Privacy Policy
Last updated: October 6, 2026
What we collect
Account information: your name, email address, company name, and password (stored hashed — we never see it).
Asset & location data: GPS positions, speed, heading, battery level, and engine data reported by the trackers you install on your vehicles, equipment, and tools, plus the zones and asset records you create and the driving scores built from them. This data exists so we can show it back to you — that's the product.
Photos & receipts: pictures you take or attach in the app — job photos (with where they were taken), receipts, asset photos and, if your company turns it on, a photo at clock-in or clock-out (deleted after 90 days).
Usage & billing: basic product analytics and, if you subscribe, billing details processed by our payment provider (we don't store card numbers).
How we use it
To operate the service: showing your fleet on your map, sending the alerts you configure, generating your reports and invoices, and providing support. We also use aggregate, de-identified usage data to improve the product.
What we never do
We do not sell your data. We do not share your fleet's location data with advertisers, data brokers, or other customers. Your operational data is yours.
Who can see your data
Only users you add to your company account. Our service providers process data on our behalf under their own security commitments: hosting and database; map, address-lookup, routing, weather and satellite-imagery services (the places being looked up — for an address, a position rounded to about 100 m); AI features (what you ask Ask AI, the fleet data it reads to answer, and the summaries we write for you); SMS/email delivery; and payments. We may disclose data if legally required.
Tracking people
If you use personnel tracking, you are responsible for notifying your crew and complying with applicable employment and privacy laws in your jurisdiction. HammerTrack records a crew member's phone location only while they are clocked in or have turned on Go Live, and with the photos or receipts they send; off the clock their phone can still place company tool tags it hears (see below).
Mobile app permissions (iOS & Android)
The HammerTrack app requests only the permissions its features need:
- Location — to show your own phone as a live asset when you turn on the crew tracker (“Go Live”), to record your shift while you are clocked in, to place your company's tool tags your phone hears, and to power zone check-ins. See the location note below.
- Camera & Photos — to scan tracker labels and to take or attach job, asset, VIN/GVWR and receipt photos — and a clock-in or clock-out photo where your company requires one.
- Notifications — to deliver theft and critical fleet alerts to your lock screen. We store only an anonymous per-device push token.
- Bluetooth (Nearby devices) — to hear your company's tool tags while the app is open; switch it off under My phone.
- Microphone — only when you tap the mic to talk to Ask AI or the map search, or while Ask AI's conversation mode is on.
Revoke any permission in your device settings at any time; the related feature simply stops working.
Location while Go Live is on, and while you are clocked in
Go Live: when — and only when — you turn on live crew tracking, the app collects that device's location while the app is open and in use, so your fleet map stays live for your team. It stops the moment you turn it off or the session ends.
Clocked in: when you clock in on the time clock, the app records this device's location until you clock out — including when the app is closed or not in use on app versions that support it (Android 1.4 and later; you are shown a notice and asked for permission before this starts, and a notification stays visible the whole time a shift is recording). Your employer uses this to record where your shift happened and to verify your time card. The shift recorder records nothing when you are not clocked in. Turning location off while clocked in pauses recording and the app tells you so.
Bluetooth tool tags: while the app is open it listens for Bluetooth tags (switch it off under My phone) and, when it hears one, sends this phone's location so the tag can be checked against your company's tools and placed. On the clock, the tools your phone hears are shown with you. Off the clock, HammerTrack keeps nothing for a tag that is not one of your company's tools; for one that is, it keeps the tag's rough area (about 250 m) and nothing that names you or your phone — or, for an item your company has put in recovery as missing, the tag's exact spot, which only your company's Admins see.
Privacy zones: inside a place your company marks as a privacy zone (or right at its edge), the app keeps no automatic location — no shift recording, no tag-listener location, no Go Live — and a tag heard there is kept only as a rough area. A clock-in or clock-out you make there still records where you tapped, as every clock-in does, and a photo or receipt you send there carries its spot.
Location is used solely to display your fleet and crew on your company's map, to build your company's time cards, to trigger the alerts your company configures and, when a clocked-in person's phone is the only one riding in a company vehicle, to count that vehicle's driving toward their driver safety score, which only they and the people above them in the company can see. It is never used for advertising, never sold, and shared only with the service providers listed above that process it for us.
Retention & deletion
Location history is retained while your account is active; clock-in and clock-out photos are deleted after 90 days. You can export your data at any time. To delete your account and all associated data, use the in-app option or email us from your account address; we complete deletion within 30 days, except where the law requires longer retention.
Security
Data is encrypted in transit (TLS) and at rest. Tracker ingestion endpoints are authenticated with per-account secrets. Access to production systems is restricted.
Contact
Questions or data requests: hello@hammertrack.ai.