Nadi Privacy Policy

1. Overview

papercut technology ("papercut," "we," "us," or "our") publishes Nadi, a fleet and school bus operations app for drivers, dispatchers, and fleet administrators (the "App"). This Privacy Policy explains what information Nadi collects, how we use and share it, and the choices you have. It applies to the Nadi iOS app, the Nadi Android app, and the Nadi web dashboard.

By creating an account or using Nadi, you agree to the collection and use of information as described here. If you do not agree, do not use the App. Use of Nadi is also governed by the Nadi Terms of Use.

2. Who we are

papercut technology is based in New Jersey, United States. We are the data controller for information described in this policy, except where the transport operator, school district, or other fleet organization that issued your account is itself the controller and we act as their processor or service provider.

3. Information we collect

Nadi collects information in three ways: what you or your fleet organization provide, what is generated as you use the App, and what we receive from the organization that administers your account.

Account & profile information

• Name, email address, phone number, and role (driver, dispatcher, mechanic, or admin)
• Employment and licensing details submitted through driver registration, such as driver's license information and related documents
• Fleet, depot, and vehicle assignments
• Login credentials, stored using industry-standard hashing — we never store your password in plain text

Operational content you create

• Vehicle inspection and maintenance reports, including checklist answers, notes, and any photos you attach
• Clock-in and clock-out records and associated timestamps
• Route sheets you upload and the digitized routes generated from them
• Payroll inputs derived from clocked hours
• Maintenance tickets and vendor notes tied to a vehicle

Device & usage information

• Device type, operating system and version, and app version
• IP address and general network information
• Log data such as feature usage, crash reports, and timestamps of activity
• Push notification tokens, if you enable notifications

Nadi does not collect your contacts, photo library, or microphone audio unless you later grant a specific permission for a feature that needs it (for example, attaching an inspection photo you choose). We do not use the App to serve third-party advertising, and we do not sell your personal information.

4. Location data

Nadi captures a driver's location at the moment they clock in and clock out, so a fleet administrator can confirm where and when a shift began and ended. This is foreground location data tied to an explicit clock-in or clock-out action. Nadi does not track a driver's location continuously in the background, and location is not collected outside of these clock events unless you are separately notified and asked to consent.

On iOS, you will see Apple's system permission prompt before the App accesses location. You can decline or later revoke this permission in Settings → Privacy & Security → Location Services. Declining or revoking location permission may prevent you from clocking in or out, because a location value is required by the shift record.

5. iOS permissions

Depending on the features your fleet uses, the Nadi iOS app may request the following system permissions. We only use a permission for the purpose described in the prompt and in this policy:

• Location (When In Use). To record where a clock-in or clock-out happened. Not used for background tracking.
• Camera / Photo Library. Only if you attach a photo to an inspection or maintenance report. We do not access your library in the background.
• Notifications. Optional. Used for transactional alerts such as shift reminders or inspection follow-ups. You can disable them in iOS Settings at any time.

If we add a new permission, the App will request it at the time of use and this policy will be updated.

6. How we use information

• To operate Nadi — shift records, inspections, payroll, routes, and role-based dashboards
• To authenticate accounts and enforce role-based access, so each person only sees what their role allows
• To route maintenance tickets to the right vendor or administrator
• To send transactional notifications (a clock-in confirmation, an inspection reminder) and, where you've opted in, product updates
• To provide customer and technical support
• To maintain the security, integrity, and reliability of the App, including detecting and preventing fraud, abuse, and unauthorized access
• To improve the App, including fixing bugs and understanding how features are used in aggregate
• To meet legal, tax, payroll, and record-keeping obligations

We do not use Nadi data to build advertising profiles or to show you third-party ads.

7. Legal basis for processing

Where applicable law requires a legal basis, we rely on: performance of a contract (providing Nadi to you or your organization), legitimate interests (securing and improving the App), legal obligation (payroll, tax, and safety record-keeping), and consent (for example, location access or optional notifications), which you may withdraw at any time.

8. How we share information

We share Nadi information only as needed to run the App:

• Within your fleet organization. Nadi is a role-based system. Your dispatcher, fleet administrator, or school transport office can see the information their role is designed to show — for example, a dispatcher sees driver shift records and inspection status.
• Service providers. We use trusted third parties to host infrastructure, store data, process OCR on uploaded route documents, send email and push notifications, and monitor app stability. These providers are contractually bound to protect your data and use it only to provide services to us.
• Legal & safety reasons. We may disclose information if required by law, subpoena, or legal process, or where we believe in good faith it is necessary to protect the rights, property, or safety of papercut, our users, or the public — this can matter in a fleet-safety context.
• Business transfers. If papercut is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy of at least equal protection.

We do not share your personal information with third parties for their own independent marketing purposes. Apple Inc. is not a recipient of Nadi operational data under this policy; Apple's own privacy policy governs information you provide to Apple when you download the App from the App Store.

9. Data retention

We retain information for as long as your account is active and as needed to provide Nadi. Certain records — including payroll and safety-related inspection logs — may need to be retained for longer to meet legal, tax, or contractual obligations even after an account is closed. When information is no longer needed, we delete or anonymize it, except where retention is required by law.

10. Security

We use technical and organizational safeguards to protect your information, including encryption in transit, access controls scoped by role, and hashed credential storage. No system is completely secure. Use a strong, unique password and report any suspected unauthorized access to us immediately.

11. Your rights & choices

Depending on your location, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Residents of California, the EU/EEA, UK, and other jurisdictions with data protection laws may have additional statutory rights. To exercise any of these rights, contact us using the details in Section 16. If your account is managed by a fleet organization, we may direct your request to them, or fulfill it directly where we control the relevant data.

On iOS you can also control location, camera, photos, and notifications in the device Settings app, independently of your Nadi account.

12. Account & data deletion

You can request deletion of your Nadi account and associated personal data at any time, including if you have uninstalled the iOS app. See our Data Deletion page for step-by-step instructions.

• In the App: Settings → Account → Delete Account
• By email: support@papercuttech.com with subject "Nadi account deletion request," plus the email on the account and your fleet organization name

We confirm receipt and complete verified deletions within 30 days. Payroll, tax, and vehicle safety records may need to be retained as described on the Data Deletion page; we remove or de-identify personal details that are not needed for those purposes wherever possible.

13. Children's privacy

Nadi is built for adult professional use — drivers, dispatchers, and fleet administrators. It is not directed at children, and we do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). Nadi records may reference a school bus route or stop associated with a school, but this does not involve collecting personal information about the students riding the bus. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

14. Apple App Store & Google Play

Nadi is distributed through the Apple App Store and Google Play. Each store also displays a summary of our data practices (Apple's App Privacy details and Google Play's Data safety section). Those summaries are kept consistent with this policy. If you notice any inconsistency between a store listing and this policy, this policy governs, and we will correct the listing promptly.

Apple Inc. and Google LLC are not responsible for the privacy practices described here. Their own privacy policies govern their handling of information related to your use of their stores, including payment information if any purchase is processed by Apple or Google.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to Nadi or for legal, operational, or regulatory reasons. We will update the effective date above, and where a change is material, we will provide additional notice — such as an in-app notice or an email — before it takes effect.

16. Contact us

If you have questions about this Privacy Policy or how we handle Nadi information, contact us at:

Related: Nadi Terms of Use · Data Deletion · About Nadi