Privacy policy
Last updated 23 October 2026
This policy covers the Dubai Fleet website and its Android and iPhone apps, run by GECAT LTD (“we”). The app is a business tool: only people whose company gives them an account can use it.
What we collect
- Your account: name, work email, password (stored only as a one-way hash), role and which companies you may see.
- Fleet records your company enters: cars (plate, VIN, make, model), drivers' names, ID numbers and mobile numbers, garages, repair jobs, costs and dates.
- Photos and documents you upload, such as car photos, registration cards and certificates. The app uses the camera and photo library only when you tap “Take photo” or “From gallery”.
- Notification token: an identifier for your phone so we can send alerts, kept until you sign out.
- Security log: sign-ins and changes, with time and IP address, to protect accounts and show who changed what.
We do not collect your location, contacts or browsing, and the app has no advertising or analytics trackers.
How we use it
Only to run the fleet system for your company: show and update its records, send the alerts you rely on, keep accounts secure, and give support. We never sell personal data or use it for advertising.
Who else handles it
- Our hosting provider, on whose servers the data is stored.
- Expo, Google (Firebase Cloud Messaging) and Apple (Push Notification service), which deliver notifications. They receive the notification text and your phone's token.
- If your company switches on the optional AI audit feature, repair job details are sent to the AI service it has chosen, to check for mistakes.
Each sees only what it needs for that task. We share data with authorities only when the law requires it.
How long we keep it
Fleet records stay while your company uses the system. The security log is kept for 90 days and daily backups for 14 days. When an account is deleted, its sign-in details are removed within 30 days. Records it created stay with the company, because they belong to the company's fleet history.
Security
All traffic is encrypted (HTTPS). Passwords are hashed, sign-ins are rate-limited, and each person sees only their own companies. A password reset signs that person out on every device.
Your choices and rights
You can ask to see, correct or delete your personal data, or have your account closed, by writing to contact@gecat.ltd or asking your administrator. You can turn off notifications in your phone's settings at any time.
Children
The app is for company staff only and is not meant for anyone under 18.
Changes
If this policy changes, we update it here and change the date above.
Contact
GECAT LTD: contact@gecat.ltd