NextDrive Privacy Policy

Certain information we handle is “sensitive personal information” under the CCPA, or is otherwise subject to heightened protection under federal law:

• Social Security number and driver's license number.
• Drug and alcohol testing information, including test results, refusals, return-to-duty status, and Clearinghouse query results. This information receives special protection under 49 C.F.R. § 40.321 and related regulations.
• Health information, limited to medical examiner certification status and related documentation required by federal motor carrier or aviation regulations.
• Precise geolocation, where a product feature you or your employer enables collects it.

We do not use or disclose sensitive personal information for purposes other than those permitted under Cal. Civ. Code § 1798.121(a) — that is, we use it only to perform the Services, to comply with law, and for the limited additional purposes that provision allows. We do not use it to infer characteristics about you.

Drug and alcohol testing information is treated as confidential. We do not release it except with your specific written consent, or as required or expressly permitted by 49 C.F.R. Part 40 and other applicable law. Within the Services, access to this information is technically restricted at the database level to a carrier's Designated Employer Representative (DER) and authorized administrators. Other users of a carrier's account — including human resources personnel, driver administrators, and mechanics — cannot access it.

NextWallet lets you set an optional profile photograph. It is taken with a guided selfie: the app shows an oval on screen and helps you frame your face before the shutter becomes available. The photograph is optional — the app works without one, and you can remove it at any time.

What the app analyses while you frame the shot. While the camera preview is open, each frame is analysed on your device by a face-detection library from Google that ships inside the app. The app reads exactly three values from it: the rectangle where a face is detected, and two head-rotation angles. Those values decide whether the shutter is enabled and which on-screen hint you see, such as “Move closer”.

What the app does not do.The library's facial landmark, facial contour, expression classification and face tracking features are all switched off. The app does not create, store, transmit or compare any faceprint, face template, face embedding or other biometric identifier. It does not use your face to identify or authenticate you, and it does not match your photograph against any database. The preview frames are analysed in memory and are never written to storage or sent anywhere; the analysis stops the moment you take the photograph or leave the screen.

Storage and retention. Only the final photograph is kept. It is stored in our Google Cloud Storage bucket in a folder belonging to your account, as a single image that is overwritten each time you change it. The temporary copies the camera and the cropping tool create on your device are deleted as soon as the photograph is saved, and also if you cancel. We keep the photograph until you replace it, remove it, or delete your account; on account deletion it is deleted with the rest of your data.

It is not part of the record a carrier must keep. When a motor carrier separates you, it retains a snapshot of your Driver Qualification File, because 49 C.F.R. § 391.51 requires it to. That snapshot covers your qualification documents; it does not include your profile photograph or a copy of it. While you are linked to a carrier, that carrier sees your photograph by reading it from your account, so it stops being visible once you remove it or delete your account.

Who can see it. Google, as our infrastructure provider, stores the file on our behalf. If you are linked to a motor carrier, that carrier can see your profile photograph in NextDrive, in the same way it sees your name. We do not sell it, we do not share it for advertising, and we do not use it for analytics, model training or identification. The face-detection library is provided by Google and, like the other Google components in the app, may report anonymous diagnostic and usage data about the library itself; it does not send your images or the measurements taken from them.

Face ID is a separate matter.If you use Face ID or a fingerprint to leave DOT Check Mode, that check is performed entirely by your device's operating system. The app receives only whether the check succeeded. It never receives, stores or transmits your Face ID data, and that data never leaves your device.

Some screens let you speak instead of type. You can dictate the remarks of a vehicle inspection report, or the description of an accident or a traffic citation. You can also say an answer out loud in the English study guide to practise it. All of it is optional — every one of those screens works with the keyboard, and the guide can be read without ever using the microphone.

NextWallet does not record your voice.The app does not capture, write, store or upload audio. It opens the microphone and hands the stream to the speech recogniser built into your phone — Apple's on iOS, Google's on Android. The only thing that comes back to the app is text. There is no audio file, no recording in your account, and no audio in our storage or our databases.

Where the recognition happens.We ask your phone for on-device recognition. On iOS that request is enforced by the system, and if your language cannot be recognised on the device the request fails rather than going to the network on its own. On Android it is a preference the system may ignore: with the offline language pack installed the audio stays on the device, and without it your phone sends it to Google's speech service. That service belongs to your phone's maker, not to us, and we cannot tell you what they do with the audio once it reaches them — their privacy terms govern that, not ours. The written guide works with no signal; the spoken part may not.

What we keep, and what we do not.In a report, the recognised text appears on screen for you to read, and it is added to the field only when you choose to add it. Once added, it is text like any other you typed: it is saved with the report, it forms part of the inspection report's audit hash and of the signed PDF, and we cannot separate it out afterwards or treat it differently. In the study guide, what the recogniser heard is never kept: it is shown next to the model answer and is gone when you leave the screen. It is never saved, never sent to us, and never scored. Your result in the practice quiz is a different matter, and Section 3.5 explains it.

The microphone closes with the screen. The app stops listening when you press stop, when the recogniser finishes, and when you leave the screen. It does not listen in the background, and it does not listen while you are not on one of those screens.

We do not use your voice to identify you. Speech is used to turn what you say into text, and for nothing else. We do not create a voiceprint, we do not match your voice against anything, and we do not use it for analytics, advertising or model training.

NextWallet Pro includes a practice quiz drawn from the English study guide. It is optional, and the guide itself is free: you can read it from beginning to end without ever taking the quiz.

What the score is, and what it is not. The quiz is practice you give yourself. It is not an examination, nobody supervises it, and you may retake it. It does not determine whether you meet the English proficiency requirement of 49 C.F.R. § 391.11(b)(2). The officer or examiner who evaluates you decides that, not this app, and nothing here states or implies that you passed, are qualified, or are certified.

What we keep. For each guide, we keep your five most recent results: how many answers were correct in each part, how many questions each part had, and the date you took it. When a sixth practice replaces the oldest one, that oldest result is deleted. We do not keep your individual answers. It is stored in our database under your account.

We keep those five so you can see whether you are improving, which is the point of practising. Five and not all of them: every stored result is one more piece of information about you that we have to justify and delete, and five already shows the direction.

Who can see it. You. Your carrier sees only your most recent result, not the five. And, if you are linked to a motor carrier, that carrier can see it in NextDrive, in the same way it sees your name. It stops being visible to that carrier when you are no longer linked to it. We do not sell it, we do not share it for advertising, and we do not use it to make decisions about you.

Your carrier may not use it to decide anything about your job. A practice score is a training and coaching signal, and Section 7.1 of this Policy applies to it in full: it is not an employment-screening product, it is not authorized for use as a factor in hiring, termination, promotion, demotion, compensation, or other adverse employment decisions, and carrier customers agree, as a condition of using these features, not to use it for those purposes.

It is not part of the record a carrier must keep. The snapshot of your Driver Qualification File that a carrier retains under 49 C.F.R. § 391.51 covers your qualification documents. Your practice score is not one of them. It does not appear in any export or compliance package the Services generate, and it cannot serve as the written test that supports an English proficiency certification.

Retention and deletion. We keep those five results while your account is active. A sixth practice deletes the oldest, and when you delete your account they are deleted with the rest of your data.

Risk indicators and analytics provided through the Services are informational safety tools intended to help carriers identify training, coaching, and maintenance priorities. They are not employment screening products, and they are not consumer reports. They are not designed, offered, or authorized for use as a factor in hiring, termination, promotion, demotion, compensation, or other adverse employment decisions. Carrier customers agree, as a condition of using these features, not to use them for such purposes. Any employment decision remains the sole responsibility of the carrier and must be based on lawful, job-related criteria and on the underlying records themselves.

This Section applies in full to study-guide practice scores (Section 3.5). A practice score is a self-administered training signal, not a measure of qualification and not a test result: it is unsupervised, it may be retaken, and it is not verified by us. It is subject to every limit in this Section, and it may not be used as a factor in any employment decision.

Human review. Outputs generated by automated or AI-assisted features are suggestions and may contain errors. They must be reviewed by a qualified person before being relied upon. We do not use automated processing to make decisions that produce legal or similarly significant effects concerning you.

We may create aggregated or deidentified information that does not identify you and cannot reasonably be used to re-identify you. We may use and disclose such information for research, benchmarking, industry reporting, and product improvement. Where we maintain deidentified information, we will maintain it in deidentified form, will not attempt to re-identify it except as permitted by law, and will contractually obligate recipients to comply with the same restrictions.

Submit a request by emailing admin@nextdrive.cloud or by calling 619-207-4906. We will verify your identity before responding, which may require you to provide information that matches what we already hold. We will respond within the timeframes the CCPA requires (generally 45 days, extendable by an additional 45 days with notice). You may use an authorized agent, subject to verification.

Federal transportation regulations require that certain records be retained for defined periods. We cannot delete records that we or a carrier are legally required to keep while that obligation remains in effect, and we may decline a deletion request on that basis, as permitted by Cal. Civ. Code § 1798.105(d). We may also decline where an exception under the CCPA applies. If we decline, we will tell you why. Retention periods are described in Section 10.

Employment-related records. Where we process records on behalf of a carrier acting as your employer, we will direct your request to that carrier, which is generally the business responsible for those records.