Dromivia app privacy notice

Last update: 7 October 2026
Version: 1.0
To whom it applies: Drivers and couriers who use Dromivia, and delivery recipients

In summary

Dromivia is in development and is not yet used with real people in production.
It records position only during the assigned route, from when you confirm the vehicle until you close the day. It does not request background location or the microphone.
The camera is used only for proof of delivery and code scanning.
Your employer decides what the data is used for; Drometra processes it on the employer's behalf.
On sign-out, the position log is deleted from the phone; when the device is unlinked, everything is deleted.

This summary guides the reading and does not replace the text of the document.

01App status

In development

Dromivia is currently tested with synthetic data. We will not use it with real drivers or recipients until backups with recovery, full local encryption, and the lawful basis for processing recipient data are in place. This notice describes how the current version works and will be updated before such use.

02Who is the controller

The company you work for, or that hires you, is the controller: it decides the purpose and means of processing. DROMETRA SpA acts as processor, processes the data only on behalf of that company, and does not use it for its own purposes. Requests about your data go first to your employer; if they reach us, we forward them to the employer within 5 business days.

03What data it records, moment by moment

Moment	Data
Sign-in	Your account identity through Drometra's identity provider and a 4- to 6-digit PIN. You can unlock with fingerprint or face: the Android system verifies it, and Dromivia does not receive the fingerprint or the face image.
Start of workday	Vehicle, by QR code or license plate, and the pre-trip checklist.
Loading	Scanning of package codes.
During the route	GPS position approximately every 20 seconds, sent in batches, only between vehicle confirmation and end of day. The platform rejects positions sent before assignment or more than 15 minutes after end of day.
Delivery	Position at delivery, to verify that it took place at the location; photographs; drawn signature and name of the person receiving; RUT and relationship to the recipient, when the company requires it; customer verification code or QR.
Delivery not completed	Reason and photograph.
Diagnostics	Local technical log of up to 7 days or 20,000 events, with no recipient data and with coordinates rounded to 4 decimal places. It only leaves the phone if you decide to share it.

04Phone permissions

Precise location: only while the app is in use during the route. Dromivia does not request background location.
Camera: for evidence photographs and reading QR codes and barcodes.
Microphone: not requested.
System biometrics: optional, for unlocking. Verification is performed by Android.

Navigation opens in Waze or Google Maps through a link. From that moment, those apps' terms apply, and Drometra does not receive what they record.

05Where they are stored and how they are protected

Where	What	Protection	State
Phone	Session and PIN	AES-256-GCM encryption with a key from the Android secure keystore	Implemented
Phone	Send queue, evidence, and pending positions	Operating system encryption; app-level encryption	App-level encryption being implemented
Phone	Evidence of each delivery	Manifest with SHA-256 fingerprint to detect tampering	Implemented
Platform	Synced data	Server in France (European Union), database isolated per company, and encrypted transmission	Implemented

Dromivia works without signal: it saves work on the phone and syncs it when the connection returns.

06How long they are retained

On the phone, the position log is pruned at 7 days or 20,000 rows, whichever comes first.
On sign-out, the day's position log is deleted from the phone. When the phone is unlinked from the company, everything the app stored on it is deleted.
On the platform, retention periods are set by your employer within the ranges of the retention policy. The planned period for detailed positions is 12 months; automatic deletion of positions, photos, and signatures is being implemented and must be active before use with real people.

07Your rights

You can request access, rectification, erasure, objection, portability, or blocking of your data. Contact your employer first, as it is the controller. You can also write to [email protected]: we will confirm receipt and forward the request to your employer. If you are the recipient of a delivery, the company that sent you the order is the controller of your data.

Ley 21.719 · Rights of the holder

It grants every person the rights of access, rectification, erasure, objection, portability, and blocking with respect to their personal data, as of December 1, 2026.

Official text of the rule

Status of this document

Text prepared by Drometra and pending review by external legal advice before its final publication. Its structure and content were built on the current Chilean legislation and on Law 21.719, which has been in force since 1 December 2026. It does not constitute legal advice for third parties.