Application: Cab (bundle/package identifier com.amgsol.cab) ·
Effective date: 30 July 2026 · Last updated: 30 July 2026
This app and the personal data processed through it are controlled by:
Your employer's Human Resources / workforce system is a separate source of record for your HR profile; see Section 4.
We collect only what is needed to operate the transport service. Every item below reflects the actual behaviour of the application.
| Data | Source | Why |
|---|---|---|
| Full name | Your employer's workforce system; editable in the app | Display, driver manifest, ops follow-up |
| Mobile phone number | Workforce system; editable in the app | Sign-in identity and rider/driver contact |
| Email address | Workforce system / provisioning | Sign-in (staff) and account communication |
| Employee number | Workforce system | Cross-reference to your HR record |
| Password | Set by you / your employer | Authentication. Passwords are handled by our identity provider (Supabase Auth) or verified against your employer's HR system; we do not store readable passwords. Password-reset codes are stored only as a hashed, single-use value for 15 minutes. |
Your structured home address (address line, area, landmark, city, state, PIN code and, where available, geo-coordinates) is read from your employer's workforce/HR system to plan your cab route and drop-off point. The app does not let you edit your HR home address and never writes back to the HR system. Address text is sent to Google's Geocoding service (Section 5) to determine drop-off coordinates.
| Who | What | Foreground/Background | Use |
|---|---|---|---|
| Driver | Precise GPS (latitude, longitude, heading, speed), on-shift only | Background + foreground | Live tracking to riders/manager; trip distance (odometer) for operator billing. Only the latest position is kept (no location history/track is stored). |
| Rider | Precise GPS | Foreground only | During boarding (until your pickup is verified) your location is briefly shared with our server — about every 8 seconds — so we can confirm you are at the cab before releasing your pickup code; this stops the moment you board. For drop-off, your location is used on your device to unlock your get-out code. Only your latest position is kept; no location history is stored. |
| Any user | Precise GPS at the moment you raise an SOS | Foreground | Sent with your emergency alert so responders can locate you. |
We do not collect advertising identifiers (IDFA/GAID), and the app contains no advertising, analytics, attribution, or cross-app tracking SDKs.
We do not sell your personal data and do not use it for advertising or cross-context behavioural profiling.
App data is stored in our managed database and storage (Supabase — Section 5). Your HR profile (name, contact, home address, work location, employment details, and the password used by employee riders) lives in your employer's separate workforce/HR system, which the app reads from but never modifies. Requests about your HR record should go to your employer's HR department.
We share data only with service providers that help operate the app. Each is a processor acting on our instructions; none is permitted to use your data for their own purposes beyond providing their service.
| Provider | Data shared | Purpose |
|---|---|---|
| Supabase (hosting, authentication, database, file storage, realtime) | All app data, credentials/session, uploaded documents, latest driver location | Core backend infrastructure. Region: Asia-Pacific region |
| Google Maps Platform (Geocoding, Directions) | Home/area address text; trip origin, destination and waypoint coordinates | Convert addresses to coordinates and compute routes/distance |
| Google (Gemini AI) | Your name/role; your own trip details (for riders, including your assigned driver's name and contact); your chat messages; lost-item descriptions you file via chat. For managers/vendors: operational roster and driver summaries. Not sent: passwords, OTPs, home addresses, GPS coordinates. | Power the in-app assistant |
| Expo push service → Apple Push Notification service (APNs) & Google Firebase Cloud Messaging (FCM) | Push token and notification content | Deliver notifications |
| SMS provider (not currently active) | Phone number and emergency message | SOS fallback text (feature not currently active) |
Some providers (Google, Supabase, Apple) may process data outside your country. Transfers rely on the providers' standard contractual protections — namely the data-processing agreements (DPAs) and Standard Contractual Clauses offered by each provider.
We process your data to perform the transport service made available to you by your employer and, where applicable, on the basis of your employer's legitimate interest in providing and administering that transport benefit, our legal obligations (e.g. safety, tax/audit), and your consent for device permissions such as location and notifications. You can withdraw device permissions at any time in your device settings (some features will stop working).
We keep personal data only as long as needed for the purposes above:
When you delete your account (Section 9), associated records are removed or de-identified as described there.
Data is encrypted in transit (HTTPS). Access is restricted by role, verification codes are single-use and rate-limited against brute force, uploaded documents are kept in a private bucket accessible only via short-lived signed links, and sign-in is protected by lockout on repeated failures.
The app is for the organisation's adult workforce and authorised transport personnel. It is not directed to children and we do not knowingly collect data from anyone under 18.
We may update this policy; material changes will be notified in the app or by email. The "Last updated" date above reflects the latest version.
Questions or requests: admin@amgsol.com · Support: admin@amgsol.com · American Green Solutions, 2020 Calamos Ct, Suite 200, Naperville, IL 60563, USA (India operations: Sanali Spazio, Madhapur, Hyderabad 500081).
Every data-handling statement above is derived from the application's source code and configuration as audited on 13 August 2026.