Privacy Policy

TrustedTrucks is operated by Konfid.io GmbH, Schlüterstraße 55, 10629 Berlin, Germany (“we”, “us”). We are the controller of the personal data processed through the TrustedTrucks platform: the web portal, the TrustedTrucks mobile app for Android and iOS, and this website.

For anything about your data, write to hello@konfidio.com, or to the postal address above.

We only collect what the platform needs to arrange, carry out, prove and settle freight between companies:

• Your account: your name, work email address, phone number if you give it, your role in your company and your sign-in. Your password is handled by our sign-in service and is never stored in readable form.
• Your company: its name, addresses, registration and VAT numbers, bank details, team members, and the documents you upload to qualify it (such as licences, insurance certificates, minimum-wage confirmations and letterheads).
• Freight records: quotation requests, quotations, orders, stops, loads, messages between companies, invoices and payments.
• Proof of Pickup and Proof of Delivery: photos, signatures and delivery notes taken in the app, with the time and the place they were taken.
• Location: the app asks for your location only while you capture a Proof of Pickup or Proof of Delivery, and only to record where it was taken. It does not track you in the background. Truck positions shown in Track & Trace come from the carrier's vehicles and are linked to the order, not to your phone.
• Your device: a push notification token, the device type, operating system and app version, so we can send the notifications you choose and keep the app working.
• Technical data: server logs with IP address, time, and the request made, kept for security and fault finding.

If you unlock the app with your fingerprint or face, that check happens on your phone. We never receive or store biometric data.

• To provide the platform you or your company signed up for: accounts, quoting, orders, tracking, proofs, invoices, payments and the Evidence Vault (Art. 6(1)(b) GDPR).
• To meet legal duties, such as keeping invoices and business records for the periods tax and commercial law require (Art. 6(1)(c) GDPR).
• To keep the platform secure and prevent fraud and misuse, and to improve it (our legitimate interest, Art. 6(1)(f) GDPR).
• With your consent, for notifications and for location access when you capture a proof. You can withdraw consent at any time in your phone's settings or the app's settings (Art. 6(1)(a) GDPR).

TrustedTrucks records key events of a shipment, and fingerprints (cryptographic hashes) of documents, on a permissioned ledger run for the network. This is what lets every party check that a proof, an invoice or a certificate has not been changed.

The documents themselves are not written to the ledger, only their hashes, which cannot be turned back into the document. Ledger entries cannot be deleted. Wallet addresses held by companies and users are linked to their accounts on the platform.

Other companies on a shipment see what they need to do their part: a carrier sees the load and stops of an order it quotes for or carries; a forwarder sees the proofs, documents and invoices of its orders.

We use service providers who process data on our behalf under data processing agreements:

• Cloud hosting and databases (Amazon Web Services).
• Push notification delivery (Expo, through Google Firebase Cloud Messaging and Apple Push Notification service).
• Email delivery for account and order messages.
• Bank payment initiation (Yapily), when you choose to pay an invoice from your bank. We never see your online banking credentials.
• Error reporting, maps and spam protection on the web portal (Sentry, Google Maps, Google reCAPTCHA).

We do not sell personal data, and we do not use it for advertising.

Some service providers may process data outside the European Economic Area. Where they do, we rely on an adequacy decision of the European Commission or on the Commission's Standard Contractual Clauses, with additional safeguards where needed.

• Account and company data: for as long as the account exists.
• Orders, proofs, invoices and payment records: for the periods German commercial and tax law require (up to ten years), then deleted.
• Server logs: up to 30 days, unless needed to investigate a security incident.
• Ledger entries and document hashes: permanently, as described above.

To delete your TrustedTrucks account, write to hello@konfidio.com from the email address of the account, or use the support form in the app. We delete your account and personal data within 30 days, except records we must keep by law and ledger entries, which cannot be erased.

If you are the last administrator of your company, tell us whether the company account should be closed too.

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Write to hello@konfidio.com.

You can also complain to a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Data is encrypted in transit, access is limited to the people who need it, and sign-in tokens are kept in your phone's secure storage. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

TrustedTrucks is a business platform for companies and their staff. It is not meant for anyone under 18.

We may update this policy as the platform changes. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email.