1. Who We Are
The IHS DW mobile application (“IHS DW,” the “App,” “we,” “us,” or “our”) is operated by X on Board SARL, with its registered address at Beirut, Lebanon.
In many cases, the organization that provides you with access to the App, such as your employer, contractor, customer, or business partner, determines why and how your information is processed. That organization may act as the data controller, while we may process the information on its behalf as a service provider or data processor.
2. Scope of This Policy
This Policy applies to information processed through the IHS DW mobile application and related backend services, APIs, support systems, and administrative portals.
It does not necessarily cover independent systems, websites, or services operated by IHS, your employer, a customer, or another third party. Those parties may provide separate privacy notices.
3. Information We Collect
| Data category | Examples | Why it may be collected |
|---|---|---|
| Account and identity data | Name, employee or driver ID, username, email address, phone number, company, role, department, and authentication details. | To authenticate users, manage accounts, assign permissions, and associate activities with an authorized user. |
| Location data | Precise or approximate GPS location, latitude, longitude, timestamp, direction, speed, route, stops, geofence events, and location history. | To monitor authorized trips or work activities, validate arrival and departure, provide navigation or route visibility, improve safety, confirm service delivery, and support operational reporting. |
| Background location | Location collected while the App is minimized, not actively displayed, or operating during an assigned trip or task. | To maintain continuous trip, delivery, workforce, or field activity tracking where this is a core function enabled by the relevant organization. |
| Device and technical data | Device model, operating system, app version, device identifiers, IP address, network operator, language, time zone, crash logs, and diagnostic information. | To operate, secure, troubleshoot, support, and improve the App. |
| Operational and activity data | Assigned jobs, trips, waybills, deliveries, timestamps, status updates, check-ins, proof of delivery, forms, signatures, notes, and uploaded documents. | To manage and document business operations and provide reporting to authorized organizations. |
| Camera, photos, and files | Proof-of-delivery photos, site images, identity documents, vehicle images, scanned barcodes, and attachments selected by the user. | To document work, verify delivery or task completion, and support authorized business processes. |
| Usage and audit data | Login history, features used, actions taken, errors, security events, and audit records. | To maintain security, accountability, compliance, and system reliability. |
The exact data collected depends on the App configuration, the permissions you grant, the functions enabled by your organization, and the way you use the App.
4. How Location Data Is Collected
The App may request access to your device’s location services. When enabled, the App may collect location while it is in active use. The App may also collect location in the background during an active assignment, trip, delivery, shift, field visit, or other authorized operational activity.
Background location is used only where necessary to provide a core tracking or operational feature configured by the organization using the App. The App should display an appropriate notice and request device permission before accessing location data.
You may control location permission through your device settings. Disabling location access may prevent certain core features from functioning correctly, including route tracking, geofence detection, arrival confirmation, or trip monitoring.
5. How We Use Information
We may use collected information to:
- Provide, operate, maintain, and secure the App.
- Authenticate users and enforce role-based access.
- Track authorized trips, routes, deliveries, or field activities.
- Confirm arrival, departure, task completion, or proof of delivery.
- Generate dashboards, alerts, reports, and audit records.
- Provide technical support and investigate system errors.
- Detect fraud, misuse, unauthorized access, or security incidents.
- Improve App performance, reliability, and functionality.
- Comply with legal, regulatory, contractual, or safety obligations.
- Protect the rights, property, and safety of users and organizations.
6. Legal Bases for Processing
Where applicable data-protection law requires a legal basis, the processing of personal information may rely on one or more of the following:
- Performance of a contract or provision of requested services.
- Compliance with a legal or regulatory obligation.
- Legitimate interests, including operational management, security, fraud prevention, safety, and service improvement.
- Your consent, where consent is legally required.
- Protection of vital interests or the safety of individuals, where applicable.
Where your employer or another organization controls the processing, that organization is responsible for identifying the appropriate legal basis and providing any additional employee or workforce privacy notices required by law.
7. How We Share Information
We do not sell personal information. We may disclose information only as reasonably necessary to:
- The organization that authorized your access to the App, including your employer, contractor, customer, or business partner.
- Authorized administrators, dispatchers, supervisors, support personnel, or other approved users.
- Hosting, cloud, analytics, communications, mapping, support, and security service providers acting under contractual obligations.
- Government authorities, regulators, courts, or law-enforcement bodies where required by applicable law or a valid legal request.
- A successor entity in connection with a merger, acquisition, restructuring, or transfer of relevant business assets.
Third-party service providers are permitted to process information only for authorized purposes and subject to appropriate contractual and security safeguards.
8. Data Retention
Information is retained only for as long as reasonably necessary for the purposes described in this Policy, including operational, contractual, security, audit, dispute-resolution, and legal requirements.
Retention periods may be determined by the organization that provided your App account. Different categories of information may be retained for different periods. Information may be deleted, anonymized, or archived after the relevant retention period ends, unless longer retention is required by law.
9. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include encrypted communications, access controls, authentication, monitoring, backups, audit logs, and restricted administrative access.
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.
10. International Data Transfers
Your information may be processed or stored in countries other than the country in which you use the App. Where required, appropriate safeguards will be used for international transfers, such as contractual protections or other legally recognized transfer mechanisms.
11. Your Rights and Choices
Depending on your location and applicable law, you may have the right to request:
- Access to personal information held about you.
- Correction of inaccurate or incomplete information.
- Deletion of certain personal information.
- Restriction of or objection to certain processing.
- Portability of information in an applicable format.
- Withdrawal of consent where processing is based on consent.
- A complaint to the relevant data-protection or supervisory authority.
Some requests may need to be directed to the organization that issued your account, particularly where that organization controls your workforce or operational data. We may forward a request to that organization when appropriate.
Location permissions
You can review or change location permissions in your mobile device’s settings. Certain features may become unavailable if permission is denied or withdrawn.
12. Account Deletion and Data Requests
To request account deletion or exercise a privacy right, contact your organization’s authorized administrator or use the contact details below.
Deleting the App from your device does not automatically delete information previously submitted to or stored by the service.
13. Children’s Privacy
The App is designed for authorized business and workforce use and is not intended for children. We do not knowingly collect personal information directly from children through the App. If you believe a child has provided information through the App without proper authorization, please contact us.
14. Third-Party Services
The App may integrate with third-party services such as mapping, cloud hosting, authentication, messaging, analytics, or enterprise systems. These services may process information according to their own terms and privacy notices where they act independently.
15. Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in the App, our practices, legal requirements, or business operations. The revised version will be posted at this location with an updated “Last updated” date. Where required, additional notice will be provided through the App or by another appropriate method.
16. Contact Us
For questions, privacy requests, or complaints relating to this Policy or the IHS DW App, contact:
Attn: Privacy / Data Protection
Beirut, Lebanon
Email: info@xonboard.io
Phone: +96171885711
Data Protection Officer, if applicable: info@xonboard.io