This Privacy Policy explains how Ibn Al Ghafri Modern Projects LLC, trading as MadarTech IVMS ("MadarTech", "we", "us"), collects, uses, stores and discloses information when you use the MadarTech web platform at madartech.net and the MadarTech IVMS Android WebView application (together, the "Service").
The Android application displays the MadarTech website through an embedded browser, also called a WebView. Sign-in and fleet-management features are supplied by the website. Information handled through those pages is covered by this policy, as well as information supplied by vehicle tracking devices.
MadarTech IVMS is a vehicle and fleet tracking service. It is sold to businesses and individuals who own or operate the vehicles being tracked. In most cases your account was created by, or on behalf of, the organisation that owns the vehicle. That organisation decides which vehicles are tracked, who may see the data, and for how long the account stays open. We process the data on their instructions and for the purposes set out below.
The Service is not intended for children. You must be 18 years of age or older to create or use an account. We do not knowingly collect personal information from anyone under 18. If we learn that we hold such information, we delete it.
When you sign in through the Android application, your login information is submitted to the MadarTech website through the embedded browser. The Android wrapper does not provide a separate account system or its own password database.
This is the core of the Service. The tracking device fitted to the vehicle transmits to our servers:
Positions are recorded continuously while the tracking device is powered, including outside working hours. Anyone whose vehicle carries a MadarTech tracking device should be aware that their location while driving that vehicle is recorded and visible to the account holder and other authorised users.
When you use a feature that needs your own position, the MadarTech website may request permission to access your device's location. In location-enabled versions of the mobile application, this request uses your phone's permission controls. When you open the website in an external browser, it uses that browser's permission controls.
With your permission, the website can use your current position to show you on the map, centre the map on you, and display distance and direction between you and a vehicle. The accuracy of your position depends on your device, available location services and whether you permit approximate or precise location.
Phone-location access is optional. If you decline, features that depend on your own position will be unavailable. Vehicle positions supplied by tracking devices are separate and do not depend on your phone's location permission.
The mobile application requests location access while it is in use. It does not request background location permission or include a native background tracking service. Native app code does not separately store phone coordinates; the website handles location through its location-enabled page features.
You can revoke the application's location permission in your phone's app permission settings. For the website in an external browser, you can revoke location permission in the browser's site settings and manage the browser's location access in your device settings. App and browser permissions are separate.
Vehicle positions shown in the application are supplied by the MadarTech fleet service from the tracking devices associated with your account. Vehicle location records are separate from the location of the phone running the application.
The Android wrapper does not include a separate advertising, analytics or crash-reporting SDK. This does not prevent the web platform from processing the technical and usage information described above.
We use information for the following purposes:
We process information to perform the contract between us and the subscriber, on the basis of our legitimate interest in operating and securing a vehicle tracking service, with your consent where consent is required, and to comply with legal obligations in the Sultanate of Oman.
Optional access to your device location through the application or browser requires your permission as described in section 2.4.
You and your account holder
Data for a vehicle is visible to the account that owns it, to sub-accounts that account has granted access to, and to the managing dealer or administrator of that account.
MadarTech staff
A limited number of authorised technical staff can access data where necessary to operate the Service, resolve a support request or investigate a fault.
Service providers
The providers described in section 6 process information needed to deliver their services.
Authorities
We may disclose information where required by Omani law, a court, or a competent regulatory or law-enforcement authority.
Business transfers
If the business or part of it is sold or reorganised, data may transfer to the acquirer, who remains bound by this policy until it is replaced by a notified successor.
We do not otherwise disclose your information to third parties.
iSmartSMS
Purpose: Delivery of SMS alerts and notifications.
Data: Recipient phone number and message text.
OMPAY
Purpose: Online payment of subscription renewals.
Data: Amount, order reference, name, email address and phone number. Card data is entered on the provider's page and is not received by us.
Our hosting provider in Oman
Purpose: Operation of the servers that run the Service.
Data: Platform data stored on servers we control in the Sultanate of Oman.
Map providers
Purpose: Rendering map tiles in the application and web platform.
Data: Requests for the map area being viewed and ordinary connection information, such as an IP address and browser request metadata, received when map resources are loaded.
We engage service providers for the purposes described above. Information we provide to processors acting on our behalf may be processed only for the purpose for which we engage them.
If you choose to open an external link or send information through an external browser, phone, email, map or messaging application, the destination's privacy practices apply to information you choose to provide there.
The MadarTech IVMS platform, position history archive and backup copies are hosted on servers located in the Sultanate of Oman, under our control. Platform records and backups are stored in Oman and are not transferred abroad for storage by us.
Map resources may be supplied by providers outside Oman. Loading those resources sends requests for the map area being viewed and associated network connection information to the provider. That processing is separate from storage of your account and fleet records on our platform.
Vehicle positions and telemetry history
540 days, after which older positions are removed automatically.
Administrative activity logs
180 days, trimmed automatically.
Account and vehicle records
For as long as the account is active, and for up to 12 months after it is closed, unless you ask us to delete them sooner, subject to the deletion exceptions described in section 9.
Invoices and payment records
As long as required by Omani accounting and tax law.
Backups
Backup copies are rotated and overwritten. Data deleted from the live system disappears from backups as the rotation completes.
You may ask us to:
Account and data deletion
To request deletion of your account and personal data, send an email to info@madargps.com from the email address registered on the account. Include the word "Delete" and your account username in the subject line. Do not include your password.
We will confirm and action the request within 24 hours, subject to confirming your identity, your authority over the records and the exceptions below.
Deletion removes your user account, personal contact details, and the vehicle and position data belonging to your account. Where the account belongs to an organisation and the vehicle is owned by that organisation, we will delete your personal user record but refer the request for vehicle data to the account owner, because that data belongs to the organisation.
Invoices and records we are legally required to keep are retained for the statutory period. Deleted data disappears from rotating backups as the rotation completes.
We answer other requests under this section within 30 days. We will ask you to confirm your identity before acting on a request.
Uninstalling the application or clearing its local storage does not delete your server-side account, vehicle records or position history. Use the request process above to request account or data deletion.
We protect the Service with access controls and per-account permissions, encrypted connections (HTTPS/TLS) between your browser or application and our servers, password hashing, restricted administrative access, activity logging, and regular encrypted backups. We review these safeguards. No system can be guaranteed completely secure.
The Android application loads the MadarTech website using HTTPS and disables cleartext network traffic.
You are responsible for keeping your password confidential and for the activity of any sub-account you create. If you believe your account has been accessed without your permission, contact us immediately at info@madargps.com.
The web platform uses cookies that are strictly necessary for it to work: a session cookie to keep you logged in, a security token to protect forms against cross-site request forgery, and cookies that remember your language and display preferences. We do not use advertising or cross-site tracking cookies. Blocking necessary cookies will prevent you from logging in.
The MadarTech IVMS Android WebView application uses the website's cookies and local website storage within its embedded browser. This can include session information, preferences and cached website content. The Android wrapper does not implement a separate native login-token database.
You can sign out using the website's controls. You can clear local application storage through Android's application settings. Clearing storage may remove saved sessions and preferences, requiring you to sign in again.
Clearing local storage or uninstalling the application does not delete your server-side account or fleet records. Account and data deletion requests are handled as described in section 9.
We may update this policy. The effective date and last-updated date at the top identify the policy version. If a change materially affects how we use your information, we will notify account holders by email or through a notice in the platform before it takes effect. Where consent is required for a new use, we will obtain that consent.
For questions about this policy, the information we hold, or requests under section 9, contact:
This policy is governed by the laws of the Sultanate of Oman.