Privacy Policy

1. Introduction

Lither ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website, the Lither platform, and our mobile applications — including the Lither Driver app (package name app.lither.driver). It applies to drivers and field staff, fleet operators, and website visitors. Please read it together with any in-app disclosures shown when a feature first requests a permission.

2. Data Controller and Our Role

The data controller for our website, marketing, and customer-account data is Fastlane Grupp OÜ (a private limited company / osaühing incorporated in Estonia), registry code 16631754, VAT ID EE102566109, registered at Sepapaja tn 6, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia. Contact: winston.van.der.pol@fastlane.ee or +31 637485988. Where personal data is processed through the Lither platform and the Lither Driver app on behalf of an organisation that subscribes to Lither (for example, a driver's employer), that organisation is the data controller and Lither acts as a data processor under its instructions; drivers should also refer to their organisation's own privacy notice.

3. Data We Collect

• Account information (name, email, phone number, company)
• Precise and approximate location and GPS data from the Lither Driver app, including background location collected while a driver is on shift — even when the app is closed or the screen is off
• Fleet and trip data (vehicle positions, routes, distance, and fuel and CO₂ estimates)
• Camera and photos, used to scan vehicle QR codes and fuel receipts (Lither Driver app)
• Driver and vehicle details, and bank account information for reimbursement (account holder, IBAN / BIC, bank name)
• In-app messages exchanged with dispatch or colleagues
• Mobile device identifiers, app activity, and push-notification tokens
• Diagnostics and crash data (via Google Firebase)
• Usage data (features used, session duration, device info)
• Payment information for subscriptions (processed by Mollie; we do not store card data)
• Communication data (support tickets, emails)
• Cookies and analytics data (see Cookie Policy)

4. How We Use Your Data

• Providing, operating, and improving our services
• Processing fleet tracking and automation workflows
• Live driver location tracking and route navigation, including in the background while on shift, shared with the driver's organisation (dispatch)
• Sending emergency SOS alerts with the driver's location to the monitoring centre
• Sending service notifications and updates
• Billing and subscription payment processing
• Customer support and communication
• Analytics, diagnostics, and product improvement
• Legal compliance and fraud prevention

5. Location Data and the Lither Driver App

Lither Driver is a companion mobile app used by drivers and field staff of organisations that subscribe to Lither. To provide live fleet tracking, the app collects the device's precise GPS location — including in the background and when the app is closed or the screen is off — while a driver is checked in for a shift. This location is sent to the driver's organisation (their dispatch office) so it can show the driver's real-time position and route on a live map, provide navigation and estimated arrival times, and locate a driver in an emergency (including the in-app SOS). When a driver requests navigation to an address, the current location and destination are sent to the workspace's configured maps or routing provider (such as Mapbox, Google Maps, or a self-hosted routing service) to calculate the route. Drivers turn on background tracking with an explicit in-app control, see a persistent notification while it is active, and can pause it at any time. The app requests location, camera, notification, and (on Android) NFC permissions only for the features described here. We do not use location for advertising, and we do not sell it.

• Precise and approximate location, collected in the foreground and background during a shift
• Camera and photos, to scan vehicle QR codes and fuel receipts
• Device information and push-notification tokens (via Google Firebase Cloud Messaging)
• Diagnostics and crash data (via Google Firebase Crashlytics and Analytics)
• Driver and vehicle details and bank account information for reimbursement
• Messages exchanged with dispatch or colleagues in the app

6. Legal Basis for Processing

We process your data based on: (a) contract performance, to deliver our services and, for drivers, the fleet operations requested by your organisation; (b) legitimate interest, to operate, secure, and improve our platform and prevent fraud; (c) consent, for marketing communications and non-essential cookies; and (d) legal obligation, for tax, accounting, and regulatory requirements. Where we act as a processor for an organisation, that organisation is responsible for establishing the legal basis for processing driver data.

7. How We Share Your Data

We do not sell your personal data and we do not use it for advertising. We share data only as needed to run the service, with the following categories of recipients:

• The driver's organisation (their dispatch / employer), which receives the driver's location, routes, and shift data
• Google (Firebase) — crash reporting, analytics, and push notifications
• Maps and routing providers configured by the organisation (Mapbox, Google Maps, or a self-hosted routing service), which receive location coordinates to display maps and calculate routes
• Mollie — subscription payment processing (we do not store card data)
• EU-based infrastructure, hosting, and communication providers
• Authorities or third parties where required by law or to protect rights and safety

8. Data Retention

We retain your data for the duration of your account; account data is deleted within 90 days after account closure. Location and tracking data collected through the Lither Driver app is retained only as long as needed for the operating organisation's fleet operations and is pruned automatically on a rolling basis. Billing and accounting records are kept for 7 years as required by the Estonian Accounting Act. Anonymised analytics data may be retained indefinitely. See our Data Retention Policy for full details.

9. Data Deletion and How to Request It

You can request access to, correction of, or deletion of your personal data at any time by emailing winston.van.der.pol@fastlane.ee. If you use the Lither Driver app through an employer, that organisation controls your driver account, so you can also ask it to correct or delete your data. We action verified deletion requests within 30 days, subject to legal retention obligations (for example, accounting records kept for 7 years). Uninstalling the app removes locally stored data (such as your PIN) from your device, and turning off background tracking stops further location collection.

10. Security

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, encrypted secret storage, and EU-based hosting. Access to personal data is limited to those who need it to operate the service. No method of transmission or storage is completely secure, but we work to protect your information and review our practices regularly.

11. Your Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

12. Children's Privacy

Our services and the Lither Driver app are intended for use by professional drivers and businesses and are not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

13. International Transfers

All data is stored within the EU (Frankfurt, Amsterdam). We do not transfer personal data outside the European Economic Area except where a sub-processor requires it, in which case we ensure adequate safeguards (Standard Contractual Clauses or an adequacy decision).

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above; where changes are material, we will communicate them through the service as appropriate. Continued use after an update constitutes acceptance of the revised policy.

15. Contact

For privacy-related inquiries, or to exercise any of your rights, contact us at winston.van.der.pol@fastlane.ee or +31 637485988, or write to: Fastlane Grupp OÜ, Sepapaja tn 6, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia.