Your data,
in plain words.

01 Who we are

DriveOnline is built and operated by BreakInvent ("we", "us"), No. 10 Otublohum Road, North Industrial Area, Accra, Ghana. BreakInvent is the data controller for the personal data described here. This policy applies to drivers, fleet owners and fleet admins who use DriveOnline. You can reach us at info@breakinvent.com.

02 What we collect

Account

Your name and phone number, which is how you sign in, and the one-time codes we text you to confirm it's you.

Driver profile

Name, date of birth, place of birth, nationality, email, city and town. Driving licence and insurance details. Your next of kin's name and phone number. Training records and certificates.

Documents and photos

Photos or scans of your licence, insurance, vehicle registration and ECOWAS card, other documents you upload, and your profile photo.

Vehicles

Plate number, make, model, year and capacity of the vehicles you drive or your fleet owns.

Trips

Start and end points, route, times, distance, odometer readings, passenger count, crew, pre-trip checklist answers and notes, speed and rest alerts, and the GPS trail of the trip.

Hazard reports

The type and location of hazards you report, any description you add, and voice clips you record. We also record your votes, flags and confirmations on other drivers' reports.

Push-to-talk

Voice messages you send on push-to-talk channels, and which channels you join and leave.

Camera, photos, microphone and speech

With your permission, the app uses the camera and photo library to capture documents and hazard photos, and the microphone for voice messages, hazard voice clips and hands-free voice commands. Speech recognition may be processed by your phone's operating system provider (Apple or Google).

Emergency alerts

If you use the emergency feature, we text your location, a map link and any message you add to your next of kin and to your fleet owner, and keep a record that the alert was sent.

Payments

If you subscribe, we record your plan, invoices and payment status. Mobile money payments are handled by our payment providers. We do not store your mobile money PIN or card details.

Device and diagnostics

• A push notification token, your device type and name, so we can send you alerts.
• Crash and error reports from the app, sent to Sentry. These include your device and app details, your IP address and your user ID.
• When the app hits an error, a short screen recording of the moments before it (a session replay) is sent with the report. Verification code fields are masked in these recordings.
• Error reports from our servers, which can include details of the request that failed.

03 How we use it

• Create and secure your account and sign you in.
• Record trips, check compliance with driving and rest rules, and produce fleet reports.
• Warn you and other drivers about hazards, and run push-to-talk channels.
• Verify driver documents and remind you before they expire.
• Send emergency alerts you trigger.
• Take payments and keep billing records.
• Fix crashes and keep the service working.

We process your data to provide the service you signed up for, with your consent where the law requires it (such as location and microphone access), and to meet our legal obligations such as keeping tax records. We do not sell your personal data or use it for advertising.

04 Who sees it

Your fleet

If you drive for a fleet, its owner and admins see your profile, documents, trips, checklists, compliance and live location during trips.

Other drivers

They see hazard reports (with your name), push-to-talk messages on channels you join, your name and photo as crew, and your position in driver rankings.

Authorities

When the law requires it.

Service providers

Companies that process data for us, under contract.

• mNotify and PiloSMS

  Text messages

• Hubtel, Flutterwave and Paystack

  Payments

• Firebase Cloud Messaging (Google)

  Push notifications

• LiveKit

  Push-to-talk audio

• Google Maps Platform

  Maps, routes and places

• OpenWeatherMap

  Weather, from route coordinates only

• Amazon Web Services (S3)

  Storing documents, photos and audio

• Sentry

  Crash and error reports

• Mailtrap

  Diagnostic emails to our support team

• DigitalOcean

  Hosting our servers and database

05 Transfers outside Ghana

Our servers and database are hosted by DigitalOcean in data centres outside Ghana, and some of our other service providers also store or process data abroad, including in the United States. We choose providers that commit by contract to protecting the data they process for us.

06 How long we keep it

Account and profile

For as long as you have an account.

Push-to-talk audio

Deleted once it is 48 hours old. A job runs every hour, so a message can outlive that by up to an hour.

Failed background jobs

These can include a phone number and message text. Deleted after 7 days.

Billing records

Invoice amounts, dates and status, your plan, and the payment provider's transaction reference are kept for at least 6 years, as the Revenue Administration Act, 2016 (Act 915) requires. When your account is deleted they no longer carry your name or phone number.

Server logs

Kept for 14 days, then deleted automatically.

Backups

Kept for up to 30 days, after which deleted data is gone from them too.

Service providers

Providers keep their own records for as long as their legal obligations require, for example payment transaction records and text message delivery logs. Sentry keeps error reports for up to 90 days. When you delete your account we ask providers to delete what they hold beyond those obligations.

07 Deleting your account

You can delete your account in the app, or on our delete account page. We text a code to your phone to confirm it's you. Then you choose:

If you own a fleet with trips in progress, the deletion finishes once those trips end. Your fleet and its vehicles are removed, and its drivers keep their own accounts. Sign-in access is removed at once, but a connection that is already open may take a short time to close. We text you when the deletion is complete.

08 Security

Data is encrypted in transit. Documents and audio are stored in private storage and shared only through short-lived links. Access to personal data inside BreakInvent is limited to staff who need it. No system is perfectly secure, and we will tell you and the Data Protection Commission about a breach that affects you as the law requires.

09 Your rights

Under Ghana's Data Protection Act, 2012 (Act 843), you can ask to see the personal data we hold about you, have it corrected, have it deleted, and object to how we use it. You can withdraw consent, such as location or microphone access, in your phone's settings at any time, although some features will stop working. To exercise these rights, contact us at legal@breakinvent.com. You can also complain to the Data Protection Commission of Ghana.

10 Children

DriveOnline is for commercial drivers and fleet operators. You must be 18 or older to use it, and we do not knowingly collect data from anyone younger.

11 Changes to this policy

If we change this policy, we update the date at the top. If a change affects how we use your data in a significant way, we let you know in the app or by text message.

12 Contact us