Privacy policy
UB Trax (“we”) provides vehicle tracking for private car owners and fleets — in the United Arab Emirates and in the other countries where we operate — through a tracking device fitted to the vehicle, the UB Trax app for Android and iOS, and the portal at track.ubtrax.com. This policy explains what we collect, why, and what you can ask of us. Last updated 7 October 2026.
What we collect
- Account: your name, email address, phone number and language, and a password that we store only as a salted hash.
- Vehicle: plate number, make and model, and any documents (registration, insurance) you choose to record with their expiry dates.
- Tracker data: the vehicle’s position, speed, heading, ignition state and tracker status, reported by the device over the mobile network — typically every few seconds while the vehicle moves — and what we derive from it: trips, stops, zone entries and exits, speeding, idling, towing, crash and unplug alarms.
- Car readings: if your tracker is the kind that reads the car through its diagnostic socket, what the car’s own computer reports: fuel level, mileage, engine fault codes and battery voltage. They arrive with the tracker data above and are kept with it.
- Your settings: the zones you draw and the alerts you switch on or off.
- App: the push-notification token Firebase assigns to your phone, so we can send alerts; crash reports and basic usage statistics (Firebase Crashlytics and Analytics) so we can keep the app working.
- Payments: when you renew on our website, the amount, the date and what it paid for. Your card details go straight to our payment provider; we never see or store your card number.
- Company accounts: the company’s name, its trade licence number and expiry date, its tax registration number if given, and the papers it sends us to register — its trade licence, and a tax certificate or an identity document of its owner or manager if it chooses to add them.
- Technical: the IP address, app or browser version and time of each request, in server logs.
We do not collect your phone’s location. The locations we hold are the vehicle’s, from the tracker.
Why
To show you where your vehicle is and has been; to send the alerts you ask for; to remind you about expiring documents and subscriptions; to support you; and to keep the service secure and working. We process this data to perform our contract with you and in our legitimate interest in running the service securely.
Who sees it
You, and for fleet accounts the users your organisation adds. Our support staff cannot see where your vehicle is. Their tools show your account, your vehicle’s details and your subscription — not its location and not its trips. For a company account they also see the papers the company registered with, to check that it is a registered business. The service itself reads the location, to show it to you and to send the alerts you asked for. A system administrator maintaining our servers could technically reach it, and does so only when that is needed to fix a fault. We share data with the companies that run the service for us: Hetzner Online GmbH (hosting; servers that may be outside your country), Google LLC (Firebase push notifications and crash reports), Stripe (card payments, when you pay on our website), Resend (the emails we send you: confirming your address, a new password, renewal reminders), and the map providers OpenFreeMap and MapTiler, which receive your IP address and the map area you view. We never sell personal data. We disclose it only where the law requires.
How long
Position history is kept for the life of the subscription and deleted within 12 months after it ends — or at once, when you delete your account. Account and vehicle data is kept until you delete the account. After that we keep only the serial number of your tracker and the date it was paid up to, which do not say who you are. A company’s papers are kept until the company’s account is deleted. Backup copies are overwritten within 14 days, and server logs are deleted within 30 days.
Your rights
You can delete your account and its data yourself at any time: in the app or on the website, open Account and choose Delete my account (how, and what is deleted). You can also ask to see, correct or delete your data, or object to how we use it, by emailing support@ubtrax.com. We answer within 30 days. You also have the rights your own country’s data-protection law gives you — in the UAE, Federal Decree-Law No. 45 of 2021, with complaints to the UAE Data Office.
Security
All traffic is encrypted (HTTPS), passwords are stored as salted hashes, sign-ins can be revoked at any time, and the servers sit behind a firewall. The servers may be in a different country from you; using the service means your data is transferred to them.
Children
The service is not directed at anyone under 18.
Changes
We will post changes here and tell you in the app about significant ones.
Contact
UB Trax, Dubai, United Arab Emirates — support@ubtrax.com