HaulOrHold Privacy Policy

Version 2026-10-21.2.

HaulOrHold Privacy Policy, version 2026-10-21.2

Shipleti, [postal address, Savannah, GA], operates HaulOrHold. Contact: [email protected]. Data is stored in the United States. The Service is for U.S. adults (18+) in the trucking business.

1. Summary
• Your account data is private to you and syncs between your devices.
• Sharing de-identified load data is your choice. Paid plans never require it. The Free plan does (see the Notice of Financial Incentive below).
• We never collect offered rates or counter-offers into shared data, never show anyone your individual loads, and never share current asking prices between carriers.
• We do not sell your personal information, and we do not sell or license your shared data to anyone.

2. What we collect
(a) Account: your email, your name if you add it, sign-in details from email or Google, your plan and subscription status from Google Play/RevenueCat (we never receive card numbers), and records of what you agreed to (version and time), including the price and renewal terms shown when you subscribe.
(b) Data you enter, synced to your private account: truck profiles and costs; load checks (lane and cities, miles, offered/counter/final rates, accessorials, outcomes, payment info); broker names and MC/DOT numbers; notes and labels; broker ratings; detention sessions (times, facility, rates). Only you can read it (row-level security). We use it only to run the Service for you.
(c) Location (optional, off by default): approximate location only. The app asks Android for approximate (coarse) location, never precise GPS. We use it on your phone to pick your EIA diesel region (your phone's built-in location service, such as Google's, may turn it into a state name) and, if you turn it on, to stamp approximate check-in/out spots in your detention log. Coordinates are never sent to or stored on our servers; they stay on your phone and in any log you choose to export.
(d) Broker lookups: the MC/DOT number or name you search is sent to FMCSA through our server; results are cached up to 24 hours and each lookup is logged to your account for 90 days to prevent abuse.
(e) Technical: app version and error messages. Our hosting provider keeps standard request logs (which can include IP address) for a short period for security; we do not use them for any other purpose.
(f) Rate-confirmation photos (when that feature is available): read on your phone; only the numbers you approve are saved; the image is deleted right away and never uploaded.
(g) Ads (Free plan, when ads launch): see section 6.

3. De-identified shared data (only if sharing is on)
What is shared:
• Only loads you hauled and recorded a final rate for. Rejected offers are never shared
• Lane: origin and destination state + first 3 ZIP digits, port/ramp code and market (no city names)
• Load type, container/trailer size, weight class, hazmat yes/no, miles (rounded to 5) and hours (rounded to ½)
• Final rate paid, and accessorial amounts actually paid
• Week of the haul (never the exact day) and whether you were paid on time
• A coded broker key made on our server with a secret key (the MC number itself is discarded and never published)
Never shared:
• Offered rates, your counter-offers, your targets or break-even, your costs or margin, or whether you accepted or rejected
• Your name, email, phone, company, USDOT/MC, or account ID
• GPS or any location from your phone
• Broker names, notes, load labels, city names, or any text you type
• Device IDs, advertising IDs, truck or driver names
How it is protected: shared rows carry no user ID. Each row is labelled with a code made from a random key held only on our server and a separate secret; that code is used only to count distinct contributors and cap any one contributor's share. When you turn sharing off and delete your shared data, or delete your account, we delete your rows and destroy the key. We publicly commit not to try to re-identify shared data.

4. How we use data
• To run the Service: calculations, history, sync, broker lookups, detention logs, support, receipts and renewal reminders.
• Historical lane statistics (when that feature is enabled): only final rates actually paid, only loads at least 45 days old, only where a lane has at least 15 loads from at least 10 contributors with none above 20%, rounded, and shown as context only. Pooled data is never used to calculate your target or counter-offer.
• To improve the Service, e.g. checking whether cost estimates match real outcomes.
• Security, fraud prevention, enforcing our Terms, and legal compliance.
We do not use shared data for any other business (including any freight marketplace) and do not license it or models built from it, unless we first get your new, express consent.

5. Who receives data
• Service providers under contract: Supabase (database, sign-in; U.S.), Google (sign-in, Google Play billing), RevenueCat (subscription status), our email provider (account and reminder emails).
• FMCSA receives broker lookup queries.
• When the law requires it, or to protect rights and safety; in a merger or sale, subject to this Policy.

6. Ads (Free plan, when launched)
Free-plan ads will be non-personalized (contextual) with Google's restricted data processing turned on and the app marked "not for children". The ad provider (Google AdMob) may still receive your device's advertising ID, IP address and ad interactions to deliver and measure ads and prevent fraud. You can reset or delete your advertising ID in Android settings. Paid plans show no ads. Today the app contains no ad software and does not access the advertising ID; this section and the Play Data safety form will be updated before ads appear.

7. Your choices and rights
• Export: Settings → My data & privacy → Export (JSON for the account, CSV for loads).
• Data sharing: on/off in Settings → My data & privacy, plus "Delete everything I've shared".
• Location and partner offers: optional; change any time.
• Delete your account in the app, at https://haulorhold.com/delete, or by email. Account data is deleted immediately from our live database and from backups within 30 days.
• Depending on your state (e.g. California) you may have rights to know, access, correct and delete your information, to opt out of sale/sharing and targeted ads, and to limit use of sensitive information. We honor these for everyone. We don't treat you differently for using them, except as described in the financial-incentive notice. Email [email protected]; we will verify the request, and you may use an authorized agent.

8. Notice of financial incentive
What you get: Continued use of the Free plan after your trial (2 checks a month, regional diesel, break-even and fair-rate range).
What you give: De-identified data about loads you haul, listed under "What is shared". Nothing else.
Value of your data: Our good-faith estimate is about $2 per Free user per month. Method: our expected monthly cost to provide the Free plan per user (servers, diesel data, broker lookups, support) less expected ad revenue per Free user. It is an estimate, not a price.
How to opt in: Tap "Share de-identified data and use Free".
Your right to withdraw: You can withdraw at any time in Settings → My data & privacy → Data sharing, and delete what you shared. You can then choose a paid plan, which never requires sharing.

9. Retention
Your account data is kept until you delete your account (backups roll off within 30 days). Shared data is kept up to 5 years, then deleted. Broker lookup logs: 90 days. Terms and subscription consent records: 3 years after your account ends (legal requirement).

10. Security
Encrypted in transit (HTTPS); access-controlled storage with row-level security; secrets kept in a server vault. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

11. Children
The Service is for adults 18+. We do not knowingly collect data from anyone under 18; contact us and we will delete it.

12. Changes
We will notify you in the app or by email before material changes. If a change would use data you already gave us in a new way, we will ask for your consent first.

Contact: [email protected] · [postal address, Savannah, GA]