Datenschutzerklärung der App

Privacy policy for the Fratius app (iPhone, Android and the web app). Last updated: 27 October 2026.

1. Who is responsible for what

Fratius is a fleet app for delivery companies: their owners, fleet managers and drivers use it to hand over vans, check them for damage and keep the van history. Two parties are responsible for the data in it.

The company you work for

The records about the fleet and the people who drive it (handovers, walk-arounds, damage checks, videos, tours, refuels, driver records, incidents) are kept for the company that uses Fratius, usually your employer. That company decides what is recorded and why. It is the controller under the GDPR. Fratius processes this data on its behalf as a processor (Art. 28 GDPR), under a data processing agreement. For questions about these records, and to exercise your rights over them, contact that company first; we pass on requests that reach us.

Fratius

Fratius is the controller for your login account, for keeping the service running and secure, and for accounts that aren't part of a customer's company (for example a demo company you open to try the app).

2. What the app records

Your account

• Email address and password. The password is stored only as a protected hash by Firebase Authentication; we can't read it.
• Your name and the language you picked.
• In each company you join through an invite link: first and last name, mobile number, for drivers the Transporter ID, your role (fleet owner, fleet manager or driver) and your station.

The fleet records

• Who had which van, and when: every handover with its start and end, who started and ended it and why, and the kilometres.
• Photos and videos of the vans: walk-around photos, close-ups of possible damage, pick-up, drop-off and walk-around videos, with who took them and when.
• Damage checks: what the AI found on the photos, the manager's decisions and comments, and the damage list of each van with the drivers who had the van between two walk-arounds.
• Tours, where the company turned dashboard photos on: the dashboard photo at the start and end of a tour, the kilometres, fuel or battery level, range and warning lights read from it.
• Refuels, washes and parts: the dashboard photo, the last 4 digits of the fuel card, the receipt photo and what it says (litres, amount, station), and the manager's answer where one was needed.
• Driver records, kept by the company: driving licence classes and expiry date, the dates and results of licence checks, type and dates of employment, briefings, an emergency contact, and notes; and incidents such as accidents, traffic fines and customer complaints.
• Van records: registration details, contracts, insurance, deadlines and, for fleet owners only, costs.

Not recorded: copies of driving licences or ID cards, licence numbers, date of birth, home address, health data, and your location. The app doesn't ask for your location. A video file can carry the phone's location: the copy everyone watches is made without it, and the phone's original is deleted once that copy exists.

Recording tours and refuels shows how employees work. The company has to tell its drivers what is recorded and why and, where there is a works council, agree it with them before turning dashboard photos on.

Phone notifications

If you turn notifications on, the app stores an address for your phone (in the web app the browser's push address, in the iPhone and Android app a push token) and what kind of device it is, so we can tell you, for example, that a van was given to you.

Technical data

When the app talks to our servers, they process your IP address, the time, and the request, to deliver the service and keep it secure. The app has no advertising, no analytics or tracking tools, and doesn't sell or share data for advertising.

3. Permissions on your phone

• Camera: to photograph and film the vans, the dashboard, fuel cards, receipts and documents. Only what you take in the app.
• Photos: only if you choose to pick photos you already took.
• Microphone: not used. The iPhone and Android app record van videos without sound; in the web app, the browser's camera may record sound with a video.
• Notifications: only if you turn them on.

4. The AI

To find possible damage, read a dashboard, check a fuel card, read a receipt or fill in a record from a document, the app sends the photos concerned to Claude, an AI service of Anthropic PBC (USA), and stores the answer. Under Anthropic's commercial terms, data sent to its API isn't used to train its models. The AI only suggests: a fleet manager decides on every damage, and you check every number before it is saved. No decision about you is made solely by automated processing (Art. 22 GDPR).

Photos of fuel cards and documents are deleted straight after reading; of a fuel card only the last 4 digits are kept.

5. Where the data is and who processes it

• Google (Firebase: sign-in, database, file storage, server functions, hosting; Google Cloud), servers in the USA.
• Anthropic PBC (the AI, see section 4), USA.
• Expo (650 Industries, Inc.: app updates and delivering notifications to the iPhone and Android app), USA, together with Apple's and Google's push services.
• Google Workspace for our email.

Each of them processes the data on our behalf under a data processing agreement (Art. 28 GDPR). For transfers to the USA we rely on the EU-US Data Privacy Framework where the provider is certified, and on the EU Standard Contractual Clauses (Art. 46 GDPR).

6. How long it is kept

• Photos and videos: 30 days after they were taken. Photos and videos that show damage are kept up to 90 days: where a fleet manager approved damage in a check, and where an owner or manager marked them as damage. Then they are deleted.
• Photos of fuel cards and documents: deleted straight after reading. A video's original: deleted once the playback copy exists.
• The records (handovers, checks, tours, refuels, driver records): for as long as the company uses Fratius, as the company decides; at the end of the contract they are deleted as agreed in the data processing agreement, unless the law requires them to be kept longer.
• Your account: until you delete it.

7. Deleting your account

You can delete your account in the app: Account tab, at the bottom, Delete account; then enter your password. Your login, your profile in each company (name, mobile number, Transporter ID) and your phone notifications are deleted. The companies you worked for keep their records with your name, because they are the history of their vans. See Deleting your Fratius account for the details and how to ask by email.

8. Legal bases

• Your account and providing the app: performance of a contract (Art. 6(1)(b) GDPR).
• The fleet records: the company's legal basis, usually the employment relationship and its legitimate interests in running its vans (Art. 6(1)(b) and (f) GDPR, § 26 BDSG in Germany); we process them on its instructions.
• Security, server logs and preventing misuse: our legitimate interest in a secure service (Art. 6(1)(f) GDPR).
• Notifications: your choice to turn them on; you can turn them off at any time in the Account tab or in the phone's settings.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). For the fleet records, contact the company you work for; for your account, write to info@fratius.com. You can also complain to a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77 GDPR).

10. Children

Fratius is a work app for people of working age. It isn't meant for children.

11. Changes

When the app changes what it records, we update this policy and the date at the top.