Privacy Policy for NexTrack Field

Last updated: August 18, 2026

This Privacy Policy describes how NexTrack Field ("the App", "we", "us") collects, uses, and protects information when the App is installed and used on municipal-issued devices. The App is operated by the municipal department that deployed it ("the Operator").

1. Information We Collect

1.1 Location Data

The App collects and transmits the device's GPS coordinates (latitude and longitude) while a field worker is on duty. Location is recorded in both the foreground and background to confirm that assigned meter-reading routes are being covered. Background location collection continues only while the worker is marked as on duty and stops when the worker goes off duty.

• GPS coordinates (latitude, longitude) and accuracy readings
• Timestamps of each location recording
• Whether the reading was captured live or from an offline backlog

1.2 Device Identifiers

To associate location data and assignments with a specific physical device, the App collects:

• Android device identifier (Android ID) or iOS vendor identifier
• Device make, model, and operating system information
• Device battery level at the time of each location ping

1.3 Device Inventory Information

For municipal asset management, administrators may record the following details about devices issued to field workers:

• Serial numbers, IMEI numbers, and barcodes
• SIM card numbers and assigned phone numbers
• Sensor serial numbers
• Responsible person name and identification number
• Device condition and maintenance history

1.4 Account Information

The App uses email and password authentication managed by Supabase Auth. When an account is created, the following information is stored:

• Email address
• Full name
• Employee number
• Phone number
• Department and station assignment
• Assigned role (admin, supervisor, field worker, auditor, or tech support)

1.5 Assignment and Activity Data

The App records information about device assignments to field workers, including:

• Assigned route, area, and ward
• Collection and expected return timestamps
• Condition checklists completed by workers and inspectors
• Reported issues, damage reports, and maintenance events
• Notes entered by workers and administrators

1.6 Alerts

The App automatically generates alerts based on device behavior, such as off-route movement, extended offline periods, low battery, no movement, or overdue returns. These alerts are visible to supervisors and administrators.

1.7 Locally Stored Data

The App stores a local offline outbox on the device using SQLite to retain location pings, assignments, and alerts when the device has no internet connection. This data is automatically synced to the server when connectivity is restored and remains on the device only until the sync completes.

2. How We Use Information

• To track and verify that field workers are covering assigned meter-reading routes
• To monitor device location, battery status, and connectivity in real time
• To manage the issuance, return, inspection, and maintenance of municipal devices
• To generate alerts for supervisors when devices go off route, offline, or exhibit unusual behavior
• To maintain an audit trail of device assignments and condition reports
• To authenticate users and enforce role-based access to app features

3. Third-Party Services

3.1 Supabase

The App uses Supabase as its backend provider for authentication, database storage, and real-time data synchronization. Data is stored on Supabase's cloud infrastructure. Supabase's privacy policy is available at https://supabase.com/privacy.

3.2 Google Maps

The App uses Google Maps to display device locations and routes on a map. Google Maps may collect usage data subject to Google's Privacy Policy, available at https://policies.google.com/privacy. The App transmits the device's Google Maps API key and location coordinates to Google Maps for rendering purposes.

4. Data Sharing

Data collected by the App is accessible only to authorized municipal personnel based on their assigned role. Administrators and supervisors can view device locations, assignments, alerts, and worker activity. Field workers can view their own assignments and routes. Data is not sold to or shared with third parties for marketing purposes.

5. Data Retention

Location data, assignment records, alerts, and device inventory data are retained on the Supabase backend for as long as the municipal department requires them for operational and audit purposes. The retention period is determined by the deploying municipal department. Locally cached data on the device is deleted once it has been successfully synced to the server.

6. Data Security

All communication between the App and the Supabase backend uses HTTPS/TLS encryption. Authentication tokens are stored securely on the device using platform secure storage. Row-level security policies on the backend enforce that each user can only access data appropriate to their role. Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

As a user of a municipal-issued device, your rights regarding personal data are governed by your employer's data protection policies and applicable labor laws. To request access to, correction of, or deletion of your personal data, contact GlobalSolutions Group Inc. at info@globalsolutionsgroup.co.za.

8. Children's Privacy

The App is intended for use by municipal employees and authorized personnel only. It is not directed toward children under 18, and we do not knowingly collect personal information from children.

9. Permissions Used

The App requests the following Android permissions:

• ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION - to record GPS coordinates during duty hours
• ACCESS_BACKGROUND_LOCATION - to continue location tracking while the app is in the background during active duty
• FOREGROUND_SERVICE and FOREGROUND_SERVICE_LOCATION - to run a persistent location tracking service with a visible notification
• WAKE_LOCK - to keep the device active during location tracking
• RECEIVE_BOOT_COMPLETED - to resume tracking after device restart

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or the App's data practices, contact GlobalSolutions Group Inc. at info@globalsolutionsgroup.co.za