Privacy Policy
The short version. Iron Route GPS is a navigation app for commercial trucks. To route you it needs your location — that is the whole point of the app. We use your location to calculate the route, keep you on truck-legal roads, estimate tolls, show weather ahead, and count state-line crossings for IFTA. We do not sell your data, we do not show ads, and we do not track you across other apps or websites. You can delete your account and everything in it at any time — see Section 8.
1. Who we are
Iron Route GPS ("Iron Route", "the app") is operated by TruckerProfit Inc., a Delaware corporation, which is the controller of the data described here. This policy covers the Iron Route GPS website at ironroutegps.com, the installable web app, and the Iron Route GPS apps distributed through the Apple App Store and Google Play.
This policy is written for drivers, not for lawyers. Where a section carries a legal obligation, we say so plainly.
2. What we collect
2.1 Location data — the core of the app
| What | Why we need it | How long we keep it |
|---|---|---|
| Precise location (GPS), while you are using the app | Turn-by-turn navigation, keeping you on roads legal for your truck's height, weight, length and hazmat class, live re-routing, distance to the next fuel stop or rest area. | Processed in real time. Not retained after the trip ends unless you save the trip. |
| Precise location in the background, only if you grant it | Continuing to navigate and to record the trip while your screen is off or you are using another app. If you deny it, foreground navigation still works. | Same as above. |
| State-level location (which state, how many miles) | IFTA mileage by jurisdiction. This is a tax record. | Kept while your account is active, then 7 years, because fuel-tax records must be retainable for audit. |
| Saved trips you choose to keep: origin, destination, waypoints, miles | Trip history, IFTA, and profit math you asked us to run. | Until you delete them or delete your account. |
You control this. Location permission is requested by your operating system, and you can revoke it at any time in iOS Settings, Android Settings, or your browser's site permissions. Revoking precise location disables routing — the app cannot navigate without knowing where you are.
2.2 Account data
- Email address — login, receipts, and service notices.
- Name — display and invoicing.
- Phone number — optional, only if you turn on SMS alerts.
- If you sign in with Google: your Google account email, name and profile picture, provided by Google Sign-In. We do not receive your Google password and we request no access to your Gmail, Drive, contacts, or calendar.
- Subscription tier and status.
2.3 Vehicle profile
Height, length, width, weight, axle count, and hazmat class — the values that make truck-legal routing possible. This describes a vehicle, not a person.
2.4 Device and diagnostic data
- A random device identifier, used to prevent trial abuse. It is not an advertising identifier and it is not shared.
- Crash and error logs (device model, OS version, app version, the error). No location and no message content is attached to a crash report.
- Server request logs, including IP address, retained 90 days for security and abuse prevention.
2.5 Payment data
Card data is handled exclusively by Stripe (PCI-DSS Level 1). We never see, receive, or store your card number, CVV, or full PAN. We store only the Stripe customer ID and the last four digits, so you can recognize your own card in the billing screen.
2.6 What we deliberately do NOT collect
- No advertising identifiers (IDFA / AAID). Iron Route serves no ads.
- No contacts, photo library, calendar, call logs, or SMS content.
- No microphone access unless you start a voice command, and voice is transcribed for that command and then discarded.
- No third-party analytics or advertising SDKs that build a profile of you.
- No tracking of you across other companies' apps and websites, as that term is defined by Apple's App Tracking Transparency framework.
3. How we use it
- Operate the app — calculate and follow routes, avoid roads illegal for your configuration, estimate tolls and fuel, show weather along the route, record IFTA miles.
- Work offline — map tiles and your active route are cached on your device so navigation survives dead zones. That cache lives on your device; you can clear it from the app or by uninstalling.
- Communicate with you — receipts, password resets, service notices. Marketing email only if you opt in, and every marketing email has an unsubscribe link.
- Keep the service safe — fraud prevention, abuse detection, rate limiting.
- Improve the product — aggregated, de-identified usage counts. We look at how often a feature is used, not at where you personally drove.
- Comply with the law — respond to a valid subpoena or court order, and meet tax-record obligations.
We do not use your data to train AI models, and we do not use it for automated decision-making that produces legal effects about you.
4. Who we share it with
We share data only with the processors below, only for the purpose stated, and only the minimum each one needs.
| Processor | What it receives | Purpose |
|---|---|---|
| MapTiler / Protomaps | Map tile coordinates | Rendering the map. No account identity is sent. |
| Geoapify | Route coordinates, vehicle profile | Routing and address search. No account identity is sent. |
| TollGuru | Route geometry, vehicle class | Toll estimation. No account identity is sent. |
| OpenWeather | Coordinates along the route | Weather ahead. No account identity is sent. |
| Stripe | Email, name, payment details you enter directly with them | Subscription payments. |
| Google (Sign-In) | Authentication request | Only if you choose "Sign in with Google". |
| Our hosting provider (U.S. data centers) | Data at rest | Running the service. |
| Email delivery provider | Email address, message content | Transactional and opt-in email. |
We do not sell your personal information, we do not share it with advertisers, and we do not provide it to data brokers. We have never done so, and if that ever changed we would have to tell you first and give you a way to opt out before it took effect.
Two other situations exist, and we will not pretend otherwise: we disclose data when legally compelled by valid process, and if TruckerProfit Inc. were ever merged or acquired, account data would transfer to the successor under this same policy until you were notified of any change.
4b. Mobile information and SMS
We do not share, sell, or provide your mobile phone number or your SMS consent to third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories listed in Section 4 exclude text-messaging originator opt-in data and consent. SMS opt-in is always an unchecked box you mark yourself, it is never a condition of using Iron Route, message and data rates may apply, and you can reply STOP to opt out or HELP for help at any time.
5. Your rights
California (CCPA / CPRA)
- Know — request a copy of what we hold about you. We answer within 45 days.
- Delete — request deletion. We complete it within 30 days, except records tax law requires us to keep (Stripe receipts, IFTA mileage).
- Correct — have inaccurate personal information fixed.
- Opt out of sale or sharing — we do not sell or share, and you may write to us to confirm it.
- Non-discrimination — using any of these rights never changes your price or your service.
EU / UK (GDPR)
- Lawful bases: performance of your contract (the subscription), legitimate interest (security and fraud prevention), consent (marketing email, optional SMS), and legal obligation (tax records).
- Rights of access, rectification, erasure, restriction, portability and objection. We answer within 30 days, extendable to 60 for complex requests.
- You may lodge a complaint with your national supervisory authority.
To exercise any right, write to privacy@truckerprofit.com. We will ask you to confirm control of the account email before we act, so that nobody can delete your data by pretending to be you.
6. Data retention
- Active account — for as long as the account exists.
- Deleted or canceled account — 30 days, then permanent deletion, except the exceptions below.
- IFTA mileage records and Stripe receipts — 7 years, because fuel-tax and tax law require it.
- Live navigation location — not retained after the trip, unless you saved the trip.
- Voice commands — not stored. Discarded once the command is carried out.
- Server logs — 90 days, then rotated out.
7. Security
All traffic runs over HTTPS with HSTS. The database is encrypted at rest. Access is role-based and least-privilege, third-party API keys are held server-side and never shipped to your device, and credentials are rotated. If a breach ever affected your data, we would notify affected users within 72 hours where GDPR applies, and without unreasonable delay under applicable U.S. state law.
No system is perfectly secure, and we will not claim otherwise.
8. Deleting your account
You can delete your Iron Route account and its data at any time, from inside the app. Open the app, go to Menu → Account → Delete my account, and confirm. Deletion is permanent.
If you cannot reach that screen, email privacy@truckerprofit.com from the address on the account with the subject DELETE MY ACCOUNT. We complete the deletion within 30 days and confirm it by email.
What survives deletion, and only because the law requires it: IFTA mileage records and payment receipts, retained 7 years for tax purposes and not used for anything else. Everything else — profile, saved trips, vehicle profile, device identifier — is erased.
Deleting your account does not by itself cancel a subscription billed through the App Store or Google Play. Cancel that in your store account, or it will keep renewing.
9. Children
Iron Route GPS is built for adults operating commercial motor vehicles. It is not directed to children, and we do not knowingly collect data from anyone under 18. If you believe a minor has given us data, write to privacy@truckerprofit.com and we will delete it.
10. International transfers
Our servers are in the United States. If you use Iron Route from outside the U.S., your data is transferred to and processed in the U.S. Where GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses with our processors.
11. Changes to this policy
If we make a material change, we notify active users by email at least 30 days before it takes effect. Minor corrections take effect immediately and are reflected in the "Last updated" date at the top of this page.
12. Contact
- Privacy questions and data requests: privacy@truckerprofit.com
- Account deletion: privacy@truckerprofit.com, subject
DELETE MY ACCOUNT - Support: ironroutegps.com/support.html · support@truckerprofit.com
- Postal: TruckerProfit Inc., 2028 Madison Ave, New York, NY (registered office)