The data path, in plain language.

1. Scope and operator

This Privacy Policy applies to the Trucker English iOS app, available Android versions, its account, purchase, and AI services, and these support pages. Trucker English is operated by INTERSTATE LOGISTICS SERVICES INC ("Trucker English," "we," "us," or "our").

Trucker English is English-language training for adult commercial drivers. Free lessons can be used without an account. Sign-in is required before claiming the AI trial, purchase, restoration, online AI, or account management: Apple on iOS, or Google where offered on Android. Platform features are available only when shown in your installed version. Apple and Google identities are separate and are not merged by email. The renamed app keeps the same account service and stable technical identifiers used by earlier builds.

2. Information Trucker English handles

On-device learning data

Your interface language and course progress are stored locally on the device. They are not currently copied into your Trucker English account or synchronized across devices. Deleting or resetting the app may remove that progress.

Optional on-device voice input

Tapping the microphone requests the device microphone and any required speech recognition permissions. For English, Mandarin Chinese, or Spanish input, the app checks whether the selected language supports on-device recognition and requires that mode. If it is unavailable, use the keyboard; the app does not fall back to cloud transcription. Capture stops within 30 seconds, when you stop it, leave the tool, or background the app. We do not save an audio file or send microphone audio to our server or DeepSeek. Speak only your own words while safely parked, not another person or a private conversation.

Transcribed text appears in the editable input. Recording does not send a message. Only your Send action, with the applicable AI-sharing permission, sends the reviewed text for that tool. You may revoke microphone and speech permissions in device settings.

Saved practice sentences and self-rated review

Only when you choose Save does the app store a suggested English sentence, its support-language translation, explanation, scenario, and review dates and counts on this device. Up to 50 items are separated by a hashed account key; signed-out users do not load another account's list. The list uses local storage without additional app-level encryption and is not automatically copied to our database or the model. Do not save sensitive information. Signing out does not erase it; operating-system backups may include local app data under your device settings.

Reviewing or self-rating a saved sentence locally does not call AI. Choosing to practice it in an online conversation includes that selected English sentence as limited practice context only after the normal Send and AI-permission checks. Review intervals reflect your own practice choices, not a proficiency assessment.

Work communication preparation

In the unified assistant, optional trip notes you enter, such as origin, destination or cargo, are sent with the selected exercise and session progress after you send and consent. They remain in the current app session unless you explicitly save or share an expression containing them. We do not read GPS location, transport documents or contacts to fill these notes.

Times, counts and door numbers entered in the separate offline work preparation form a temporary local template. This page does not save those inputs or automatically send them to our server or a model. Blank fields remain unconfirmed. Choosing Copy places the English message on the system clipboard, which follows your device settings. If you bring the sentence into coaching, the selected English sentence is included only after Send and the usual AI-sharing permission.

Practice activity and optional value feedback

After a valid AI coaching reply or a successful save or review, the app records an event identifier, time, support language, scenario, feedback category or self-rating, and an optional practice task and step identifier, with whether the reference answer was opened during that attempt when known. Weekly comparisons group attempts by task, step and support language; they do not establish that an answer was never seen before. This activity contains no conversation text, recordings, shipment details, or location. It measures practice activity, not English proficiency or a completed real-world delivery. Task examples are fictional; chosen practice sentences are sent only through the normal coaching permission and Send flow.

You can separately volunteer structured feedback about which tools you used, whether they helped, interest in continuing, and a reason for hesitation. There is no free-text field. Feedback and activity stay in local storage under separate hashed account keys, without additional app-level encryption or automatic upload. Feedback is a self-report, not proof of a paid renewal. To share feedback or an aggregate activity summary, preview it and explicitly open the system share sheet; the recipient and system handle that copy under their own policies. Local deletion cannot recall shared copies. Operating-system backups may include these records.

On-device repair notes and help cards

The free breakdown tools let you select a fault and service type, prepare a bilingual help card, and manually record a provider name, quoted cost, estimated arrival time, approval limit, or work-order reference. Saving a note stores these details and its creation time on the current device, up to 20 notes. The app does not automatically send these notes to our account database, an AI model, or a repair provider.

Repair notes use local storage without additional app-level encryption. Signed-in notes are separated by a hashed account key; guest notes share a separate space on that device. Signing out does not erase saved notes. Do not enter payment details, identity documents, or other sensitive information, and clear guest notes before sharing the device. Device backups may include local app data depending on your operating-system settings; we do not provide repair-note cloud synchronization.

City or ZIP, road, direction, exit or mile marker, and parking details entered for a help card are held in the current screen, not saved as repair-note fields. After reviewing the card, you may explicitly copy it to the system clipboard or use the system share sheet. The card includes the location details you entered. Clipboard and sharing behavior, including any cross-device clipboard feature, follows your system settings. Selected recipients handle shared copies under their own policies; deleting a local note cannot recall those copies.

Sign in with Apple and membership account

When you sign in, the app gives Apple a SHA-256 commitment to a random nonce, then sends the Apple identity token, one-time authorization code and original nonce to the Trucker English service. We verify the identity and exchange the code with Apple; we do not store the raw identity token, authorization code or nonce. We store the resulting refresh token encrypted, linked to your account, so we can revoke Apple authorization when you delete that account. A keyed hash of the nonce is held as a short-lived replay-prevention record; it stops authorizing a login after 20 minutes and is removed by subsequent security cleanup. We also store an internal account identifier, a stable Apple-linked identifier in protected hashed form, an app account token used to bind an Apple purchase to the correct Trucker English account, and account timestamps. The app does not request, send, or store your Apple email address, name or password. Apple authorization credentials are not sent to an AI provider.

Session data

After sign-in, the app holds an opaque session token in device secure storage. The server stores only a SHA-256 hash of that token, its account association, creation time, expiration, and revocation state. A normal session expires after 30 days and can be revoked earlier by signing out or deleting the account.

Apple purchase and entitlement data

Apple processes payment through your Apple Account. Trucker English receives the product identifier, purchase status, dates, environment, and Apple-signed transaction or notification data needed to confirm access. We do not receive or store your full credit-card or debit-card number.

Raw Apple transaction JWS values are verified and not saved. We store hashed transaction identifiers, the selected product, entitlement status and expiration, the app account token binding, and notification identifiers needed to prevent duplicate processing and keep renewals, expirations, refunds, and revocations in sync.

For each non-renewing pass, a separate security record stores keyed hashes of the transaction, original transaction, and available purchase-owner token, the product, Apple-verified purchase time, service start and expiration, refund or revocation status, latest Apple-signed time, and retention timestamp. A separate account binding links that transaction hash and store environment to your account. Deleting the account removes the binding, but not the retained security record. Purchase and restore checks also request the current transaction from Apple; restoring does not create a new purchase period.

Driver Miles

If you use daily training rewards, the service stores your account-linked Driver Miles balance, lifetime earned total, UTC claim date, streak count, and non-paid reward redemptions. A completed claim includes the course card identifier used to prevent duplicate claims. Driver Miles have no cash value and cannot buy, extend, or replace paid membership on either store.

Support messages

If you contact support, we receive your email address, message, and anything you choose to attach, such as a screenshot, operating-system version, request ID, or TestFlight build number. Do not send a payment-card number, password, Apple token, or transaction JWS.

3. AI text, selected vehicle photos, and usage controls

After assistant-chat permission, the unified assistant sends your current text, reviewed voice transcript, up to 11 recent messages, optional trip notes, selected practice and session progress through Vercel or AI Gateway to DeepSeek to generate replies. Chat bodies remain only in the current app session and are not persisted in the membership database. Withdraw assistant-chat permission in Profile. Every vehicle photo still requires separate confirmation.

With your assistant-chat permission, speaking-practice replies, including hints and final reviews, receive an additional consistency check by DeepSeek through our Vercel-hosted server. This sends the submitted driver statements, optional trip notes, recent conversation, current question and answer, and proposed questions, translations, answers and feedback. We do not attach account details, payment credentials or photos; information you type remains part of the submitted text. You must explicitly agree to the assistant disclosure before any assistant request is sent.

Each check and necessary retry counts toward AI usage and requires a fresh access and quota check. Checks do not verify real documents or guarantee accuracy. We do not persist conversation bodies in the membership database; application check logs record issue categories and model usage without private text. Vercel and DeepSeek may retain processing or safety records under their own terms and configuration. We do not promise zero retention by these providers.

The assistant supports multi-turn practice, alternative ways to ask a question, three reference-answer lengths, and feedback. Other available AI purposes include course practice, parked roadside-stop language help, and parked breakdown help. For a practice role-play, we send the selected scenario, translation language, exercise instructions, and up to the ten most recent text messages needed to continue the practice and, when you choose to re-practice one, a saved English sentence. Feedback evaluates the supplied text, not voice pronunciation. For a course-library question, we send your question and relevant lesson excerpts. For roadside-stop help, we send the language, selected intent, and text you type or review after transcription. The understanding mode accepts only English you deliberately type or paste from another speaker for preparation or later review; it does not record or transcribe that speaker. This expanded purpose requires renewed roadside-text permission on the device. For breakdown help, we send your language and submitted vehicle description. A configured DeepSeek model processes this data, directly or through a Vercel AI Gateway route restricted to DeepSeek.

The app asks for explicit, purpose-specific permission before the first text send for each AI tool. Choosing not to send makes no request and does not affect offline lessons, offline roadside phrases, videos, on-device speech, or local progress. Each choice is versioned and stored only on the device for the signed-in account. It can be withdrawn in Profile → AI Data Sharing; the next online attempt for that purpose asks again before sending anything.

Photo analysis uses the DeepSeek image model when enabled on the service. It requires separate, purpose-specific consent. Only a photo you deliberately select or capture is prepared as a smaller upload and sent with the optional description to DeepSeek through our Vercel backend. The app re-encodes the image and the server strips JPEG metadata. Selecting a photo alone does not upload it. An accepted analysis request reserves use from the same account AI quota, even if the provider later fails; expired trials without membership are rejected before image processing or quota reservation. Do not photograph or submit people, police officers, licenses, permits, medical information, payment information, VINs, license plates, or other identifying documents. Trucker English does not save the photo in its membership database. If photo analysis is unavailable or you refuse it, typed and offline breakdown guidance remains available.

Trucker English does not write AI prompt, conversation, or image bodies to its membership database. AI providers may process request data and limited operational records under the provider configuration and terms applicable to Trucker English. Do not include private, confidential, legally privileged, medical, financial, or other sensitive information in an AI request.

Account-linked AI usage counters and a separate keyed-hash security counter enforce fair-use, safety, reliability, and cost limits. The security counter prevents account deletion and recreation from immediately resetting the allowance. Neither counter contains conversation text.

Repair search opens Apple Maps on iOS or Google Maps on Android only after confirmation, sending the displayed service query and an optional city or ZIP code you enter. The app does not request GPS location. The selected map service may use location under its own settings. The search is not sent to the AI model; location goes to AI only if you separately include it in an AI request and consent to that request.

4. Technical and security data

Trucker English and its infrastructure providers may process request time, IP address, network or device information, route, request ID, outcome, HTTP status, AI provider name, latency, and error category to operate and secure the service. Our structured application logs are designed not to contain AI message text, raw tokens, raw JWS values, payment-card data, or direct account identifiers. We do not copy those structured logs into the Trucker English membership database; Vercel platform log retention follows the deployment plan and configuration.

Trucker English does not include third-party advertising SDKs or third-party behavioral analytics. We do not sell personal information or share it for targeted or cross-context behavioral advertising.

5. Why information is used

• authenticate the account and protect its sessions;
• bind an Apple or Google Play purchase to the correct Trucker English account and synchronize entitlement changes;
• restore access on another signed-in device;
• provide requested AI during an active account trial or paid membership;
• issue and redeem non-paid Driver Miles rewards;
• enforce fair-use, fraud, security, reliability, and cost controls;
• respond to support requests and diagnose failures; and
• meet applicable legal and recordkeeping obligations.

6. Service providers and disclosures

Information is disclosed only as needed to:

• Apple, for Sign in with Apple, TestFlight, App Store purchase processing, subscription management, and subscription status;
• Google, where offered on Android, for sign-in, Google Play payments, purchase verification, subscription management and refund status;
• Vercel, for application hosting, request delivery, security, and—when configured—AI routing;
• Neon, which hosts the Trucker English PostgreSQL account, entitlement, reward, and atomic AI usage database;
• Upstash, when configured, which receives an optional copy of non-content AI usage counters for operational monitoring; PostgreSQL remains the access-control authority;
• DeepSeek, which processes the limited AI text and, only when photo analysis is enabled and separately authorized, the selected vehicle image described above, directly or through the restricted Vercel AI Gateway route;
• Apple Maps or Google Maps, depending on your platform, which receives the displayed service search and optional city or ZIP when you confirm opening that search; and
• authorities, advisers, or a business successor when required by law or reasonably needed to protect rights, safety, security, prevent fraud, or complete a lawful business transaction.

Vercel, Neon, and Upstash when configured provide services under the data-processing terms applicable to Trucker English. Those terms limit their use of information to authorized service purposes and require confidentiality and security safeguards. DeepSeek's processing and retention remain subject to its separate terms and the configuration described in this policy. Apple, Google, the selected map service, and services you choose to open operate under their own privacy notices and settings. These arrangements do not mean that every provider offers the same protections.

These providers may process information in the United States and other places where they operate, subject to their service terms and applicable law.

Independent repair websites, calls, and recipients

The breakdown tool also offers links to independent repair directories and service websites. These are external destinations, not Trucker English processors, partners, or dispatched services. Opening a link requires confirmation and lets that website receive ordinary connection information, such as your IP address and browser information, under its own terms and privacy policy. We do not automatically attach your help card or repair notes to these links, submit a repair request, or book a service.

Confirming a phone action opens the system phone interface. Your carrier and the called service may process call information, including your caller ID under your phone settings. Trucker English does not record the call. Information you then tell a provider, enter on its website, or send using the share sheet is handled by that recipient, not automatically collected by Trucker English. Verify the recipient before disclosing location or payment information.

7. Retention and account deletion

• Device-only language and progress remain until you clear or delete the app.
• Repair notes remain until you delete a note, clear the current repair-note space, delete the corresponding account from this device, or delete the app. Account deletion clears that account's repair notes on the current device, not guest notes, another account's notes, copies on other devices, operating-system backups, or copies you shared.
• Saved practice sentences remain until you delete one, clear the current account's review list, delete that account from this device, or delete the app. Account deletion clears the corresponding review list on this device, not another account's list, another device, or operating-system backups. A local deletion failure is reported in the app.
• Practice activity keeps up to 2,000 events from the last 90 days. Optional feedback keeps up to 14 daily entries from the last 30 days. Older records are pruned when that account's corresponding local store is next accessed; no background deletion timer runs while the app is closed. You can clear either list in My progress. Successful in-app account deletion also attempts to clear both lists for that account on this device and reports a local deletion failure. Signing out alone does not erase them. Copies on other devices, backups, and copies you shared must be managed separately.
• Active account and entitlement records remain while the account is open. Normal sessions expire after 30 days; sign-out and deletion revoke them earlier.
• Apple refresh tokens remain encrypted while the account is open and are deleted with the account after Apple revocation succeeds. Older accounts without a saved credential may need Apple reauthentication. If revocation fails, deletion is not completed and the account is kept so you can retry.
• A keyed hash of a used Apple sign-in nonce stops authorizing another login after 20 minutes and is removed during a later security cleanup.
• Keyed-hash AI quota security counters remain eligible for cleanup at least 48 hours after use. They contain counts and character totals, not prompts or responses.
• Keyed hashes and lifecycle status for an Apple subscription remain eligible for cleanup 90 days after the later of the applicable subscription expiration or the security event. This prevents an older transaction from restoring access after a refund, revocation, or newer expiration state.
• Non-renewing pass security records survive account deletion without a direct account link. Their retention timestamp is at least 90 days after the later of pass expiration or the latest security processing. That timestamp marks eligibility for cleanup, not automatic deletion. Automated cleanup of these pass security records is not currently implemented; they remain stored unless separately removed through a controlled retention process. The account binding is removed when the account is deleted.
• Trucker English does not intentionally retain AI conversation or photo bodies in its membership database. Provider and platform logs follow the configured provider retention settings.
• Driver Miles balances, daily claims, ledger entries, and non-paid reward redemptions remain while the account is open and are removed with the account, subject to limited security or legal retention described below.
• Support messages and limited security, transaction, and audit records may be retained only as reasonably needed to resolve the request, prevent duplicate Apple notification processing, prevent fraud, address disputes, or meet legal and financial recordkeeping requirements. The current notification audit record may include Apple’s notification UUID, event type, environment, result, and keyed transaction hashes, but not a raw transaction JWS or raw transaction identifier.

The in-app deletion action revokes sessions and deletes or de-identifies the Trucker English identity, membership and reward association, and account-linked AI usage records. The limited keyed-hash replay, purchase-lifecycle, and quota records described above remain under their stated retention conditions for security and fraud prevention and cannot be used to identify an active Trucker English account by themselves. For an Apple-linked account, deletion first revokes Sign in with Apple authorization; if this cannot be completed, the app reports failure and keeps the account for a retry. Deletion does not erase either store’s purchase history or cancel Apple or Google Play subscriptions. Google-linked app deletion removes the Trucker English account; it does not delete your Google Account or revoke access to other Google services. The limited Apple notification audit records described above and other limited records may remain where retention is required to address support, duplicate processing, disputes, financial recordkeeping, security, fraud prevention, or law.

8. Your choices

• Use free lessons without creating an account.
• Sign out to revoke the current Trucker English session on the server and remove it from the device.
• Review, refuse, or withdraw each AI text- or image-sharing permission at any time in Profile → AI Data Sharing. Refusing or withdrawing does not affect offline lessons, videos, on-device speech, or local progress.
• Delete the Trucker English account from Profile using the confirmed account-deletion action.
• Separately manage or cancel a subscription through your Apple Account or Google Play subscription settings.
• Separately stop using Sign in with Apple for Trucker English in your Apple Account settings. See Apple’s Sign in with Apple instructions.
• Stop dictation using the microphone button, use the keyboard, and manage microphone and speech permissions in device settings. Delete one saved practice sentence or clear the current list from the English practice review panel. Clear practice activity or optional feedback separately in My progress.
• In the breakdown tool, delete an individual repair note or clear all notes in the current account or guest space. Delete the app to remove its local language, learning progress, and repair notes. Manage any device backups and shared copies separately.
• Contact us about access, deletion, correction, or another privacy request. We may need to verify the request before acting on it.

See Support for step-by-step deletion, cancellation, restoration, and refund information.

9. Security

Trucker English uses measures designed to reduce unauthorized access, including platform identity verification, encrypted Apple refresh tokens and Google purchase tokens, opaque sessions stored as server-side hashes, store purchase verification, account-to-purchase binding, restricted provider credentials, and distributed usage controls. No system or transmission is completely secure.

10. Children

Trucker English is intended for adults and is not directed to children under 13. If you believe a child submitted personal information, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this policy as Trucker English, its providers, or legal requirements change. The date above identifies the current version. Material changes will be communicated through the app, this page, or another appropriate channel.

12. Contact us

Privacy requests and questions may be sent to INTERSTATE LOGISTICS SERVICES INC. Include the request type and, if relevant, the Trucker English request ID shown by the app. Do not email a password, card number, identity token, session token, or JWS.