[…] must be completed (legal entity name, tax ID, address, jurisdiction). A policy with incorrect or invented data neither protects nor complies. Appogio runs apps that process sensitive data (location, including that of minors in SchoolTrack, and video), so legal review is mandatory.The controller of the personal data collected through the Appogio platform and its applications is [LEGAL ENTITY NAME], registered under [TAX ID], with address at [ADDRESS, CITY, COUNTRY] (hereinafter "Appogio", "we").
This policy applies to the web platform and the mobile applications of the Appogio ecosystem — including SchoolTrack (school transport), DriveIQ, PilotOS, InspectPro, CamFleet, TagRadar, ColdChain, AssetTrack, Notice, FleetCare, GuardCheck, WorkOrders, RouteOS, FleetOps, SatLink, TrackPhone and others — when you use them as an administrator, driver, monitor, parent/guardian or end user.
Appogio is a multi-company (white-label) platform: each client company, reseller or institution manages its own data in isolation. When you use an app through an institution (for example, your school or your fleet company), that institution is the data controller and Appogio acts as data processor on its behalf.
We process data on the basis of: (i) performance of the contract with the client institution/company; (ii) the data subject’s consent where the law requires it; (iii) compliance with legal obligations; and (iv) the legitimate interest in the security of the service. The use of location and video data requires authorization; by enabling them, you or your institution declare that you hold such authorization.
SchoolTrack and other features may process data of children and adolescents (name, photo, ID document, stop and location associated with transport). This data:
We do not direct advertising at minors and we do not sell their data. If a parent or guardian wishes to access, correct or delete a minor’s data, they may request it from their institution or write to us at [email protected].
We do not sell personal data. Data is shared only with:
The infrastructure may be located on servers outside your country. In those cases we adopt measures so that the transfer complies with applicable regulations and an adequate level of protection is maintained.
We retain data for as long as the relationship with the institution/company exists and for the periods required by law. When it is no longer necessary, it is securely deleted or anonymized.
We apply technical and organizational measures to protect data: encryption in transit (HTTPS), role-based access control, strict isolation between companies/institutions, and backups. No system is infallible, but we work to reduce the risks of unauthorized access, loss or alteration.
You may exercise the rights of access, rectification, updating, deletion, objection and withdrawal of consent, as well as request information about the use of your data. To exercise them, write to [email protected] stating your request; we may ask for identity verification. If you use an app through an institution, you may also contact that institution.
The site and the apps use cookies and local storage for authentication and operation. See our Cookie Policy.
We may update this policy. We will publish the current version on this page with its update date; relevant changes will be communicated through the usual channels.
This policy is construed in accordance with applicable data protection regulations, including — where relevant — Law 1581 of 2012 and Decree 1377 of 2013 (Colombia, Habeas Data), and the other regulations of the countries where the client institutions operate. [Confirm jurisdiction and applicable regulations with legal counsel.]
For any matter related to privacy or data processing: [email protected] · WhatsApp +57 305 229 2372.