Privacy Policy

Last updated 9 August 2026

GnaviQ ("GnaviQ", "we", "us") is a GPS tracking and fleet-management service operated by WayWheel. This policy explains what we collect, why, and what you can do about it. It covers the GnaviQ mobile app for Android and iOS, the GnaviQ website at gnaviq.in, and the GPS hardware you register with us.

By creating an account or using GnaviQ you agree to this policy.

Who is responsible for your data

WayWheel is the data fiduciary for the personal data described here. Contact us at support@gnaviq.in for any question about this policy.

What we collect

Account data. Your name, phone number, email address, and organisation details, supplied when you sign up. We authenticate with a one-time password sent to your phone number, so a valid phone number is required to use the service.

Vehicle and device data. GPS location, speed, ignition state, trip history, fuel and battery readings, and diagnostic telemetry reported by the GPS devices you register. This is the core of the service. It is transmitted by hardware installed in your vehicles, not by your phone.

Data you enter. Vehicle registration numbers, driver names and contact details, geofences, maintenance records, documents and photographs you upload, and support tickets you raise.

Technical data. Device model, operating-system version, app version, a push-notification token, and IP address. On the website, cookies as described in our Cookie Policy.

Permissions the mobile app asks for

We request each of these only when the feature needs it, and the app remains usable if you decline — you lose only the specific feature.

  • Camera — to scan a device IMEI, a SIM barcode, or a vehicle number plate during registration, and to photograph documents. Images are processed for the scan and uploaded only when you attach them.
  • Photo library — to attach an existing image to a document, a support ticket, or your profile picture.
  • Location — on both Android and iOS, to show your position relative to your vehicles, to centre the map when you draw a geofence, to set a trip's starting point, and to attach your position to an SOS you raise. Used only while the app is open: we never track your phone in the background. Raising an SOS sends your coordinates to your fleet so they can reach you.
  • Notifications — to deliver alerts for the events you have enabled, such as overspeeding, geofence entry and exit, ignition changes, tampering and SOS.
  • Face ID / fingerprint — to lock the app, if you turn that on. The biometric check is performed by your device; we never receive your biometric data.

How we use your data

  • To provide live tracking, trip history, alerts, reports, and the features included in your plan.
  • To send the notifications you have configured.
  • To operate, secure, debug and improve the platform.
  • To contact you about your account, billing, and material service changes.
  • To meet legal, tax and regulatory obligations.

We do not use your data for advertising, and we do not sell it.

Who we share it with

We share data only with the providers needed to run the service, each bound by contract to use it only on our instructions:

  • Mapbox — map tiles. Map requests carry the coordinates being displayed. We disable Mapbox's own usage telemetry in the app.
  • Google Maps Platform — turning coordinates into place names and calculating routes. These requests carry the coordinates being looked up.
  • Expo and Google Firebase Cloud Messaging — delivery of push notifications to your device.
  • DigitalOcean — hosting and database infrastructure, in data centres located in India.
  • Payment providers — to process subscription payments. Card details go directly to the payment provider; we never receive or store them.
  • SMS providers — to deliver one-time passwords.

We also disclose data where the law requires it, and to a successor entity in a merger or acquisition, in which case this policy continues to apply.

Data is scoped per organisation. Users in one organisation cannot see another organisation's vehicles, drivers or telemetry.

How long we keep it

Account data is kept while your account is active. Location and telemetry history is retained for the period your plan provides, and in any case for no longer than 24 months, after which it is aggregated or deleted. Records we must keep for tax, accounting or legal reasons are retained for the period the relevant law requires. We also keep permanent security audit logs recording that an action took place and when; these survive account deletion by design, and hold no contact details.

Deleting your account and data

You can delete your account from inside the GnaviQ app: More → Help & System → Delete Account. Your account locks immediately and the data is erased 30 days later; you can cancel during that period by signing in again. Full details, including what is kept and why, are on our Account & Data Deletion page. If you can no longer sign in, email support@gnaviq.in from your registered email address and we will complete the request within 30 days.

Deleting your account removes your profile, your vehicles, drivers, geofences and uploaded documents, and the location history attached to them. We retain only what tax and accounting law obliges us to keep, such as invoices.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may ask us to give you a copy of your personal data, correct it if it is wrong or incomplete, delete it, or withdraw a consent you previously gave. You may also nominate someone to exercise these rights if you are unable to. Write to support@gnaviq.in and we will respond within 30 days.

Tracking other people

If you use GnaviQ to track vehicles driven by employees or other people, you are responsible for telling them, and for obtaining whatever consent the law requires. Do not use GnaviQ to track a person or a vehicle without the right to do so.

Security

Data is encrypted in transit with TLS. Access is role-based and audited, and administrative access is restricted to staff who need it. No system is perfectly secure, and we will notify you and the Data Protection Board of a breach affecting your personal data as required by law.

Children

GnaviQ is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

Grievance Officer

If you are not satisfied with how we have handled your data or your request, contact our Grievance Officer:

Name: Suraj Email: grievance@gnaviq.in Address: D 12, D Block, Sector 6, Noida, Uttar Pradesh 201301

Changes to this policy

We may update this policy. Material changes will be notified in the app or by email before they take effect. The date shown at the top of this page is when it was last revised.