdraw your consent at any time with the “AI photo analysis” switch in your profile; after that, the next photo asks again.
• We do not save these photos, the addresses read from them, the voice-command text or the AI replies in our database or file storage; they are used only to produce the result shown to you. Your exact GPS position is not sent to Anthropic; for a nearby-place search it is sent to TomTom (see Section 3).

Device and diagnostic information

• Crash reports and diagnostic logs (via Firebase Crashlytics), used to identify and fix bugs.
• App performance data (via Firebase Performance Monitoring): how fast the app starts, how smoothly screens are drawn (slow and frozen frames) and how long network requests take. It is tied to an installation identifier, not to your name or e-mail, and is used only to keep the app fast and stable.
• Basic device information (device model, OS version) for compatibility and troubleshooting.

How We Use Your Information

We use the information we collect to:

• Provide turn-by-turn navigation and truck-legal routing.
• Show your live position to nearby drivers who are within visibility range (and hide your position from drivers you have blocked).
• Enable chat and communication between drivers.
• Calculate and display weather conditions along your route.
• Open a place you share into INSIS from another app (through the iOS Share button, as “INSIS Navigator”) or a map link on your clipboard that you choose to open. INSIS checks the clipboard only when you open the app, only for a map link, and only through the paste permission iOS asks you for; it does not store what it finds. Short Google Maps links are opened by our server, which follows them only to Google and does not store them.
• Maintain and improve app stability and speed (crash reporting and performance monitoring).
• Maintain driver ratings and profile information.
• Respond to safety alerts (SOS/Alert features) by notifying nearby app users.
• Process and verify Premium subscriptions, and unlock Premium features for your account.
• Analyze a tachograph photo, read an address from a delivery-note photo, or respond to a voice command, when you choose to use those Premium features.
• Automatically check profile photos for inappropriate content before they are saved.

Third-Party Services

We use the following third-party services, which may process some of your data as part of providing their functionality. Each provider has its own privacy policy governing how they handle data they receive.

Data Sharing

We do not sell your personal information. We share information only:

• With other drivers, as necessary for the app's core functionality (e.g. your nickname and approximate/live location visible to nearby drivers while navigation is active; chat messages with drivers you communicate with).
• With another driver, if you take part in Marked drivers: a driver you ask, or who asks you, sees your nickname in the request and in their Marked drivers list (see Section 1).
• With the third-party service providers listed above, as necessary to provide the app's functionality.
• If required by law, legal process, or to protect the safety of our users.

Data Retention and Deletion

Some information may be retained in anonymized or aggregated form (e.g. ratings given to other drivers) where removing it entirely would degrade the experience of other users, as described in the in-app account deletion confirmation.

Crash reports and diagnostic logs are retained per Firebase Crashlytics' standard retention period. Performance data is retained per Firebase Performance Monitoring's standard retention period.

Your Choices

• You choose how you sign in (Apple, Google, a code sent to your email or phone, or an email and password). You stay signed in on your device until you sign out.
• You can withdraw your consent to AI photo analysis (tachograph and address photos) at any time in your profile (“AI photo analysis”).
• You decide whether to allow, decline or block requests to mark you on another driver’s map, and you can remove any mark at any time (Profile → Marked drivers).
• You can block other drivers to stop receiving their messages and hide your location from them.
• You can report content or users you believe violate our community standards.
• You can request account deletion at any time (see Section 5).
• You can disable location permissions via your device Settings, though this will prevent core navigation functionality from working.

Children's Privacy

INSIS is intended for professional drivers and is not directed at children. We do not knowingly collect information from children under 16.

Data Security

We take reasonable technical and organizational measures to protect your information, including encrypted storage of sensitive session data and secure transmission (HTTPS/TLS) of data between the app and our servers.

International Users

INSIS is operated from Italy. If you use the app from outside Italy or the European Union, your information may be transferred to and processed in countries with different data protection laws, including through our use of the third-party services listed above. In particular, our database and file storage (Google Cloud, Firebase) are located in the United States, so the data described in this policy, including road reports and their photos, is stored and processed there.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when changes are made.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:

insis0536@gmail.com