Privacy Policy (Astrion App + Hannibal Global Website)

Effective date:
Company: Hannibal Global (“Hannibal Global,” “we,” “us,” “our”)
Website: https://hannibalglobal.com
Astrion backend/API: https://api.hannibalglobal.com
App: Astrion (the “App”)

This Privacy Policy explains how we collect, use, share, and protect information when you use our website or the Astrion mobile application.

1) Who we are

Hannibal Global builds and operates software products, including the Astrion supervised driving application and its cloud services.

2) Scope

This policy applies to:

• The Astrion mobile application and related services (including our API)
• Our website at hannibalglobal.com

If you use third‑party services through Astrion (e.g., Google, Apple, Facebook sign-in), those services also have their own privacy policies.

3) Information we collect (Astrion)

A) Account and identity information

• Account identifiers such as email address and user ID
• Authentication data when you sign in using:
  • Email/password
  • Google Sign‑In
  • Sign in with Apple
  • Facebook Login (if enabled)

We do not store your Apple password, Google password, or Facebook password.

B) Location information (including background location)

Astrion may collect precise location data when you are using the App, and in the background if you enable driving session tracking. This may include:

• GPS coordinates (latitude/longitude)
• Timestamps
• Movement and route information

Why we collect location: to track driving sessions, compute distance/time, estimate speed, support safety/compliance features, and generate driving session history and reports.

C) Speed and driving session telemetry

• Device‑derived speed estimates
• Posted speed limit values (when available)
• Session totals (duration, distance)
• Route telemetry points during a session

D) Safety and compliance events

Astrion may record events during sessions, such as:

• Speed alerts (e.g., when exceeding posted limit thresholds)
• Other safety/compliance markers recorded by the system

E) Destination and map-related inputs

If you use destination search/navigation features, we may process:

• The destination text you enter
• Destination label and coordinates (if set)

F) Photos, camera, and document verification

If you upload or scan documents (e.g., permit/license), we may collect:

• Images you provide (from camera or photo library)
• Extracted fields (such as name, dates, license/permit data) as needed for verification workflows

G) Communications (invites and notifications)

If you invite or link supervisors, we may process:

• Phone number (for SMS invites, if used)
• Email address (for email invites, if used)
• Invite codes and status metadata

H) Purchases and subscription information (if enabled)

If you purchase a subscription through Apple or Google:

• We receive subscription status/receipt verification results from the app stores and our backend
• Payment card details are handled by Apple/Google; we do not receive your full payment card number

I) Device and log data

We may collect technical data such as:

• Device model, OS version, app version
• IP address and timestamps
• Diagnostic logs to troubleshoot reliability and security issues

4) How we use information (Astrion)

We use information to:

• Provide and operate the App and backend services
• Track and display driving sessions, progress, history, and reports
• Support safety/compliance features (e.g., supervisor presence checks, re‑auth prompts, speed alerts)
• Verify documents and manage eligibility workflows where applicable
• Send invites, verification messages, and service communications
• Detect abuse, prevent fraud, and secure accounts
• Maintain, debug, and improve performance and reliability
• Comply with legal obligations and enforce our Terms

5) How we share information

We do not sell your personal information.

We may share information:

• With service providers that help us operate Astrion, such as:
  • Cloud hosting / infrastructure for our backend services
  • Authentication providers (e.g., Firebase Authentication; Google/Apple/Facebook sign‑in)
  • Messaging providers (e.g., SMS and email delivery for invites/verification)
  • App stores (Apple App Store / Google Play) for subscription processing and receipt verification
  • Maps providers for map display and related functions (e.g., Google Maps)
• With a linked supervisor as part of the supervised driving workflow (for example, session oversight signals and relevant session-related information)
• For legal and security reasons (e.g., responding to lawful requests, protecting rights and safety, investigating abuse)

We share only what is reasonably necessary for the purposes described in this policy.

6) Data retention

We retain information for as long as needed to:

• Provide the App and related services
• Maintain driving history and reporting features you use
• Meet legal, accounting, or security requirements

You may request deletion (see “Your rights and choices”). Some records may be retained where required for legal or security purposes.

7) Your rights and choices

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Request an export/copy of your data (where available)
• Opt out of certain communications

Location controls: You can control location permissions through your device settings. Some features may not work without location access, especially driving session tracking and background session recording.
Account deletion requests: Contact us using the Support section below.

8) Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No system can be guaranteed 100% secure, but we work to reduce risk through access controls, secure transport, and operational protections.

9) Children’s privacy

Astrion is intended for supervised driving contexts and may be used by teenagers depending on local laws and driving requirements. We do not knowingly collect personal data from children under 13 (or the age defined by local law) without appropriate consent. If you believe a child has provided personal data without consent, contact us.

10) International users

Your information may be processed and stored in countries other than where you live, including the United States, depending on where our service providers operate. We take steps to protect information in transit and at rest.

11) Website privacy (hannibalglobal.com)

If you use our website, we may collect:

• Cookies and similar technologies for essential site functions and preferences
• Comment data (if commenting is enabled), including IP address and browser user agent for spam prevention
• Embedded content: pages may include embedded media (videos, posts) that behave as if you visited those third‑party sites

If you request a password reset (if accounts are enabled on the website), your IP address may be included in the reset email.
Media uploads: If you upload images to the website, avoid including location metadata (EXIF GPS), as visitors may be able to extract it.

12) Third‑party links and services

Astrion and our website may link to third‑party services. Their privacy practices are governed by their own policies, including (where applicable):

• Apple
• Google
• Facebook/Meta
• Google Maps
• Messaging/email providers used for invites

13) Changes to this policy

We may update this policy from time to time. We will update the “Effective date” and may provide additional notice in the App or on our website when required.

14) Contact / Support

For privacy questions or requests, contact:
Hannibal Global Support
Email: support@hannibalglobal.com
Support URL: https://hannibalglobal.com/support

User Data Deletion instructions: https://hannibalglobal.com/data-deletion