Privacy Policy

This policy applies to the TruckPin app and to this website.

1. Controller

The controller responsible for data processing is:

Huy Digital, owner Marcel Huy
Mittelstrasse 5
3414 Oberburg
Switzerland
Email: judihuy@proton.me

TruckPin is currently in a closed test phase. For any privacy questions you can reach us at the email address above.

2. Applicable law

We process personal data in accordance with the Swiss Data Protection Act (revFADP) and, where applicable, the European General Data Protection Regulation (GDPR).

3. This website

3.1 This website sets no cookies and uses no analytics or tracking services. No data is transmitted to advertising networks.

3.2 When you visit the website, technical access data (such as IP address, time and requested page) may briefly appear in server logs. This data serves solely operational security and troubleshooting and is not combined with other data.

4. Account data

4.1 An account is required to use the app. We process your email address (for sign-in and important notices about your account) and your password. The password is not stored in plain text but exclusively as a cryptographic hash (Argon2id).

4.2 Voluntary profile details are nickname, language, country, optionally company and driving region, and the pin colour on the map. You decide which details to provide and set the visibility of your profile yourself (all users or friends only).

5. Location data

5.1 Sharing your location is voluntary. After registration, no location is visible; visibility must be switched on actively in the app and can be switched off again at any time with one tap. In addition, time windows (for example Monday to Friday, 06:00 to 17:00 only) and an automatic switch-off timer are available.

5.2 You determine the recipients: all app users, friends only, specific groups, or nobody.

5.3 You determine the precision: exact or approximate. In approximate mode the position is rounded on the server to a grid of about 15 kilometres; in this mode exact coordinates are not transmitted to any recipient.

5.4 Only the most recently transmitted position is stored; it is overwritten with every update. There is no location history and no route recording. Positions older than 15 minutes are no longer displayed.

5.5 All rules regarding visibility, time windows, precision and blocks are enforced on the server, not just in the app interface.

5.6 The legal basis is your consent (Art. 6(1)(a) GDPR). It can be withdrawn at any time by switching visibility off in the app.

6. Chat messages

6.1 Chat messages (one-to-one and group chat) are stored on our server so that they are available on your devices.

6.2 Chat content is not routinely viewed. A content review takes place only if a participating user reports the conversation; in that case the last 50 messages of the affected conversation are attached to the report as a snapshot and reviewed by the administrator (see section 10).

7. Automatic translation

7.1 So that drivers who speak different languages can write to each other, chat messages are translated automatically on the server. For this purpose the text of the message is transmitted to the external service DeepSeek and processed there, possibly on servers outside Switzerland and the EU.

7.2 Only the message text and the source and target language are transmitted, without the sender's name, email address or location.

7.3 If sender and recipient share the same language, no translation and no transmission take place. Completed translations are cached with the message so that the same text is not transmitted repeatedly.

7.4 Translation is a core part of the app. If you wish to avoid transmission to the translation service, do not share confidential content in chat.

8. Photos

You can voluntarily upload a profile picture and photos of your vehicle. Photos are visible to other users according to your profile visibility and can be deleted by you at any time.

9. Community reports

9.1 Parking status reports (free, getting full, full), border waiting-time reports and rest-stop ratings are community content. They are visible to other users together with your nickname.

9.2 Only recent reports feed the displayed live status (parking: the last 90 minutes, borders: the last 120 minutes). Older reports automatically lose their effect.

9.3 The “Who is here?” feature only shows other users what your visibility settings allow anyway.

10. Blocking and reporting

10.1 If you block a user, we store this relationship in order to enforce it on the server (mutual invisibility, no chat, no requests).

10.2 If you report a user, we store the report with the reason, an optional comment and context. For chat reports, a snapshot of the last 50 messages of the affected conversation is attached so that the case can be reviewed.

10.3 The administrator sees chat content exclusively via such report snapshots, never entire mailboxes. He only sees positions of users who have currently switched themselves visible.

11. Emergency function (SOS)

11.1 If you trigger an SOS, your exact position is sent to all your confirmed friends. This deliberately happens regardless of your visibility settings, because fast localisation is the priority in an emergency.

11.2 Users other than your friends do not see an SOS. An SOS ends when you end it, and automatically after 8 hours at the latest.

12. Recipients and processors

12.1 Hosting: All servers (database, API, photos) are operated by Hetzner Online GmbH, Germany. The data is located in a German data centre.

12.2 Translation: DeepSeek (see section 7) receives message texts only, without attribution to a person.

12.3 Personal data is not sold and not passed on for advertising purposes.

13. Retention periods

13.1 Location: only the most recent position, continuously overwritten; display ends 15 minutes after the last update.

13.2 Account, profile, photos, chats, friendships and groups: for as long as the account exists.

13.3 Community reports: affect the live status only briefly (90 to 120 minutes); ratings remain stored until you delete them or your account.

13.4 Reports and blocks: for as long as required for the safety of the community.

13.5 When an account is deleted, the associated personal data is deleted.

14. Your rights

You have the following rights:

• access to the data stored about you,
• rectification of incorrect data,
• erasure and restriction of processing,
• data portability (a copy of your data in a common format),
• withdrawal of consent; for location, withdrawal is done directly in the app via the off switch,
• complaint to a data protection supervisory authority (in Switzerland the FDPIC, in the EU the authority of your country).

To exercise these rights, an informal email to judihuy@proton.me from the address your account is registered with is sufficient.

15. Account deletion

Until a deletion feature is available directly in the app, you can request the deletion of your account at any time by emailing judihuy@proton.me (from your registered address). Deletion is carried out promptly, usually within 30 days, and confirmed to you.

16. Data security

All connections are TLS-encrypted (HTTPS). Passwords are stored exclusively as Argon2id hashes. The rules on visibility, precision and blocks are enforced on the server and covered by automated tests.

17. Changes to this policy

We update this policy as the app evolves, for example with new features such as push notifications or a later subscription model. The current version is always available on this page; the date below shows the latest change.

Last updated: 15 July 2026