Privacy Policy

HAK International LLC (“we,” “our,” or “us”) operates the Tovo Hub mobile application and web platform (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Tovo Hub is a workforce tool used by trucking companies and their drivers, dispatchers, and back-office staff to manage loads, settlements, fuel, expenses, maintenance, hours of service, and related records. By using the Service, you agree to the collection and use of information in accordance with this policy.

We use the collected information for the following purposes:

• To provide, maintain, and improve the Service
• To assign loads, track deliveries, and confirm arrivals via geofenced checkpoints
• To calculate and process driver settlements and payments
• To send push, email, and in-app notifications about loads, payments, and time-sensitive events
• To produce reports required by federal regulators (FMCSA Hours of Service, IFTA fuel tax)
• To diagnose crashes, detect fraud, and respond to security incidents
• To communicate with you about your account, billing, and Service changes
• To comply with legal obligations and respond to lawful requests

We do not use your data for cross-app advertising or sell it to data brokers. We do not run third-party advertising SDKs in the app.

Location is the most sensitive permission the Tovo Hub mobile app requests. We collect it in two modes, both of which you can grant, downgrade, or revoke at any time from your device's system settings.

We send push notifications for events that are time-sensitive to your job: new load offers, load status changes, settlement and payment updates, dispatcher messages, and account-security alerts. Notifications never include card numbers, passwords, or other secrets.

You can disable notifications entirely from your device settings, or fine-tune which categories you receive from within the app's Settings → Notifications screen. Disabling notifications does not affect your ability to use the Service.

The mobile app requests camera and photo-library access only when you tap a button to capture or attach an image — for example, photographing a Bill of Lading, Proof of Delivery, fuel receipt, expense receipt, or maintenance invoice. We do not access your camera or photo library in the background.

The app does not request microphone access and does not record audio.

You can enable Face ID, Touch ID, or Android Biometric to unlock the app. Biometric matching is performed entirely on your device by the operating system — Tovo Hub never receives or stores your fingerprint, face scan, or any biometric template. We only receive a yes/no signal from the OS confirming that you authenticated successfully.

We share your information only in the following circumstances:

• With your fleet or employer: The trucking company that gave you access to Tovo Hub can see your loads, location during active loads, settlements, fuel, expenses, maintenance, hours of service, and other work records. If you are a driver, your employer is the data controller for this information.
• With service providers: Vetted third-party vendors who help us run the Service under written data-processing agreements (see Third-Party Service Providers below).
• For legal reasons: When required by law, subpoena, court order, or to respond to lawful requests from federal regulators (e.g., FMCSA, DOT).
• In a business transfer: In connection with a merger, acquisition, financing, or sale of assets, with notice to you.
• With your consent: For any other purpose disclosed to you at the time we ask.

We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising.

We rely on a small set of well-known service providers to operate the Service. They process data only on our instructions, under written data-processing agreements, and only as needed:

• Supabase: Database, authentication, and file storage. Data is hosted in the United States.
• Firebase Cloud Messaging (Google): Delivers push notifications to Android devices.
• Apple Push Notification service: Delivers push notifications to iOS devices.
• Map and navigation provider: Renders maps and computes routes on mobile (Apple Maps on iOS, Google Maps on Android via the native OS).
• Application hosting and CDN: Serves the web platform and static assets.

If you are located outside the United States, your data will be transferred to and processed in the U.S. By using the Service you consent to that transfer.

We implement industry-standard technical and organizational safeguards to protect your information:

• TLS 1.2+ encryption for all data in transit between the apps and our servers
• Encryption at rest for the production database and file storage
• Row-level security (RLS) so users can only read and write data their role permits
• Hashed and salted passwords (we never see your plaintext password)
• Short-lived access tokens with refresh-token rotation
• Optional biometric (Face ID / Touch ID / Android Biometric) app unlock
• Per-device push tokens that can be revoked when you sign out

No system can be made perfectly secure. If we ever experience a breach affecting your personal information, we will notify you and any required regulators in accordance with applicable law.

We retain your data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention rules for trucking records include:

• Hours of Service records: at least 6 months, per FMCSA 49 CFR §395.8(k)
• IFTA fuel-tax records (fuel purchases, mileage by jurisdiction): at least 4 years
• Settlement and payroll-adjacent records: as required by IRS and state law
• Account profile data: for the life of your account, plus a short window after closure for backups
• Crash logs and security event logs: typically 90 days
• On-device cache: cleared when you sign out or uninstall the app

When a retention period expires, data is either deleted or irreversibly de-identified.

Depending on where you live, you may have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention rules above)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Port your data to another service
• Lodge a complaint with a data-protection authority

We will not discriminate against you for exercising any of these rights. To exercise any of them, use the in-app tools described in the next section or email us at privacy@hakint.com.

You can delete your account or export your personal data at any time:

If you are a California resident, you have the right to know what personal information we collect about you, the right to delete it, the right to correct it, and the right to opt out of any “sale” or “sharing” of it.

We do not sell or share your personal information. We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months, and we have no plans to.

To exercise your California rights, follow the steps in the Account Deletion and Data Export section above or email privacy@hakint.com. You may also designate an authorized agent to make a request on your behalf.

Apple and Google require us to summarize our data practices in their developer consoles. The disclosures in this Privacy Policy match our App Store “Privacy Nutrition Label” and Google Play “Data Safety” submissions. If you spot a discrepancy, this Privacy Policy is the authoritative source.

The Service is intended for use in a commercial-trucking context and is not directed to children. We do not knowingly collect personal information from anyone under the age of 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

We may update this Privacy Policy from time to time as the Service evolves or as the law requires. When we do, we will update the “Last updated” date at the top, and — for material changes — we will notify you via in-app message, email, or push notification before the change takes effect. Continued use of the Service after a change means you accept the updated policy.

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:

Company: HAK International LLC

Email: privacy@hakint.com

Website: https://tovohub.com