Privacy Policy

1. Introduction

This Privacy Policy describes how Trinity Global (PTY) LTD ("Trinity Global", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use Limitless IOT, our mobile application, web application, and related services (collectively, the "Service").

The Service provides fleet and asset management features that may include GPS tracking, geofencing, IoT device monitoring, operator and wages reporting, shop ordering, and related tools depending on your app version and account configuration.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Who is responsible for your data

The data controller for personal information processed through the Service is Trinity Global (PTY) LTD, registered in South Africa.

For privacy questions, data requests, or complaints, contact us using the details in Section 15 below.

3. Information we collect

We collect information in the following categories:

3.1 Account and profile information

• Display name, email address, and user identifier
• Profile photo (if you choose to upload one)
• Email verification status
• Authentication data managed through Firebase Authentication, including sign-in method (email/password or Google Sign-In)

3.2 Location and tracking information

• Precise GPS location when you use live tracking, geofencing, or related map features
• Location history stored in tracking sessions, including timestamps and route points
• Geofence zone definitions you create (boundaries, names, and related settings)
• Distance, movement, and geofence entry/exit events derived from location data

Location data is collected only when you use features that require it and when you grant the necessary device permissions. Some tracking features may run while the app is in use or in the background, depending on your device settings and the features you enable.

3.3 IoT, device, and connectivity information

• IoT monitor configuration, labels, and uploaded images
• Sensor readings, logs, and historical IoT data
• Base station settings and network-related configuration
• Bluetooth device discovery and connection data when you connect compatible hardware
• MQTT and local network communication metadata needed to receive device data

3.4 Operational and business information you enter

• Operator records (names, photos, and related workforce data you add)
• Wages logs, summaries, and exported reports
• Shop product listings, orders, and order history (where enabled)
• App settings such as voice prompts, diesel pricing, logging intervals, and connected device preferences

3.5 Photos and files

• Images you capture or select for profile pictures, operators, monitors, or shop items
• Spreadsheet or report files generated or exported from the app on your device

3.6 Technical and usage information

• Device type, operating system, app version, and language settings
• IP address, browser type, and general connection information on web
• Firebase App Check signals used to help protect the Service from abuse
• Error, diagnostic, and security-related logs needed to maintain and secure the Service

3.7 Information we do not collect

We do not intentionally collect sensitive categories of data such as health information, government ID numbers, or payment card details through the core Service unless you voluntarily include such information in free-text fields you create (for example, in notes or operator records). Please avoid entering unnecessary sensitive information.

4. How we collect information

• Directly from you when you register, sign in, create zones, add operators, upload photos, place orders, or change settings.
• Automatically when the app reads device location, receives IoT/MQTT/Bluetooth data, or generates logs needed to operate features you use.
• From third-party sign-in providers such as Google when you choose Google Sign-In (for example, name, email address, and profile image supplied by the provider).
• From cloud infrastructure that stores and synchronizes your account data across devices.

5. How we use your information

We use collected information to:

• Create and manage your account and authenticate access
• Provide tracking, mapping, geofencing, alerts, and history features
• Display Google Maps, routes, and location-based reports
• Store and present IoT monitor data, base station configuration, and device status
• Support operator, wages, reporting, and shop features you enable
• Send local notifications and optional voice prompts configured in your settings
• Protect the Service against fraud, abuse, and unauthorized access
• Maintain, debug, and improve performance, reliability, and security
• Respond to support requests and legal obligations

We do not use your personal information for third-party advertising or sell your personal information.

6. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process personal data on these bases:

• Contract: to provide the Service you request
• Legitimate interests: to secure, maintain, and improve the Service
• Consent: where required for location, notifications, camera, Bluetooth, or similar device permissions
• Legal obligation: where we must comply with applicable law

You may withdraw consent for permission-based processing in your device or browser settings, though some features may no longer work.

7. Device permissions

Depending on the features you use, the app may request permissions including:

• Location — for maps, tracking, and geofencing
• Camera and photos — for profile and item images
• Notifications — for alerts and service messages on your device
• Bluetooth — to discover and connect to nearby IoT hardware
• Storage / files — to save or export reports and images on your device
• Internet and network access — to sync data and use cloud features

You can manage most permissions in your device settings. Denying a permission may limit related functionality.

8. How we store and share information

8.1 Storage

Your account and app data are stored in Google Firebase services, including Firebase Authentication, Cloud Firestore, and Cloud Storage, hosted on Google Cloud infrastructure. Data may be processed in data centers located outside your country of residence.

8.2 Service providers

We rely on trusted providers to operate the Service, including:

• Google / Firebase — authentication, database, file storage, and app protection
• Google Maps Platform — map display and location services
• Google Sign-In — optional account sign-in

8.3 Sharing with others

We do not sell your personal information. We may disclose information:

• When required by law, court order, or lawful government request
• To protect the rights, safety, and security of users, the public, or the Service
• In connection with a merger, acquisition, or asset sale, subject to appropriate safeguards
• With your direction or consent

Information you enter into the Service (such as operator records or shared reports) may be visible to other users within your organization or account scope if you configure the Service that way.

9. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete app data or delete your account, we delete or anonymize associated personal information from our active systems, except where retention is required for legal, tax, accounting, fraud prevention, or security purposes.

10. Security

We use reasonable administrative, technical, and organizational measures to protect your information, including encrypted connections (HTTPS/TLS), Firebase security rules, access controls, and authentication requirements.

No system is completely secure. You are responsible for keeping your password confidential and for activity under your account.

11. Your rights and choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information in your profile and settings
• Delete your data or account using the links above or in-app options
• Export information you stored in the app (for example, wages reports)
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Lodge a complaint with your local data protection authority

To exercise these rights, use the in-app profile and settings features or contact us at the email below. We may need to verify your identity before fulfilling a request.

12. International transfers

If you use the Service from outside the country where our infrastructure providers operate, your information may be transferred to and processed in countries that may have different data protection laws than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.

13. Children's privacy

The Service is not intended for children under 13 years of age (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "Last updated" date above. Material changes may also be communicated through the app or by email where appropriate. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact us

If you have questions about this Privacy Policy or wish to make a privacy request, contact:

When contacting us, please include the email address associated with your account and a description of your request. We aim to respond within 30 days.