01 Who we are, and what this covers
Sonu K ("we", "us", "our") operates SutraX. This policy covers two products:
SutraDriver, the Android app used by drivers
(package com.sutrahq.driver) and its web version, and
SutraDesk, the web dashboard used by office and admin staff.
Both are supplied to you by your employer — a fleet operator using our service. Your employer is the data controller for trip data; we process it on their behalf as the data processor. These are workplace tools, not consumer apps, and accounts are created by your employer rather than by you.
02 What we collect
Account and identity
Your name, phone number and/or email address, and a password stored only as a salted hash, never in readable form.
Location — including in the background
SutraDriver collects location in two distinct ways:
- Point-in-time stamps (foreground). A single GPS reading taken when you start a trip, confirm a pickup or delivery, or log a fuel stop — so each event carries a verifiable place as well as a time.
- Continuous tracking while a trip is running (background). Between the moment you tap Start trip and the moment you tap End trip, the app records your vehicle's position roughly every 45 seconds, and only once you have moved at least ~300 metres. This continues while the app is in the background or your screen is off, which is why Android asks for the "Allow all the time" location permission.
Dispatch staff need to know where a vehicle actually is during a live trip, in order to answer customer queries, re-plan stops mid-trip and respond to breakdowns. A position captured only when the driver happens to have the app open on screen cannot do that, and drivers cannot safely hold a phone open while driving.
It runs only while a trip is active, and stops automatically when the trip ends. Android shows a persistent "Trip in progress" notification the whole time it is running, so it is never silent. We keep only your most recent position against the trip — each new reading replaces the last — so no continuous trail of your movements is built or stored. Location is never collected when no trip is running.
Photos
Photos you capture of odometer readings, fuel receipts and proof of delivery — the evidence behind each trip's mileage, fuel cost and completed deliveries. The app opens the camera or photo library only at the moment you choose to attach a photo.
Trip data
Odometer readings, route, stops, assigned vehicle, fuel entries, breakdown reports, and the timestamp of each event.
Notification token
If you allow notifications, a device push token is stored so we can tell you about trip assignments and changes. It identifies your device for delivery only.
Crash and error diagnostics
When the app hits an error, a diagnostic report is sent to our error-tracking provider containing the error, the screen you were on, and basic device and app-version information. We do not use session recording or screen capture.
We do not collect microphone or audio data, contacts, SMS, call logs, health data or financial account details. We do not sell your personal data, and we do not use it for advertising or profiling.
03 How we use it
To run the trip-logging service for your employer: to show dispatch where an active trip currently is, to work out trip distance, fuel efficiency and on-time delivery performance for the office, to notify you of trips assigned to you, and to keep a verifiable record of each trip. Diagnostics are used only to find and fix faults.
05 How long we keep it
Trip data, photos and location records are kept for as long as your employer's account is active, and are deleted within 90 days of that account closing — unless a longer period is required by law, for example tax or transport record-keeping obligations that apply to your employer. Crash diagnostics are kept by our error-tracking provider for up to 90 days. Your most recent trip position is overwritten by each new reading and is never kept as a history.
06 Deleting your account and data
You can ask us to delete your SutraX account and the personal data attached to it by emailing sonuk@sutrax.in from the phone number or email address on your account, with the subject "Delete my SutraX account". We action requests within 30 days and confirm by reply.
Your account and login credentials, your name and contact details, your push notification token, your recorded locations, and the photos you captured.
Trip and delivery records belong to your employer as their business records. Where those must be kept, they are retained in a form that no longer identifies you personally. Where the law requires your employer to keep identifiable transport or payroll records for a set period, that data is held for that period and then deleted.
07 Your rights
You may ask for access to your personal data, a copy of it, or a correction; object to how it is processed; or withdraw a permission you previously granted. Contact your employer (the account holder) or us at sonuk@sutrax.in.
You can also revoke the camera, photo, location or notification permissions at any time in your device's Android settings. Revoking location will stop trip tracking, and your employer may then ask you to record trip details another way.
08 Permissions SutraDriver asks for
- Camera — capture odometer, fuel receipt and delivery photos
- Photo library — attach an existing photo when the camera isn't available
- Location, approximate and precise (foreground) — stamp trip events with where they happened
- Location, background ("Allow all the time") — keep dispatch updated on the vehicle's position while a trip is running, as described in section 02
- Notifications — tell you when a trip is assigned or changed
The camera and photo library are opened only at the moment you use the relevant feature. Background location is used only between starting and ending a trip, with a persistent notification visible throughout.
09 Security
Data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are stored only as salted hashes. Access is restricted by row-level security in the database, so no organisation can see another's data, and by role, so drivers see only their own trips. Access to production systems is limited to authorised personnel.
10 Children's privacy
SutraX is not directed at children and is not knowingly used by anyone under 18. These are workplace tools issued by an employer to licensed drivers and office staff.
11 Changes to this policy
We may update this policy from time to time. The effective date at the top of this page shows when it last changed, and material changes are communicated to your employer.
Questions about your data?
Write to us and a person will answer — we handle every privacy request ourselves.
sonuk@sutrax.in →