Privacy Policy
Last updated: June 3, 2025
Ingalls Technologies ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect from users of the Pottie GO mobile application (the "App"), how we use that information, whom we share it with, how long we keep it, and the rights and choices you have.
By using the App, you consent to the practices described in this policy. If you do not agree with any part of this policy, please do not use the App.
Data Controller: Ingalls Technologies · Massachusetts, USA
Contact: support@pottiego.app
Website: https://pottiego.app
1. Location Data — Prominent Disclosure
Pottie GO collects precise device location (GPS) both in the foreground (while you actively use the App) and, when you begin an active turn-by-turn navigation session, in the background (while the App is minimized or your screen is locked). Background location is used exclusively for the following purposes:
•
Providing continuous turn-by-turn navigation until you complete or cancel a route.
•
Triggering safety alerts (e.g., approaching an open weigh station).
•
Keeping the on-screen driver puck aligned with your real position.
We do not use background location for advertising, profiling, or selling to third parties. We do not track your movements when you are not actively navigating. Location collection stops when you end navigation, close the App, or revoke location permission in your device settings.
On Android, background location access is protected by the `ACCESS_BACKGROUND_LOCATION` runtime permission, which the App requests contextually the first time you begin a nav session. On iOS, the same behavior is gated by the "Always" location authorization prompt. You may downgrade to "While Using" or revoke permission entirely at any time via your device settings; the App will fall back to foreground-only behavior and continue functioning while open.
2. Information We Collect
a) Precise & Approximate Location. See Section 1 above. Location is transmitted to our servers only in the following limited scenarios: route origin/destination coordinates are sent to OpenRouteService for route calculation; viewport bounds are sent to our servers to fetch nearby points-of-interest.
b) Anonymous Device Identifier. On first launch we generate a random device UUID (a hexadecimal string) and store it locally on your device. This UUID is attached to any crowdsourced reports you submit, so we can rate-limit spam and detect abusive submissions. It is not linked to your name, email, or any other personally identifying information and it is regenerated if you uninstall and reinstall the App.
c) Crowdsourced Reports. When you submit a new point of interest, update a weigh station's open/closed status, or rate a facility, we store the report content (text, category, rating), the coordinates you provided, and a timestamp on our servers. Reports are visible to all App users.
d) Diagnostic & Analytics Data. We use Google Firebase Analytics and Firebase Crashlytics to understand which features are used, measure app stability, and diagnose crashes. This data is pseudonymous (tied to a Firebase-assigned installation ID, not your name) and includes standard telemetry such as: device model, OS version, app version, session length, feature taps (e.g., "Find A Pottie" button pressed), and crash stack traces.
e) Advertising Identifier. The free version of the App displays advertisements served by Google AdMob. AdMob may access your device's advertising ID (a resettable, non-personal identifier: `AAID` on Android, `IDFA` on iOS) to serve contextually relevant ads. You can reset this identifier or opt out of ad personalization at any time in your device's privacy settings.
f) Payment Information (Future). If we introduce paid subscription tiers, payment information (card numbers, billing address, billing name) will be collected and processed directly by Stripe, Inc. or the relevant app store's billing platform. We never see or store your full card details on our servers — we receive only a payment token and last-four digits for receipt display.
g) Future Data Categories. As we introduce new features we may collect additional data types, including but not limited to:
•
Cellular signal & radio-frequency (RF) coverage data — anonymized signal strength, carrier ID, and network type paired with coarse location, contributed to build community coverage heat maps for truckers in remote areas.
•
Vehicle telematics — if you opt in and pair a compatible ELD or OBD device, we may collect vehicle speed, fuel level, and diagnostic codes.
•
User account data — if you optionally sign in in the future (email address, display name).
•
Voice search transcripts — if voice-driven search is added.
Any new data category will be added to this Privacy Policy with the effective date shown at the top before it is collected. You may opt out of any new optional data category through the in-app Settings.
3. Information We Do NOT Collect
•
We do not require an account, email address, or phone number to use core features.
•
We do not collect your contacts, calendar, photos, microphone, or camera unless you explicitly grant those permissions for a specific opt-in feature.
•
We do not track you across other apps or websites for advertising purposes.
•
We do not perform automated decision-making or profiling that produces legal or similarly significant effects on you.
4. How We Use Your Information
•
To provide navigation, mapping, and point-of-interest features.
•
To improve the App's accuracy, stability, and user experience.
•
To display relevant, non-personalized (by default) advertisements in the free tier.
•
To detect and prevent fraud, abuse, or violation of our Terms of Service.
•
To communicate service-related notices (e.g., a security incident affecting your data).
•
To comply with legal obligations, court orders, or governmental requests.
5. Third-Party Service Providers
We share limited data with the following third parties strictly for the purposes described. Each provider is contractually obligated to handle your data only as needed to perform their service, or is subject to their own published privacy policy (linked below).
•
Google Firebase Analytics & Crashlytics — Pseudonymous usage and crash telemetry. https://firebase.google.com/support/privacy
•
Google AdMob — Advertising delivery (free tier). Advertising ID + IP address. https://policies.google.com/technologies/ads
•
OpenRouteService (HeiGIT gGmbH) — Route calculation. Receives your origin and destination coordinates only. https://openrouteservice.org/legal/
•
MapLibre & CARTO Basemaps — Base map tile delivery. Receives viewport coordinates. https://www.maplibre.org/ · https://carto.com/legal/privacy-notice/
•
OpenStreetMap Contributors — Underlying map data (offline usage). https://osmfoundation.org/wiki/Privacy_Policy
•
Stripe, Inc. (future paid tier) — Subscription payment processing. https://stripe.com/privacy
•
Google Play / Apple App Store — App distribution, in-app purchases (future), and, on Android, background location permission gating.
We never sell, rent, or trade your personal information to advertisers, data brokers, or any third party. See Section 8 (California residents) for our formal "Do Not Sell" declaration.
6. Data Retention
We retain different categories of data for different periods:
•
Ephemeral location during navigation — Not stored on our servers except as needed to complete an in-flight route calculation (typically less than 60 seconds).
•
Crowdsourced reports you submit — Retained indefinitely so the community continues to benefit from them. May be deleted on request (see Section 7).
•
Device UUID — Retained as long as the App is installed on your device. Regenerated on reinstall.
•
Firebase Analytics events — Retained per Firebase's default retention window (currently 14 months from event date).
•
Crashlytics crash reports — Retained per Firebase Crashlytics defaults (currently 90 days).
•
Advertising Identifier — Not stored by us. Passed only to AdMob at ad-request time.
•
Payment records (future paid tier) — Stripe retains transaction records per PCI-DSS and its own retention schedule; we retain the last-four digits and transaction ID for our own records for up to 7 years for tax and accounting purposes.
7. Data Deletion Requests
You can request deletion of the data we have associated with you at any time using either of the following methods:
•
Email: Send a message to support@pottiego.app with the subject line "Data Deletion Request." Include the approximate date and location of any specific reports you'd like removed. You do not need to provide personal information to make this request.
•
Uninstall the App: Uninstalling from your device automatically clears the locally-stored device UUID, so any future submissions from that device are treated as originating from a new anonymous user.
We will process valid deletion requests within 30 days and confirm completion by email. Note that we may retain minimal information as required by law (for example, tax records for paid subscribers, or records related to fraud investigations).
You can view a summary of the categories of data we hold and our data-deletion policy at any time at https://truck-nav-maps.emergent.host/api/legal/privacy.
8. Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights, which we honor regardless of your state of residence:
•
Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you.
•
Right to Delete — Request deletion of personal information we have collected (see Section 7).
•
Right to Correct — Request correction of inaccurate personal information we hold.
•
Right to Opt Out of Sale or Sharing — See below.
•
Right to Non-Discrimination — We will never charge you a different price or provide a lower quality of service because you exercise a privacy right.
Do Not Sell or Share My Personal Information. Ingalls Technologies does not sell your personal information for money or other valuable consideration, and we do not share your personal information for cross-context behavioral advertising. We serve contextual (non-personalized) advertising by default via AdMob. If AdMob is enabled to serve personalized ads on your device via your device's advertising ID (a choice you control in your OS settings), that is a "sharing" activity under the CPRA; you can opt out by resetting or disabling the advertising ID in your device settings, or by contacting support@pottiego.app to have your ID excluded from our ad requests going forward.
To exercise any right, email support@pottiego.app. We will respond within 45 days as required by law.
9. Your European / UK Privacy Rights (GDPR / UK GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you specific rights over your personal data.
Legal bases we rely on:
•
Contract (Art. 6(1)(b)) — Processing your location and other data to provide navigation is necessary to perform our contract with you (these Terms).
•
Legitimate interests (Art. 6(1)(f)) — Diagnostic and analytics data is used under our legitimate interest in improving the App, subject to your right to object.
•
Consent (Art. 6(1)(a)) — Optional data categories (e.g., future cellular-signal contribution, personalized ads) are only collected with your affirmative consent, which you may withdraw at any time.
•
Legal obligation (Art. 6(1)(c)) — When required to respond to lawful government requests.
Your rights:
•
Access, rectification, erasure, restriction, and portability of your personal data.
•
Right to object to processing based on legitimate interests.
•
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal is as easy to give as consent — revoke location permission in your device settings, or email support@pottiego.app.
•
Right to lodge a complaint with your local supervisory authority (in the UK, the ICO; in Ireland, the DPC; etc.).
To exercise any right, contact support@pottiego.app.
10. Children's Privacy
The App is intended for users 18 years and older. We do not knowingly collect personal data from anyone under 18. If we learn we have inadvertently collected data from a minor, we will delete it promptly. If you believe a child has provided information to us, please contact support@pottiego.app.
11. Data Security
We use industry-standard measures to protect your data, including:
•
Encrypted HTTPS/TLS connections for all data in transit.
•
Encryption at rest for our database and backups.
•
Access controls that limit employee and contractor access to production data on a strict need-to-know basis.
•
Server infrastructure hosted with reputable cloud providers with SOC 2-compliant physical and network security.
However, no system is 100% secure, and we cannot guarantee absolute security. If you suspect your account or data has been compromised, please contact us immediately at support@pottiego.app.
12. Data Breach Notification
In the unfortunate event of a data breach that affects your personal information, we will notify you and, where required, the appropriate supervisory authorities without undue delay and, in any case, within 72 hours of becoming aware of the breach (as required by GDPR Art. 33). Notification will be delivered via the email address you provided (if any), an in-App notice, and a public post on https://truck-nav-maps.emergent.host/api/legal/privacy.
13. International Data Transfers
The App's servers are located in the United States. If you use the App from outside the U.S., your data will be transferred to and processed in the U.S., which may have different data-protection laws than your country. Where required by law (e.g., for EEA users), we rely on Standard Contractual Clauses or equivalent lawful transfer mechanisms with our third-party providers.
14. Changes to This Policy
We may update this Privacy Policy at any time, with or without prior notice, to reflect changes in our practices, new features (including future data categories such as cellular-signal / RF coverage heat maps as described in Section 2(g)), new legal requirements, or other operational needs. The "Last updated" date at the top of this page shows the effective date of the current version. For material changes we will make reasonable efforts to notify you via an in-App notice.
Your continued use of the App after any change constitutes your acceptance of the revised policy. If you disagree with a change, your remedy is to stop using the App and uninstall it.
15. Contact Us
Questions, requests, or concerns about your privacy? Reach us at:
Email: support@pottiego.app
Mail: Ingalls Technologies · Massachusetts, USA
Web: https://pottiego.app
We aim to respond to all privacy inquiries within 7 business days and to formal data-access, deletion, or portability requests within 30 days (or 45 days for CCPA requests, as required by law).
Pottie GO
Ingalls Technologies · Massachusetts, USA
support@pottiego.app