Privacy Policy
Trophy Technologies — the Trophy scooter fleet management mobile app.
1. Who we are
Trophy Technologies ("we", "us", or "our"), an Egyptian company based in Alexandria, Egypt, operates the Trophy mobile application for scooter fleet operators. When you create an account, you enter into an agreement with Trophy Technologies.
Trophy Technologies
10 Street, Amreya 1, 5255410
Alexandria, Egypt
Registered and operating in Egypt
The Trophy app is the operator-facing client. Scooters themselves communicate with our servers through a separate device gateway; the app does not talk to scooters directly.
2. Information we collect
2.1 Account information you give us
| Information | Why we need it |
|---|---|
| Email address | Sign-in identifier, and to send account verification and password reset messages. |
| Password | Stored only as a one-way cryptographic hash. We never receive or store your plain-text password. |
| Full name | Shown on your profile and used to identify you inside your organisation. |
| Mobile phone number | Contact number for fleet operations. We currently accept Egyptian mobile numbers. |
| Account role | Determines what you are permitted to see and do, for example assigning scooters to other operators. |
| Account creation date | Used to maintain account records and may be shown on your profile. |
2.2 Verification codes
If you register or reset your password, we may send a one-time verification code to the email address associated with your account. We process that code only to confirm the request; it is not retained after it is used.
2.3 Permissions you grant on your device
| Permission | When we ask | What it is used for |
|---|---|---|
| Camera | When you open the QR scanner. | To scan a scooter's QR code so you can claim or transfer it. Camera images are processed on your device and are not transmitted or stored by us. |
| Precise and approximate location | When you open the map, or tap the locate-me control. | To show your position on the fleet map and centre it on you. If you decline, the map still works and the rest of the app is unaffected. |
The app does not request background location, contacts, microphone, SMS or advertising permissions.
2.4 Information collected automatically
- Session tokens. We issue a session token when you sign in so you stay signed in. It is held in your device's encrypted, hardware-backed keystore. It is removed when you sign out or delete your account.
- Local cached data. Scooter status and notifications you have already viewed may be cached in a local database on your device so the app remains usable with a poor connection. This cache is cleared when you sign out or delete your account.
- Server request logs. Our servers may record the time, an anonymised request identifier and the outcome of requests for security, troubleshooting and service reliability.
3. How we use your information
- To create, authenticate and maintain your account.
- To display the scooters assigned to you, their live status and their location on a map.
- To let you claim, release and transfer scooters, and to send commands to those scooters.
- To send you notifications about scooter events, such as a low battery or a crash alert.
- To process payments you make for services.
- To detect, investigate and prevent fraud, abuse and security incidents.
- To comply with our legal and tax obligations.
We do not use your data for advertising. We do not sell your personal information to anyone, for any purpose.
4. How we share your information
We share the minimum necessary with service providers who process data on our behalf. Each provider is expected to use the data only for the service it provides to us.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosting and database infrastructure, including authentication, database services, realtime updates and server-side functions. | Your account details, scooter assignments, application data and scooter telemetry. |
| Maps and location services through the Google Maps SDK. | Your approximate or precise location when you use the map, together with technical information required for the Maps service. | |
| Paymob | Payment processing when you pay for a service. | Transaction information and billing details required to process the payment, which may include your name, email address and phone number. |
We do not currently use a separate SMS provider for account verification. Verification and account messages are sent through the services configured for the application.
We also disclose information where required by law or valid legal process. If we are legally compelled to disclose personal data, we will notify you unless the law prohibits us from doing so.
5. Scooter and device data
Scooters report their own data to our servers through our device gateway. When a scooter is assigned to you, its data becomes visible to you in the app. This typically includes:
- Identifier, model, firmware and hardware version
- Location coordinates
- Battery level and charging status
- Speed, engine, lock and crash status
- Whether the scooter is online, and when it was last seen
- Accumulated working hours and active-time windows
This is information about a machine, not about you, and it may be retained as fleet history even after an account is closed. See section 9 for what happens to it when you delete your account.
6. How long we keep it
| Data | Retention period |
|---|---|
| Account details | For as long as your account remains active and for as long as reasonably necessary after account deletion to comply with legal, security and operational requirements. |
| Notification records | For as long as reasonably necessary to provide the service and maintain operational records. |
| Command and transfer audit records | For as long as reasonably necessary for security, operational, dispute-resolution and audit purposes. |
| Payment records | For the period required for payment processing, accounting, tax, legal and fraud-prevention purposes. |
| Scooter telemetry and fleet history | For as long as reasonably necessary to operate the fleet, maintain service history, improve reliability and meet operational or legal requirements. |
| Server security logs | For as long as reasonably necessary to detect security incidents, investigate abuse and maintain the security of our services. |
When information is no longer required for these purposes, we delete it or irreversibly anonymise it where reasonably possible. Data we are legally required to keep, such as certain transaction or accounting records, is retained for the period required by applicable law and then removed.
7. How we protect it
- Data in transit is protected with TLS encryption.
- Your session token is stored in your device's hardware-backed keystore, not in plain preferences.
- Access to production data and databases is restricted to personnel who need it and is protected by appropriate access controls.
- Database tables use row-level security where applicable, so users can only access records they are authorised to access.
- Server-side functions that need elevated access are isolated from the app and cannot be called anonymously.
- We review and test access controls, including authorisation controls protecting application data.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant regulator as required by applicable law.
8. Your rights and choices
Depending on where you live and applicable law, you may have the right to:
- Access — get a copy of the personal data we hold about you.
- Correct — fix data that is inaccurate or incomplete. You can edit your name and phone number in the app under Profile.
- Delete — ask us to erase your account and your personal data. See section 9.
- Restrict or object — limit or object to certain uses of your data where applicable.
- Withdraw consent — where we rely on consent, withdraw it at any time.
- Complain — raise a complaint with the relevant data protection authority.
To exercise any of these rights, email us at info@trophytechs.com. We will verify your identity before acting on a request and will respond within a reasonable period required by applicable law.
You can also control permissions at any time in your device's Settings > Apps > Trophy > Permissions. Revoking a permission disables the feature that needs it; the rest of the app keeps working.
9. Deleting your account
You can delete your account yourself, without contacting us. This is a permanent action.
To delete your account from inside the app:
- Open Profile.
- Tap Delete account at the bottom of the screen.
- Re-enter your password to confirm it is you.
- Tap Delete permanently.
When you confirm, we immediately and permanently:
- remove your account and your ability to sign in;
- delete your profile record and personal application data associated with your account, subject to information we are required to retain by law;
- cancel any scooter transfer that was still pending;
- detach your account from the scooters assigned to you, returning them to the unassigned pool so they are not lost from the fleet;
- clear the cached scooter and notification data from your device.
Payment and transaction information may be retained where necessary for accounting, tax, fraud-prevention, dispute-resolution or other legal requirements. Information retained for these purposes is not used to restore your deleted account.
We keep the scooter records themselves because a scooter is a physical asset and its service history is fleet data rather than personal data. Where reasonably possible, records retained after account deletion are no longer linked to your deleted account.
If you want the service history of a specific scooter reviewed for removal, email info@trophytechs.com and we will assess the request subject to applicable operational and legal requirements.
Once deletion is confirmed it cannot be undone, and we cannot restore your account or transfer your scooters back to you.
If you would rather ask us to delete your account, or you are unable to use the app, email info@trophytechs.com from the address on the account. We will verify your identity and process the deletion request in accordance with applicable law.
10. Children
The app is intended for fleet operators and is not directed at children. It is intended for users who are at least 18 years old, and we do not knowingly collect data from children under 18 through the app.
If you believe a child has provided us with personal data, email info@trophytechs.com and we will review and delete it where appropriate.
11. Changes to this policy
We may update this policy as the app or applicable law changes. When we make a material change, we will update the "Last updated" date at the top of this page and, where the change is significant, notify you in the app before it takes effect where appropriate.
The version that applied while your account was open may be available on request.
12. Contact us
Questions about this policy, or about your data, can be sent to:
Privacy team — Trophy Technologies
10 Street, Amreya 1, 5255410
Alexandria, Egypt
Email:
info@trophytechs.com
Our data protection contact can be reached at the same email address. If you are in the EEA or the UK and are unhappy with our response, you may complain to your local supervisory authority where applicable.