LoneStar Fleet — Driver Privacy Policy

Effective April 23, 2026

This policy describes how QuantumOps Inc. ("QuantumOps", "we") handles personal information in the LoneStar Fleet driver mobile application. It applies to drivers who sign in to the app to carry out delivery campaigns on behalf of a carrier that uses the LoneStar Fleet platform.

1. Information we collect

• Account profile. Username, display name, email, and the role assigned to you by your carrier (driver). This is provisioned by your carrier's administrator and stored in our authentication system.
• Location data (foreground and background). While a shift is active, the app reads your device's GPS location — including when the app is in the background or the screen is off — and sends it to your dispatcher. Location collection stops automatically when you end your shift or sign out. Location is never collected when no shift is active.
• Photos you upload. Proof-of-delivery photos you capture in the app are uploaded to our storage. Each photo is associated with the specific stop on your route.
• Operational metadata. Shift start and end timestamps, per-stop completion timestamps, and the app version and OS platform you are using. We use this to keep records and to triage bugs.

2. How we use your information

• Coordinate your shift with your dispatcher in real time (position updates, stop completions).
• Provide your carrier with audit evidence that a campaign was delivered as contracted (timestamps, photos, route coverage).
• Diagnose problems and improve the app (crash reports, basic error logs).

We do not use your data for advertising, profiling, credit decisions, or any purpose unrelated to the delivery operations you perform for your carrier.

3. How we share your information

We do not sell or share your personal information with advertisers, data brokers, or any third party for their own marketing or monetization.

• Your carrier's administrators. Dispatchers and admins at your carrier can see your current position during an active shift, your uploaded photos, and your completion timestamps. This is the core purpose of the app.
• Supabase (processor). We use Supabase, Inc. to host our database, authentication, and photo storage. Supabase processes your data on our behalf under a data processing agreement and does not use it for any independent purpose.
• Legal disclosures. We may disclose information if we are required to by law (valid subpoena, court order) or to protect the safety of people or property.

4. Background location — specific notice

The app requests the Android ACCESS_BACKGROUND_LOCATION permission and the iOS equivalent so that your dispatcher can see your position while the app is closed during an active shift. Before the system permission dialog is shown, we present a disclosure screen inside the app explaining what the permission is for.

• Background location collection starts only when you start a shift, and stops automatically when you end it.
• You can decline the permission and still use the app — in that case position updates stop when the app is backgrounded.
• You can revoke the permission at any time in your device's Settings.

5. Data retention

We retain personal data only as long as needed for the purposes above and to meet our contractual and legal obligations to carriers:

• Account profile: until the account is deactivated by the carrier.
• Location history and shift records: up to 12 months for audit.
• Photos: per the carrier's retention contract (typically up to 24 months).
• Error logs: up to 90 days.

You can request earlier deletion using the contact details in section 9.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request a copy of your data in a portable format.
• Ask us to correct inaccurate data.
• Ask us to delete your data.
• Withdraw consent for background location at any time (by revoking the permission in your device settings).

To exercise any of these rights, email support@quantum-ops.com. We will respond within 30 days.

7. Children

LoneStar Fleet is a workforce app for adult drivers operating under a carrier contract. It is not directed to children, and we do not knowingly collect information from anyone under 18.

8. Security

Data is transmitted over TLS and stored encrypted at rest. Database access is governed by row-level security policies that restrict each driver's visibility to their own shifts and campaigns. We rotate credentials on a regular cadence and immediately on any suspected exposure.

9. Contact

10. Changes to this policy

If we make material changes to this policy we will update the effective date above and notify drivers on next sign-in. Continued use of the app after a change constitutes acceptance of the updated policy.