1. Controller and contact
Controller: , the individual responsible for developing and operating Van Livre.
Privacy, data-rights, and support contact: suporte@vanlivre.com.br.
Van Livre may be used by organizations, drivers, and other users who can also have their own responsibilities for personal data they enter or manage through the service.
2. Scope of the service
Van Livre is a system for managing and following passenger transportation by vans. It may organize drivers, passengers, organizations, itineraries, stops, trips, and operational events related to the service.
The app may work partially offline, store information locally on the device, and synchronize it with an API when connectivity is available.
3. Data that may be processed
Depending on the features used and the user role, Van Livre may process the following categories of data:
- registration and contact data, such as name, phone number, and email address;
- photograph and address when entered or necessary for the operation;
- information about drivers, passengers, and organizations;
- itineraries, stops, trips, route, distance, and operational events;
- device and vehicle location while trip-tracking features are in use;
- operational history such as boarding, drop-off, approaching a stop, arrival, incidents, and trip completion;
- app settings, technical data required for operation, and authentication tokens;
- authentication data received from social login when that method is configured and selected by the user.
4. Foreground and background location
During an active trip, Van Livre may use GPS location in the foreground and, when permitted by the operating system, in the background. This enables vehicle tracking, trip-progress calculation, detection of approaching and arriving at stops, and continued trip operation while the app is in the background or the screen is locked.
Background location is tied to the operational trip functionality and is not used for advertising.
Users can control location permissions in Android or iOS settings. Denying or revoking the permission may limit features that depend on location tracking.
The app should explain this location use before the operating system permission prompt, especially when background access is requested.
5. Why data is used
Data may be processed for purposes compatible with operating Van Livre, including:
- creating, authenticating, and maintaining accounts and sessions;
- managing organizations, drivers, passengers, itineraries, and stops;
- running, tracking, and recording trips;
- calculating progress, route, distance, approaching, and arrival at stops;
- keeping essential functions available offline and synchronizing data when connectivity returns;
- protecting accounts, preventing misuse, investigating failures, and maintaining service security;
- handling support, privacy, and deletion requests;
- complying with applicable legal or regulatory obligations and valid authority requests.
6. Legal bases
Personal data is processed under a legal basis appropriate to the context and purpose, including the Brazilian LGPD where applicable. Depending on the case, this may include performance of a contract or related procedures, compliance with legal or regulatory obligations, exercise of legal rights, legitimate interests with applicable safeguards, or consent when legally required.
A location permission granted in Android or iOS is an operating-system control and does not by itself replace the assessment of the legal basis applicable to the processing of personal data.
7. Sharing and service providers
Data may be made available to authorized users within the same operation, such as an organization, driver, or another role that needs the information to perform the transportation service.
When technically necessary, data may also be processed by providers used for infrastructure, hosting, API, authentication, storage, communications, or support. Specific providers should be documented when they are actually configured; this Policy does not invent or assume vendors that have not been identified.
Van Livre does not sell personal location data and does not use background location for advertising.
8. Analytics, advertising, and tracking
No specific analytics, behavioral-advertising, or cross-app/cross-site tracking tools were identified for this version of the Policy.
If any such technology is added, this Policy, the store privacy disclosures, and any applicable consent or permission mechanisms must be updated before the related processing begins.
9. Local storage, API, and security
To support partial offline operation, the app may keep necessary data on the device and later synchronize it with the API. Tokens and settings may also be stored locally in a manner compatible with the platform.
Technical and administrative measures appropriate to the service are used to reduce risks of unauthorized access, loss, alteration, or improper disclosure. No system, however, is completely immune from incidents.
10. Retention and deletion
Data should be retained only for as long as needed for the purposes described, to maintain the account and necessary operational history, resolve disputes, exercise legal rights, and comply with applicable legal or regulatory duties.
After a valid account-deletion request, associated personal data will be deleted or anonymized when there is no legitimate ground or retention obligation. Backups may remain for limited technical cycles until they are overwritten or expire, without being returned to ordinary operational use.
If specific internal retention periods are established by data category or backup type, they should be reflected in this Policy and internal processes before the related launch or change.
11. Children and teenagers
In school-transport operations, passenger data may relate to children or teenagers. In those cases, processing should follow the child’s or teenager’s best interests, necessity, security, and other applicable rules, and should be limited to what is appropriate for managing and performing the transportation service.
Organizations and users entering passenger data are responsible for having authorization or another appropriate legal basis to provide that information to Van Livre when required.
12. Data-subject rights
Under the LGPD and other applicable law, a person may contact suporte@vanlivre.com.br to exercise rights that may include:
- confirming processing and accessing personal data;
- correcting incomplete, inaccurate, or outdated data;
- requesting anonymization, blocking, or deletion when applicable;
- requesting portability subject to applicable rules;
- receiving information about sharing and processing purposes;
- withdrawing consent and requesting deletion of data processed on consent where that is the applicable legal basis, subject to lawful retention exceptions;
- objecting to processing when the law provides that right and requesting review of solely automated decisions that affect the person’s interests, if such decisions exist.
13. Account deletion
Deletion of an account and associated data can be requested through Van Livre’s public “Delete account & data” page. Identity verification may be required to prevent unauthorized deletion.
Data that must be preserved for legal obligations, security, fraud prevention, exercise of legal rights, or another legitimate ground will be retained only for the applicable period with restricted access.
14. Changes to this Policy
This Policy may be updated to reflect product changes, technologies used, or legal and store requirements. The update date on this page will change when a material revision is made.