Privacy Policy

1. Introduction

Logixtecs Solutions LLC operates the Trucker's Routine mobile application and related services. We are committed to protecting your privacy and being transparent about our data practices.

By using Trucker's Routine, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1.5 Canadian Users - PIPEDA Compliance

For users in Canada, we comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This privacy policy describes how we collect, use, and protect your personal information in accordance with Canadian federal privacy law.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us:

• Account Information: Email address, phone number, full name
• Profile Information: Age, gender, height, weight, fitness level, fitness goals
• Payment Information: Processed securely through Stripe (we do not store full credit card numbers)
• Authentication Data: OAuth tokens from Google Sign-In or Apple Sign-In

2.2 Usage Data

We automatically collect information about how you use our Service:

• Workout Data: Exercise history, workout completion, progress tracking, rep counts, weights used
• Trip Data: Route planning information, stops, locations (when you use trip planning features)
• App Interaction: Features used, time spent in app, screens viewed, button clicks
• Device Information: Device type, operating system version, app version, device identifiers
• Log Data: IP address, crash reports, performance data, error logs

2.3 Location Data

When you use trip planning features, we collect location data to provide route optimization and fitness recommendations at stops. You can disable location access in your device settings, but this will limit trip planning functionality.

2.4 Health and Fitness Data

We collect fitness-related information you provide or that is generated through your use of the app:

• Workout performance metrics
• Physical measurements (height, weight, body measurements)
• Fitness goals and preferences
• Exercise preferences and limitations

Note: We do not integrate with Apple Health or Google Fit at this time, but may do so in future versions with your explicit consent.

3. How We Use Your Information

3.1 Service Delivery

We use your information to provide and improve our Service:

• Generate personalized AI-powered workout recommendations
• Track your progress and fitness journey
• Provide trip planning with fitness integration
• Manage your account and subscription
• Process payments and prevent fraud
• Provide customer support

3.2 Analytics and Service Improvement

We analyze usage data to improve our Service:

• Understand how users interact with our app
• Identify bugs and technical issues
• Develop new features and improve existing ones
• Conduct research on fitness trends and user behavior
• Monitor and analyze usage patterns and trends

We use third-party analytics services including Mixpanel and Sentry for this purpose.

3.3 Marketing and Communications

We may use your email address and phone number to send you:

• Product updates and new features
• Fitness tips and workout recommendations
• Promotional offers and discounts
• Company news and announcements
• Surveys and feedback requests

You can opt out of marketing emails by clicking "Unsubscribe" at the bottom of any marketing email. You cannot opt out of transactional emails (password resets, subscription changes, etc.).

4. Corporate Account Data Sharing

4.1 What We Share with Employers

For corporate accounts, we share the following information with the sponsoring company:

• Engagement Metrics: App usage frequency, login activity, feature usage
• Workout Data: Workout completion rates, exercise types performed, duration of workouts
• Progress Tracking: Fitness goals, progress toward goals, achievement milestones
• Aggregate Health Metrics: Overall activity levels, wellness engagement
• Participation Reports: Team participation rates, program adoption statistics

4.2 What We Do NOT Share with Employers

We do NOT share the following with corporate account sponsors:

• Your personal contact information (email, phone)
• Specific body measurements or weight data
• Individual health conditions or limitations
• AI-generated workout details
• Trip planning or location data

4.3 Your Rights as a Corporate User

By accepting a corporate account, you explicitly consent to this data sharing. If you do not wish to share this information with your employer, you should use an individual account instead.

5. How We Share Your Information

5.1 Third-Party Service Providers

We share your information with trusted service providers who assist us in operating our Service:

5.2 Corporate Account Sponsors

As described in Section 4, we share usage and fitness data with employers for corporate accounts.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or legal process
• Requests from law enforcement or government agencies
• Protecting our rights, property, or safety
• Investigating fraud or security issues

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.5 What We DO NOT Do

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services.

6.1 Active Accounts

• Account data: Retained while account is active
• Workout history: Retained indefinitely to track long-term progress
• Trip data: Retained for 2 years or until deleted by user
• Payment records: Retained for 7 years for tax and legal compliance

6.2 Deleted Accounts

When you delete your account:

• Personal information is removed within 30 days
• Workout data is anonymized and may be retained for analytics
• Payment records are retained for legal compliance
• Backups may retain data for up to 90 days

7. Data Security

We take the security of your personal information seriously and implement industry-standard security measures:

7.1 Encryption

• Data in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+ (Transport Layer Security)
• Data at Rest: Personal information stored in our databases is encrypted at rest using AES-256 encryption
• Database Encryption: Our PostgreSQL databases utilize encryption at the storage layer, with encrypted backups
• Passwords: User passwords (when applicable) are hashed using bcrypt with salt
• OAuth Tokens: Authentication tokens are encrypted and stored securely

7.2 Infrastructure Security

• Cloud Hosting: We use secure cloud infrastructure providers (Railway, Supabase, AWS) with SOC 2 Type II compliance
• Network Security: Firewalls, intrusion detection systems, and DDoS protection
• Secure Storage: Media files (images, videos) are stored on Cloudinary with secure CDN delivery
• Database Security: Database connections use SSL/TLS, with IP whitelisting and connection pooling

7.3 Access Controls

• Limited Access: Employee access to personal data is restricted on a need-to-know basis
• Authentication: Multi-factor authentication (MFA) required for all administrative access
• Role-Based Access: Granular permissions ensure employees only access data necessary for their role
• Access Logging: All access to personal data is logged and monitored

7.4 Monitoring and Response

• Security Monitoring: 24/7 automated monitoring for security threats and anomalies
• Error Tracking: Real-time error monitoring with Sentry for immediate incident response
• Regular Audits: Periodic security reviews and vulnerability assessments
• Incident Response: Documented procedures for security incident handling and notification

7.5 Third-Party Security

All third-party service providers we use are required to maintain comparable security standards:

• Payment Processing: Stripe is PCI DSS Level 1 certified (highest security standard)
• Database: Supabase and Railway provide encrypted databases with automatic backups
• Cloud Storage: Cloudinary provides secure media storage with access controls

8. Your Privacy Rights

8.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• Review your workout history and profile information in the app

8.2 Correction and Updates

You can update your information at any time through the app settings. If you need assistance, contact us at support@truckersroutine.com.

8.3 Deletion

You have the right to delete your account and personal information. To delete your account:

1. Open the app and go to Settings
2. Select "Account Settings"
3. Choose "Delete Account"
4. Confirm deletion

Note: Some information may be retained for legal compliance as described in Section 6.

8.4 Opt-Out of Marketing

You can opt out of marketing communications:

• Click "Unsubscribe" in any marketing email
• Adjust notification settings in the app
• Contact us at support@truckersroutine.com

8.5 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell)
• Right to access your personal information
• Right to equal service and price

9. Children's Privacy

Trucker's Routine is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

10.5 Data Residency for Canadian Users

We use the following US-based service providers:

• Supabase: Database hosting (PostgreSQL) - servers in US
• Stripe: Payment processing - complies with PCI-DSS standards
• OpenAI: AI-powered workout generation - data processed in US
• Railway: Application hosting - servers in US

All service providers are contractually obligated to protect your data in accordance with applicable privacy laws, including PIPEDA for Canadian users.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to your registered email address
• Posting a notice in the app
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13.2 Privacy Commissioner of Canada

If you are a Canadian resident and have concerns about how we handle your personal information, you have the right to file a complaint with:

We encourage you to contact us first at privacy@truckersroutine.com so we can address your concerns directly.

14. Consent