App Privacy Policy

App Privacy Policy — SiteBoss Last updated: December 30, 2025

Introduction SiteBoss (the “App”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect location data and other information when you use our mobile application and related services.

Information We Collect We collect the following types of information: - Location data: Real-time or periodic GPS coordinates, speed, heading, altitude, and related metadata required to provide vehicle tracking and location-based services. This includes background location data when the app is not actively in use to ensure continuous tracking functionality. - Device identifiers: Device model, operating system version, unique device identifiers, app version, and Firebase Cloud Messaging tokens for push notifications and diagnostics. - Account information: Email address and password (stored locally on your device in encrypted form), name, and any profile information you provide when creating or using your account. - Authentication data: Session cookies and authentication tokens used to maintain your login session and authenticate API requests. - Usage data: App usage patterns, feature interactions, error logs, and analytics data collected to improve app stability, performance, and user experience.

How We Use Your Information We use the information we collect to: - Provide and improve live-tracking services, location features, and vehicle monitoring capabilities. - Display device or vehicle positions on maps (via Google Maps API) and in the app dashboard. - Send location-based notifications, alerts, and push notifications (if enabled). - Maintain your login session through secure cookies and authentication tokens. - Establish real-time connections for live tracking functionality. - Perform analytics, troubleshoot technical issues, and improve app stability and performance. - Comply with legal obligations and respond to lawful requests from authorities.

Legal Basis & Consent Where required by law, we will ask for your explicit consent before collecting precise location data. You may grant or revoke permission through your device settings at any time. Continuing to use the app after granting permission means you consent to the collection and use described in this Policy. For users in the European Economic Area (EEA), our legal basis for processing location data is your consent and our legitimate interest in providing the tracking services you have requested.

Data Minimization We are committed to minimizing the collection and use of location data: - We only collect location data that is necessary to provide the core tracking functionality you have requested. - Location data is collected at intervals appropriate for the tracking service (not continuously unless required for real-time tracking). - You can disable location permissions at any time through your device settings. - Background location collection only occurs when necessary for continuous tracking features you have enabled. - We do not collect location data when the tracking service is not actively being used by you.

Sharing & Third Parties We do not sell your personal data. We may share location and account data with: - Service providers who help operate the App (hosting, analytics, maps, and push notification services) under contracts that require them to protect your data. - Law enforcement or government authorities when legally required to comply with a subpoena, court order, or applicable law. - Other users or third parties only when you explicitly authorize such sharing (for example, sharing a live location link). Third-party services we use include: Traccar (tracking backend), Google Maps API, Firebase Services (Messaging and Analytics), and hosting providers.

Data Retention We retain location and account data only for as long as necessary to: - Provide the tracking services you have requested. - Meet legal obligations. - Resolve disputes and enforce agreements. - Support internal analytics and service improvement (anonymized where possible). You can request deletion of your data by contacting us (see “Contact” below). We will delete your data within 30 days of your request, except where we are required to retain it by law.

Security We implement reasonable technical and organizational measures to protect location and personal data from unauthorized access, alteration, disclosure, or destruction. Passwords are stored locally on your device in encrypted form. All data transmissions are encrypted using HTTPS/TLS protocols. However, no method of transmission or storage is 100% secure; we cannot guarantee absolute security.

User Controls You can control how we collect and use your data: - Location: Disable location permission in your device settings (note: disabling may affect core functionality). - Notifications: Disable push notifications in your device settings or app preferences. - Account: Log out or delete your account to stop future data collection tied to that account. - Requests: Contact us to request access, correction, or deletion of your personal data.

Children Our App is not intended for children under the age of 13 (or higher age where required by law). We do not knowingly collect location data from children. If you believe a child has provided us with information, contact us and we will take steps to delete such information.

Updates to This Policy We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Significant changes will be communicated through the App or other reasonable means.

Contact If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: - Email: support@site-boss.com.au - Website: site-boss.com.au