Here2There Admin privacy policy

Introduction

Here2There Admin (package com.h2tadmin.app) is the back-office app for the Here2There dispatch platform. Ground transport and chauffeur operators use it to manage bookings, dispatch drivers, set pricing, work with suppliers and corporate accounts, and issue invoices. Here2There is developed and operated by UnitasPro ("we", "our" or "us").

Here2There Admin is a staff app, not a passenger app. You need an account issued by your company administrator to sign in. Accounts can't be created inside the app, and there is no sign-up or self-service onboarding. Because the app exists to run a business, it handles real personal data: yours as a staff user, and that of your company's customers, drivers, suppliers and corporate clients.

This policy applies to Here2There Admin on Android and iOS. This Privacy Policy explains how information is handled when you use the app. If you have questions about these practices, please contact us using the details below.

Information we collect and how we use it

Account and sign-in

The email address and password you enter are sent to the Here2There server to verify your identity. When sign-in succeeds, an authentication token is returned and stored locally on your device so the app can authenticate later requests. The token is removed when you sign out.

A copy of your own profile (name, email, role and company) is stored locally on your device so the app can show who you are without fetching it on every launch.

Business and operational records

Records you create are stored on the Here2There server:

• Customers: names, phone numbers, email addresses, addresses and photos
• Drivers, driver groups, suppliers and vehicles
• Driver payout details (account name, BSB and account number) that drivers enter so they can be paid
• Corporate companies, their administrators and employees
• Bookings, quotes, dispatch decisions and booking messages
• Pricing, zones, promo codes, invoices, payments and refunds
• Incident notes, earnings summaries and reports

These records are used only to provide the service to your company, never for advertising or profiling.

Booking addresses and maps

Booking screens show maps and address information using Google Maps Platform. Map and place requests, along with your IP address, reach Google so it can draw a map or look up an address.

When you enter a pickup or drop-off address, it is converted to map coordinates so the route can be drawn and priced by distance or zone. Those coordinates describe the journey being arranged for a customer. They are never the position of your device.

Photos you attach

Customer, driver, supplier and vehicle forms let you attach an image, using your device's photo picker or, where available, camera. Only the image you take or pick is read. It is compressed on the device and attached to that record. The app has no standing access to your photo library and never scans it. On Android, the app removes the broad media-library permissions that some third-party packages would otherwise add.

Invoice PDFs on your device

When you download or print an invoice, the app creates a PDF in its own documents folder and opens it in your device's file viewer. You can print or share it through your device's standard options. The file stays on your device until you delete it, and is removed when you uninstall the app.

Push notifications

Where enabled, your device issues a push token so operational alerts, such as new bookings, quote responses and invoice events, can reach you. The token is an identifier for your device's app installation and can't be used to read anything on your device. Notifications carry only the alert text and a record reference, so tapping one opens the right screen. On Android 13 and later you can decline notifications, and you can turn them off in your device settings at any time.

Links opened outside the app

The app can open the Here2There website, our legal pages, or a phone number on a corporate company record in your browser or dialler. Once a link opens, that site's or app's own privacy policy applies.

Technical data

Like any networked app, requests to our server include standard technical details: IP address, app version and build, device platform and operating system version. The app also checks whether you are online, only to show an offline indicator and retry requests. These details may appear in server logs for security, abuse prevention and troubleshooting.

Information we don't collect

We don't track you

• No advertising, attribution or measurement SDKs, such as AdMob, AppsFlyer, Branch, Adjust, the Facebook SDK, Segment or Mixpanel.
• No analytics or crash-reporting SDKs. Firebase is included only for Cloud Messaging, which delivers notifications. Firebase Analytics is not part of the app.
• The advertising identifier (GAID on Android, IDFA on iOS) is never requested or read.
• Nothing is shared with data brokers, ad networks or any third party for advertising or profiling, and there is no cross-app or cross-website tracking.

Because none of this counts as tracking, the iOS app does not show Apple's App Tracking Transparency prompt. There is nothing to ask permission for.

We don't collect your location

• The app requests no location permission on Android or iOS, and contains no location library, so it cannot read your device's position.
• Coordinates shown in the app are booking pickup and drop-off points, as described in section 2.
• Background location, geofencing, location history and live vehicle tracking are not features of this app.

Also not collected

• No card details or banking logins. The app records that a payment happened and for how much. We never receive card numbers, CVVs or online banking credentials.
• No in-app purchases. The app does not offer in-app purchases, subscriptions or digital goods through Google Play.
• No other access. No microphone, calendar, health or contacts access, and no reading of other apps' data.
• No selling. We never sell personal data to anyone.

Who controls the data

Most of the personal data in the app is not your own, so this distinction matters:

• Your employer, the transport operator whose account you sign in with, is the data controller for the customer, driver, supplier and corporate records in the system. They decide what is collected, why and how long it is kept.
• UnitasPro provides the Here2There software and hosting, and acts as a data processor on your employer's instructions.

If you are a passenger, driver or customer of a transport company and want to know what it holds about you, or want it corrected or erased, please contact that company directly. They control your data, and we can only act on their instructions.

Third-party services

Here2There Admin relies on the following services, each for one specific purpose.

Sharing and disclosure

We don't sell, rent or trade personal data, and we don't share it for anyone's advertising. We share data only:

• Within your company. Records you create are visible to other authorised staff on your company's account, according to their role.
• With assigned suppliers and drivers. When you assign a booking, the details that party needs to do the job are shared with them.
• With a booking's customer. When you send a quote or invoice, or generate a tracking link, that information goes to the customer you addressed it to.
• With the service providers in section 5, only so the app can work.
• Where the law requires it, such as a valid legal request or court order, or to protect against fraud, abuse or a threat to someone's safety.
• On a change of ownership. If the business is transferred, data may transfer with it, subject to this policy.

Retention and deletion

Operational records are kept while your company's account is active, and afterwards for as long as your company's retention rules and legal or tax obligations require. Invoices and payment records usually have to be kept for several years by law.

• Signing out deletes the authentication token from local storage on your device.
• Session expiry or forced sign-out clears locally stored session information: token, cached profile and push token.
• Uninstalling the app removes all app data from your device, including saved invoice PDFs and cached images.
• Deleting your staff account: see section 8.

Signing out or uninstalling does not delete records from the server. Those records belong to your company.

How to delete your account

Here2There Admin accounts are created by your company, so deletion goes through your company administrator or through us. You don't need the app installed to make a request.

• Ask your company administrator to remove your staff account. This is fastest if you still work with the company.
• Or email us at support@unitaspro.com from the email address on your account, with the subject Delete my Here2There Admin account. Include your full name and the company you sign in with. We will confirm the request is from you, let your company know, and complete the deletion within 30 days.

We delete your sign-in details, staff profile (name, email address and role) and push tokens. Bookings, quotes, invoices and other records you created belong to your company and stay with it, for as long as its retention rules and legal obligations require.

Security

• Your authentication token and cached profile are stored locally on your device. The token is removed when you sign out, and clearing the app's local data removes locally stored authentication information and cached profile data.
• All traffic to the Here2There server is sent over HTTPS.
• Access requires an account issued by your company. There is no public sign-up.
• Access to operational records is limited to your company's account and your assigned role.

No system is perfectly secure. Please protect your account with a strong password, don't share your login, and keep your device locked and up to date.

Your rights

Depending on where you live, you may have the right to access a copy of your personal data, correct it, have it erased, restrict or object to how it is used, withdraw consent, or receive it in a portable form.

Staff users can contact us or their company administrator. Customers, passengers and drivers of a transport company that uses Here2There Admin should contact that company, as explained in section 4. We respond to verified requests within the time required by applicable law. You may also have the right to complain to your local data protection authority. In Australia, that is the Office of the Australian Information Commissioner (OAIC).

International data transfers

The Here2There server and the services in section 5 may process data in countries other than your own. Where data is transferred internationally, we rely on the safeguards required by applicable law, and the data stays subject to this policy and to your employer's instructions as data controller.

Children's privacy

Here2There Admin is a professional business tool for adult staff of transport operators. It is not directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child's data has reached us, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. For significant changes, we may also tell you through an in-app notice or through your company administrator. Please review this page periodically for the latest information about our data practices.

Contact us

For questions or requests about this policy, contact us:

Developer

UnitasPro

App

Here2There Admin (com.h2tadmin.app)

Email

support@unitaspro.com

Website

here2there.io