Privacy policy

Last updated 6 October 2026

This policy explains how AppAlbania, Tiranë, Shqipëri (“we”) processes personal data when you visit gps.appalbania.com, contact us or use the AppAlbania GPS platform, in accordance with Albanian personal data protection legislation (Law no. 9887 of 10.03.2008, as amended, or the law replacing it).

1. When we are controller and when processor

• We are the controller for data about website visitors, people who contact us and account holders (name, email, billing).
• We are a processor for vehicle data, positions, drivers and other data our customers collect through the platform. For that data the customer (for example the company that owns the fleet) is the controller. This is governed by the Data Processing Agreement.

2. Data we collect

• Contact and quotes: name, company, phone, email, fleet size and the message you send through the form, WhatsApp or email.
• Account: name, email, phone, language, password (hash only), two-step verification data (encrypted).
• Billing: plan, invoices and payment status. Card data is processed only by Stripe.
• Fleet data (on behalf of the customer): device IMEI and model, plate number, position, speed, engine status, fuel, alerts, assigned drivers.
• Mobile app (iOS and Android): a sign-in token stored securely on your phone, the phone's notification token, app version and language, so we can send the alerts you chose. The app does not track the location of your phone.
• Technical: IP address, browser, date and time of logins and important actions, for security and abuse prevention.

3. Why we use it and legal basis

• to answer your request and send you an offer (pre-contractual steps);
• to provide the service and perform the contract (account, billing, support, service notifications);
• for legal obligations (accounting, tax, requests from authorities);
• for legitimate interest (security, fraud prevention, improving the service);
• with your consent, where required (for example WhatsApp or Telegram notifications).

4. Who we share it with

Only processors we need to run the service, under agreements and security measures: server and data-centre providers, Cloudflare (DNS and protection), Stripe (payments), our email provider, the AppAlbania WhatsApp gateway, our SMS provider, Google Firebase and Apple (delivering push notifications to the mobile app) and, when you enable them, Telegram and map services. Some may process data outside Albania (for example in the EU or US) with appropriate safeguards. We do not sell your data or use it for advertising.

5. How long we keep it

• contact and quote requests: up to 24 months after the last contact if you do not become a customer;
• account data: while the account is active and up to 30 days after closure;
• position history: according to the customer's plan (typically 120 days for SaaS plans and 12 months for full service), then deleted automatically;
• invoices: for the period required by tax and accounting law;
• security logs: up to 12 months, unless needed for an incident or legal request.

6. Security

Connections use HTTPS, passwords are stored only as hashes, secrets are encrypted, each customer sees only their own data, and our staff access is limited and logged. No system is 100% secure; in case of a breach we act and notify as required by law.

7. Your rights

You have the right to request access, rectification, erasure, restriction, objection to processing and data portability. Write to info@appalbania.com. If you are a driver or employee of one of our customers, send your request to your employer; we help them respond. You also have the right to complain to the Commissioner for the Right to Information and Personal Data Protection (idp.al).

Deleting your account

To delete your account and its data, write from the account's email address to info@appalbania.com with the subject "Delete account", or ask your organisation's administrator to remove your user. We confirm and delete within 30 days, except invoices we must keep by law. Signing out of the mobile app removes the phone's notification token at once.

8. Cookies

We only use strictly necessary cookies. Details are in the Cookie policy.

9. Changes

We may update this policy; the date of the last update is shown above. We will notify you of material changes.