InvoDrive
Privacy Policy
Effective 16 August 2026. This policy explains what the InvoDrive mobile app collects, why, who it is shared with, and how long it is kept.
InvoDrive is a fleet and driver management application published by InvoSquare, Lahore, Pakistan. It is used by vehicle fleet operators and the drivers who work for them. This policy covers the InvoDrive Android and iOS applications (package com.invodrive.app) and the InvoDrive web portal.
In short.InvoDrive records a driver's location only while a shift is running, and only after that driver has explicitly agreed to it. Tracking stops the moment the shift ends. It is never collected on a driver's own time. We do not sell personal data, and we do not use it for advertising.
1. Who this applies to
InvoDrive has two kinds of user, and the data involved differs for each:
- Drivers — people who drive a vehicle belonging to a fleet and use the app to start and finish shifts.
- Fleet administrators — people who manage a fleet, its vehicles and its drivers.
Each fleet is a separate tenant. A fleet can only ever see its own drivers, vehicles and records. Data is never shared between fleets.
2. What we collect
| Data | Why | Who provides it |
|---|---|---|
| Name, email address, phone number | To create and identify an account, and so a fleet administrator can contact a driver about a shift. | Entered by the fleet administrator or the driver. |
| Password | To sign in. Stored only as a salted hash — we cannot read it. | Chosen by the user. |
| CNIC (front and back), driving licence (front and back), and a photograph of the driver | Fleet operators are responsible for who drives their vehicles, and are required to verify identity and licence validity before handing over a car. | Photographed by the driver during onboarding, or uploaded by the fleet administrator. |
| Precise location, including in the background | To record the route driven during a shift. See section 3. | Collected by the app on the driver's device, with consent, during shifts only. |
| Shift records — odometer readings, distance, number of rides, cash collected, fuel volume and cost, expenses | To calculate what a shift earned, what a driver is owed, and what cash is due to the fleet. | Entered by the driver at the start and end of a shift, or by an administrator. |
| Photographs of the odometer and of the fuel pump or receipt | So a reading or a fuel spend can be checked later if a figure is disputed. | Photographed by the driver when finishing a shift. Optional. |
| A push notification identifier | To send shift reminders and alerts. See section 5. | Generated by the device when notifications are permitted. |
We do not collect contacts, calendar, SMS, call logs, browsing history, microphone audio, or health data. The app does not use advertising identifiers and contains no advertising.
3. Location data, in detail
InvoDrive requests permission to access precise location including while the app is in the background or the screen is off (the ACCESS_BACKGROUND_LOCATION permission on Android, and “Always” location access on iOS).
This is necessary because the app's purpose is to record the route a vehicle takes during a working shift. A driver cannot keep the app open and their screen on while driving, and location access limited to the foreground would stop recording the moment the phone locked — producing an incomplete and misleading record of the journey.
Location is only ever collected when all of the following are true:
- The fleet the driver works for has turned tracking on for that fleet; and
- The driver has read the in-app explanation and given explicit consent. Consent can be withdrawn at any time in the app, or by revoking the permission in the device settings; and
- The driver has started a shift, and that shift has not yet ended.
When a shift ends, location collection stops immediately. The app does not collect location between shifts, on rest days, or at any time when a driver is not working. There is no mechanism in the app for an administrator to locate a driver who is not on shift.
Location fixes are buffered on the device when there is no signal and uploaded when connectivity returns, so that a route recorded in an area with poor coverage is not lost.
4. How the data is used
- To operate shifts — starting, ending, and recording what happened during them.
- To calculate earnings, a driver's share, and the cash a driver owes the fleet at handover.
- To let a fleet verify a journey — comparing the recorded route against the odometer reading, and identifying where and for how long a vehicle stopped.
- To verify a driver's identity and licence before they are given a vehicle.
- To send operational notifications (see section 5).
- To keep the service secure, and to investigate misuse.
We do not sell personal data. We do not share it with data brokers. We do not use it for advertising or profiling unrelated to the operation of the fleet.
6. How long it is kept
- Individual location fixes are automatically deleted after 90 days.
- A summarised routefor each shift — the line the vehicle travelled and the total distance — is retained with the shift record, because it is part of the commercial record of that day's work.
- Shift and payment records are retained for as long as the fleet requires them for its own accounting.
- Identity documents are retained while the driver is active with the fleet, and deleted on request once they are not.
7. Your choices and your rights
- Refusing or withdrawing location consent. A driver may decline tracking, or withdraw consent later in the app or in the device settings. The app continues to work; routes are simply not recorded.
- Notifications. These can be turned off in the device settings at any time.
- Access, correction and deletion. A driver may ask their fleet administrator, or contact us directly using the details below, to see, correct or delete their personal data. We will respond within 30 days.
- Uninstalling. Removing the app stops all collection immediately.
8. How it is protected
- All traffic between the app and our servers is encrypted in transit (HTTPS).
- Sign-in credentials are stored on the device in the operating system's secure keychain, never in ordinary application storage.
- Passwords are stored only as salted hashes.
- Uploaded documents and photographs require authentication to retrieve; they are not publicly accessible.
- Each fleet's data is isolated, and every request is checked against the fleet it belongs to.
9. Children
InvoDrive is a tool for professional drivers and fleet operators. It is not directed at children, and we do not knowingly collect data from anyone under 18.
10. Changes to this policy
If we change how data is collected or used, we will update this page and change the effective date at the top. Material changes affecting drivers will also be shown in the app.
11. Contact us
For any question about this policy, or to make a data request: