Privacy Policy

Last updated: 2 January 2026

1. Introduction

M50 Toll Tracker ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and related services ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use the Service.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

  • Email address
  • Password (stored in encrypted form)
  • Name (optional)

2.2 Location Data

CRITICAL: Limited Location Collection

We collect location data ONLY when you pass the M50 toll gantry. Specifically:

  • We use geofencing technology to detect when you enter a 250-meter radius around the M50 toll gantry
  • When you enter this geofenced area, we collect a single location point (latitude and longitude)
  • We also record the timestamp of when you passed the gantry
  • We do NOT track your location continuously
  • We do NOT track your journeys or movements at any other time
  • We do NOT monitor your location when you are not near the M50 toll gantry

This limited location collection is essential for the core functionality of the App. Without it, we cannot detect when you pass the toll gantry and send you reminders.

2.3 Device Information

We may collect:

  • Push notification tokens (to send you reminders)
  • Device ID
  • Device model and platform (iOS/Android)
  • App version

2.4 Payment Information

Payment processing is handled by Stripe, a third-party payment processor. We do not store your credit card information. Stripe collects and processes payment information in accordance with their privacy policy.

2.5 Usage Data

We may collect:

  • Toll event records (when you passed the gantry)
  • Notification preferences and settings
  • Subscription status and billing information

3. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Detect when you pass the M50 toll gantry and send you payment reminders
  • Manage Your Account: Create and maintain your account, authenticate you, and manage subscriptions
  • Send Notifications: Deliver push notifications about toll payment reminders
  • Process Payments: Handle subscription payments through Stripe
  • Improve the Service: Analyse usage patterns to improve App functionality (using aggregated, anonymised data)
  • Communicate with You: Respond to your inquiries and provide customer support
  • Comply with Legal Obligations: Meet legal requirements and respond to lawful requests

We do NOT:

  • Track your location outside of the M50 toll gantry area
  • Monitor your journeys or travel patterns
  • Sell your personal information to third parties
  • Use your location data for advertising or marketing purposes
  • Share your location data with third parties except as described in this policy

4. Location Data - Detailed Explanation

How Geofencing Works

Our App uses geofencing technology, which allows us to detect when your device enters a specific geographic area. We have defined a single geofence around the M50 toll gantry location.

What happens:

  1. Your device's location services monitor your position
  2. When you enter the 250-meter radius around the M50 toll gantry, the geofence triggers
  3. We record a single location point (latitude, longitude) and timestamp
  4. We create a toll event record associated with your device
  5. We schedule payment reminders based on this event

What does NOT happen:

  • We do not continuously track your location
  • We do not record your location when you are not near the toll gantry
  • We do not track your route or journey
  • We do not monitor your location in real-time
  • We do not create a history of your movements

This geofencing approach minimizes location data collection while providing the core functionality you need. Your device's operating system handles the geofence detection, and we only receive a notification when you enter the defined area.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

  • Stripe: Payment processing (payment information only)
  • Expo/React Native: App infrastructure and push notification delivery
  • Hosting Providers: Data storage and server infrastructure

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

  • Court orders or subpoenas
  • Government investigations
  • Protection of our rights or property
  • Protection of user safety

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of passwords using industry-standard hashing algorithms
  • Secure storage of data using encrypted databases
  • Secure transmission of data using HTTPS/TLS encryption
  • Regular security assessments and updates
  • Access controls limiting who can access your data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

  • Account Information: Retained while your account is active and for a reasonable period after account closure
  • Location Data (Toll Events): Retained to provide you with toll history and reminders. You may delete individual toll events through the App
  • Payment Information: Retained as required by law and for accounting purposes
  • Device Information: Retained while your device is registered and for a short period after deactivation

You may request deletion of your data at any time by contacting us or deleting your account. We will delete your data within 30 days of your request, except where we are required to retain it by law.

8. Your Rights (GDPR Compliance)

If you are located in Ireland, the European Economic Area (EEA), or United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR) and Irish data protection legislation:

  • Right of Access: Request a copy of the personal information we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete information
  • Right to Erasure: Request deletion of your personal information
  • Right to Restrict Processing: Request limitation of how we process your information
  • Right to Data Portability: Request transfer of your data to another service
  • Right to Object: Object to processing of your information for certain purposes
  • Right to Withdraw Consent: Withdraw consent for location tracking (note: this will disable core App functionality)

To exercise these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days.

9. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information immediately.

By using the Service, you confirm that you are at least 16 years of age. If you are under 16, you must not use the Service and must have parental or guardian consent to use the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Ireland. These countries may have data protection laws that differ from Irish and EU law. We ensure that appropriate safeguards are in place to protect your information in accordance with GDPR and Irish data protection legislation, including Standard Contractual Clauses where necessary.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Updating the "Last updated" date at the top of this page
  • Posting a notice in the App
  • Sending you an email notification (if you have provided an email address)

Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [Your Support Email]
Address: [Your Business Address]

For data protection inquiries, please include "Privacy Policy" in the subject line.

13. Data Protection Officer

If you are located in Ireland or the EEA and wish to contact our Data Protection Officer, please use the contact information provided in Section 12 and include "Data Protection Officer" in your correspondence.

You also have the right to lodge a complaint with the Data Protection Commission (Ireland) if you believe your data protection rights have been violated. For more information, visit www.dataprotection.ie.