Privacy Policy
Truked is a mobile application and service (the “Service”) operated by Bobcat Technology Consultants, LLC, doing business as Truked (“Truked,” “Company,” “we,” “us,” or “our”).
This Privacy Policy explains how we collect, use, disclose, retain, and protect your information when you use the Service. It applies to both customers who book deliveries (“Customers”) and independent drivers who accept deliveries through Truked (“Drivers”).
By using the Service, you acknowledge you have read and understood this Policy. If you do not agree, do not use the Service.
1. Scope
The Service is directed to users located in the United States. We do not offer the Service to users outside the United States and do not target users in the European Union, United Kingdom, or other jurisdictions with comprehensive data protection laws. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
The Service is intended for users aged 18 and over. See Section 9 (Children’s Privacy).
2. Information We Collect
2.1 Information you provide
All users: - Name, email address, phone number, password - Profile photo (optional) - Communications you send to Truked or other users through in-app chat or support forms
Customers: - Pickup and drop-off addresses - Item descriptions and photos of the load you want delivered - Payment method details (entered directly into Stripe; see Section 5)
Drivers: - Full legal name, date of birth, and residential address - Driver’s license number, state of issuance, and expiration date - Last four digits of Social Security Number (used only for identity verification, background checks, and tax reporting) - Proof of vehicle insurance and registration - Vehicle details (make, model, year, VIN, license plate, photos) - Photos of the load at pickup and at delivery - Bank account / debit card information for payouts (entered directly into Stripe Connect; see Section 5) - Emergency contact name and phone number
2.2 Sensitive Personal Information
Certain data we collect is considered “sensitive personal information” under California and other state privacy laws. This includes:
- Social Security Number (last four digits only, collected from Drivers)
- Driver’s license and government identifier details
- Precise geolocation data
We use sensitive personal information only for the purposes described in Section 3 (primarily identity verification, background checks, job routing, and tax reporting). We do not use this information for advertising, profiling, or any secondary purpose. You have the right to limit our use of sensitive personal information — see Section 8 (Your Rights).
2.3 Information collected automatically
When you use the Service, we automatically collect:
- Precise location (GPS). For Customers: when you set a pickup or drop-off address. For Drivers: while the driver app is in use AND during active delivery jobs (accepted through completion), including while the app is in the background. This is required to match jobs, enable routing, share live ETA with Customers, and support safety features.
- Device information. Device type, operating system, app version, IP address, and Expo push token (used to deliver notifications).
- Usage data. Screens viewed, actions taken, session timing, and similar product analytics.
- Diagnostic data. Crash reports and performance data (via Sentry; associated with your user ID but no other personally identifiable information).
2.4 Information from third parties
- Background check results (via Checkr) — see Section 4.
- Payment and payout processing metadata (via Stripe and Stripe Connect) — e.g., charge success/failure, payout status, dispute status.
3. How We Use Your Information
We use the information collected to:
- Provide and operate the Truked marketplace, including matching Customers with nearby Drivers, routing, and live ETA sharing.
- Process payments, payouts, tips, and refunds.
- Verify Driver identity, eligibility, and ongoing compliance (insurance, license, training).
- Commission and evaluate background checks on Drivers (see Section 4).
- Issue tax forms (e.g., IRS Form 1099-NEC) to Drivers.
- Send notifications about job status, account activity, and safety-critical messages.
- Operate in-app chat between Customers and Drivers, and between users and Truked support.
- Respond to support requests and resolve disputes.
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
- Analyze and improve the Service, including monitoring reliability and fixing bugs via crash reports.
- Comply with legal obligations, respond to lawful requests, and enforce our legal rights.
We do not use your personal information for targeted advertising. We do not sell your personal information.
4. Background Checks (Drivers)
As part of Driver onboarding and periodically thereafter, we obtain consumer reports about Drivers from Checkr, Inc., a Consumer Reporting Agency under the federal Fair Credit Reporting Act (FCRA). Before any consumer report is obtained, we provide Drivers with a separate written disclosure and obtain written authorization, as required by the FCRA and applicable state laws. If we take adverse action based on a report, we provide the pre-adverse and adverse action notices required by the FCRA.
The FCRA Disclosure and Authorization is a separate document provided during Driver onboarding.
5. How We Share Your Information
We share personal information only in the following circumstances:
5.1 Between Customers and Drivers on a job
When a Driver accepts a Customer’s job, we share the information each side needs to complete the delivery:
- With the Driver: Customer first name, phone number, pickup and drop-off addresses, item description, load photo.
- With the Customer: Driver first name, phone number, profile photo, vehicle details (make, model, year, plate), real-time location during active delivery, and ETA.
5.2 Service providers
We share information with vendors who help us operate the Service, under contractual data-protection terms. Each provider processes only the data needed for its role:
| Provider | Role | What they receive |
|---|---|---|
| Supabase | Database, authentication, file storage | All user and job data |
| Stripe (incl. Stripe Connect) | Payments, payouts, tax reporting | Payment method data, payouts, tax identity data |
| Checkr | Background checks for Drivers | Driver identity info, DL, DOB, SSN last 4 |
| Google Maps / Places API | Address autocomplete, routing, distance calculations | Address strings, coordinates |
| Expo (and Apple APNs / Google FCM) | Push notification delivery | Push tokens, notification content |
| Resend | Transactional email delivery | Email addresses, email content |
| Sentry | Error and crash reporting | User ID, error details, device metadata (no PII) |
Links to each provider’s privacy policy are available on request.
5.3 Legal and safety reasons
We may disclose information when we reasonably believe it is necessary to comply with a law, regulation, subpoena, court order, or other legal process; to enforce our Terms of Service; or to protect the rights, property, or safety of Truked, our users, or the public.
5.4 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will notify affected users and, where required by law, give an opportunity to object or delete.
5.5 With your consent
We may share information in other ways with your consent or at your direction.
We do not sell or share personal information in exchange for money or for cross-context behavioral advertising.
6. Data Retention
We keep personal information only as long as needed to provide the Service and to meet legal, accounting, tax, or reporting requirements. Indicative retention periods:
| Category | Retention |
|---|---|
| Account information (name, email, phone) | Duration of account + 2 years after deletion |
| Payment and payout records | 7 years (IRS recordkeeping) |
| Background-check reports and related data | Duration of active Driver status + 5 years |
| Driver verification documents (DL, insurance, registration) | Duration of active Driver status + 2 years |
| Precise location history for a job | 2 years (for dispute resolution) |
| Real-time location not tied to a job | Not retained beyond the active session |
| Chat messages between users | 2 years |
| Crash reports and diagnostic logs | 90 days |
| Admin audit logs of sensitive actions | 7 years |
When information is no longer needed, we delete or de-identify it.
7. Security
We use administrative, technical, and physical safeguards appropriate for the type of data we hold. Examples include:
- Sensitive fields (date of birth, driver’s license, Social Security Number last four) are encrypted at rest using application-level encryption before being stored.
- Access to production systems is limited to authorized personnel and logged.
- All network traffic between the app and our servers uses TLS.
- Payment card details are handled directly by Stripe; Truked does not store full payment card numbers.
No system is completely secure. We cannot guarantee absolute security, but we design the Service to protect your information and respond to incidents promptly.
8. Your Rights and Choices
8.1 All users
You may:
- Access the personal information we hold about you.
- Correct information that is inaccurate.
- Delete your account and your personal information, subject to legal retention requirements above.
- Opt out of marketing emails by clicking the unsubscribe link in any marketing email. Transactional and safety-critical messages cannot be opted out of.
- Disable location services in your device settings. Note: disabling location will prevent core features of the Service.
To delete your account: open the Truked app, go to Profile → Delete account, or email support@truked.com. Account deletion removes your profile from the active service. Records we are required to retain (payment records, background-check data, audit logs) are preserved for their required retention period and then deleted or de-identified.
To make any other rights request, email support@truked.com. We will verify your identity before acting on the request and will respond within the time required by applicable law.
8.2 California residents (CCPA / CPRA)
In the past 12 months we have collected, used, and disclosed the categories of personal information described in Sections 2 and 5 for the business purposes described in Section 3.
California residents have the right to:
- Know what personal information we collect, the sources, the purposes for collection, and the categories of third parties with whom we share it.
- Access a copy of the personal information we hold about you.
- Delete your personal information (subject to legal retention requirements).
- Correct inaccurate personal information.
- Opt out of sale or sharing of personal information for cross-context behavioral advertising. Truked does not sell or share personal information for advertising.
- Limit the use of sensitive personal information. As described in Section 2.2, we already restrict our use of sensitive PI to the limited purposes listed; we do not use sensitive PI to infer characteristics about you or for advertising.
- Non-discrimination for exercising these rights. We will not deny service, charge different prices, or provide a lesser quality of service for exercising your privacy rights.
To exercise these rights, email support@truked.com. We will verify your identity and respond within the time required under California law (generally 45 days, extendable once).
You may designate an authorized agent to make a request on your behalf.
8.3 Other state residents
Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights. Contact support@truked.com to exercise them; we will honor rights to the extent they apply to you under your state’s law.
9. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13, we will promptly delete it.
The Service is additionally intended for users aged 18 and over as a condition of our Terms of Service.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, in-app notice, or by prominently posting the updated Policy with a new effective date before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
11. Contact Us
Questions, complaints, or requests regarding this Privacy Policy:
Bobcat Technology Consultants, LLC d/b/a Truked 13016 Eastfield Rd, STE B200-240, Huntersville, NC 28078 Email: support@truked.com
This document is a DRAFT prepared for legal review. It is not legal advice. A qualified privacy attorney should review and customize this policy before it is published.