Privacy Policy

We process the following categories of data:

• Account and profile data: name, email address, password (stored encrypted), and your role (operator/administrator or field worker). If you choose to provide them: phone number, address and a profile photo.
• Sign in with Apple or Google: if you sign in with Apple or Google, we receive your name and email address from the provider to create and identify your account. (Apple may let you hide your real email address.)
• Job content: the information in the jobs that are created and carried out — e.g. titles, descriptions, from/to addresses, custom fields, status and timestamps, and photos attached to a job.
• Customer signature: when a job is completed a customer can sign on screen. We then store the signature (image) together with a timestamp as proof of completion.
• Photos: with your permission the app uses the camera and photo library for your profile picture and for images attached to jobs.
• Address and map data: the addresses entered for a job are shown on a map (Apple Maps on iOS, Google Maps on Android) to display the route from and to.
• Device token for notifications: to send push notifications we store a device identifier (push token) from Apple and Google respectively.
• Technical data: limited technical information such as IP address and logs generated when you use the Service, for operation and security.

• Create and manage your account and sign-in.
• Provide the Service’s features — create, assign, carry out and follow up on jobs in real time.
• Send push notifications and email about new and changed jobs.
• Show routes and addresses on a map.
• Produce job documentation (e.g. customer signature and PDF export).
• Maintain security, troubleshoot and improve the Service.

Legal basis: the processing is mainly carried out to perform the contract of providing the Service to you and your employer, and based on our legitimate interest in operating and securing the Service. Access to camera, photos and notifications is based on your consent, which you can withdraw in your device settings.

We do not sell your data. To deliver the Service we use selected providers that process data on our behalf:

• Supabase — database, authentication and storage of account and job data as well as photos.
• Resend — delivery of transactional email (e.g. invitations, confirmations and password resets).
• Apple — ”Sign in with Apple”, push notifications (APNs) and Apple Maps on iOS.
• Google — ”Sign in with Google”, push notifications (Firebase Cloud Messaging) and Google Maps on Android.
• Vercel — web hosting for the web service.

We may also disclose data if required by law or to protect our rights. Your employer (the company whose account you are connected to) can see the jobs and data that belong to the business.

Some of our providers may process data in countries outside the EU/EEA. When this happens we ensure a level of protection equivalent to the GDPR, for example through the European Commission’s standard contractual clauses.

We keep your data for as long as your account is active and as long as it is needed to provide the Service. Job data may be kept for as long as it is needed for your employer’s records. When data is no longer needed, or when you request deletion, we remove it within a reasonable time, unless we are required by law to retain it.

Under the GDPR you have the right to:

• be informed about and access your data,
• have inaccurate data corrected,
• have your data erased (”the right to be forgotten”),
• request restriction of or object to the processing,
• obtain a copy of your data (data portability), and
• withdraw any consent you have given.

Contact us at privacy@tacticlogistic.se to exercise your rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

You can delete your account at any time directly in the app under the Profile tab (”Delete account”), or on the web under Settings. Your account and personal data are then permanently deleted, except for what we are required by law to keep.

You can also request deletion by emailing privacy@tacticlogistic.se.

We take technical and organizational measures to protect your data, including encrypted transfer, access control and permission management so that users only reach data they are entitled to.

The Service is aimed at professionals and is not intended for children. We do not knowingly collect data about children.

We may update this privacy policy. We will inform you of material changes in the Service or by email. The date at the top shows when the policy was last changed.

Data controller: [Company legal name]
Email: privacy@tacticlogistic.se