🛡️ Privacy Policy

1. Data Controller

Mega-Ique Digital UG (haftungsbeschränkt)
Habenhauser Landstraße 246, 28279 Bremen, Germany
Phone: +49 176 35778820
Email: info@megaique.de
Website: www.megaique.de
Represented by: Eric Gomdjim Kuitche (CEO)

2. Scope

This Privacy Policy applies to the website www.megaique.de
and to the mobile, web, and desktop application MegaTransit Fleet,
developed and operated by Mega-Ique Digital UG (haftungsbeschränkt).

MegaTransit Fleet is a cross-platform solution (Android, iOS, Web, and Desktop)
designed for real-time fleet management and vehicle tracking, primarily serving businesses
and operators in Cameroon and across the African market.

3. Data Collected and Purpose

Data Category	Purpose	Legal Basis
User account data (name, email, encrypted password)	Account creation and access management	Performance of contract (Art. 6(1)(b) GDPR)
2FA / TOTP data	Enhanced login security	Legitimate interest
GPS / location data	Real-time vehicle tracking	Contract / Consent
Vehicle data (speed, routes, fuel consumption)	Fleet analytics, reports, and alerts	Performance of contract
Push notification tokens	Alerts, safety, and system notifications	Consent
System logs and telemetry	Security monitoring and troubleshooting	Legitimate interest

4. Security Measures

AES-256 encryption for sensitive data;
Secure communication via HTTPS / TLS;
Brute-force protection with Redis rate limiting;
Session revocation using JWT blacklist;
Two-factor authentication (2FA / TOTP);
Role-based access control (RBAC);
Regular backend security audits (FastAPI environment).

5. Hosting and Backend

The MegaTransit Fleet backend is developed with FastAPI
and hosted on secure European servers.
All data is processed within the European Union or in countries with
an adequate level of data protection (Article 45 GDPR).
All technical service providers (hosting, cloud, notifications, etc.)
are bound by data processing agreements in compliance with Article 28 GDPR.

6. Usage Data

When using the MegaTransit Fleet application, the following data may be processed:

IP address, technical identifiers, and access logs;
GPS data (location, route, speed);
Push notifications (if enabled by the user);
Device and system information (OS version, model, errors).

This data is used exclusively to ensure security, stability, and proper functionality of the service.

7. Data Retention and Deletion

Personal data is stored only as long as necessary for the stated purposes or as required by law.
Users may request deletion of their accounts and related data at any time
by contacting info@megaique.de.

8. Data Disclosure to Third Parties

Your data will not be sold or transferred to third parties, except in the following cases:

Legal or regulatory obligations;
Required for contractual performance (e.g., hosting or technical providers);
Explicit consent from the user.

All partners are contractually obligated to comply with the GDPR and the
Cameroonian law N° 2010/012 of December 21, 2010 on the protection of personal data.

9. User Rights

Right of access to your data;
Right to rectification or deletion;
Right to restrict processing;
Right to data portability;
Right to object to data processing;
Right to withdraw consent at any time.

To exercise your rights, please contact: info@megaique.de.

10. Right to Lodge a Complaint

Users have the right to lodge a complaint with the competent data protection authority in Germany
(Landesbeauftragte für Datenschutz Niedersachsen) or
with their local data protection authority, such as the
National Agency for Data Protection (ANPD) in Cameroon.

11. Policy Updates

This Privacy Policy may be updated from time to time to reflect legal or technical changes.
The most recent version is always available at
www.megaique.de/datenschutz.

Privacy Policy – MegaTransit Fleet