Privacy policy

Last updated: October 27, 2026

This policy is written in plain language. It explains what PathPilot collects, why, who we share it with, and how you can delete your account and data.

Who we are

PathPilot is a task and route planning app for drivers and field workers. It includes the PathPilot mobile app and the website at pathpilottm.com. PathPilot is run by hTech Web LLC (“we”, “us”). If you have a question about your data, email us at support@pathpilottm.com.

What we collect

• Account details: your email address, your name and your timezone.
• Your password: stored only as a secure hash (bcrypt). We never store or see your password in plain text.
• Tasks: the tasks you create, their notes, categories and whether they are done.
• Locations and stop addresses: the places you save, with their addresses and map coordinates.
• Information companies add about their customers: the addresses, contact phone numbers and delivery notes that a company enters for its stops.
• Runs, templates and run history: the runs and templates you build, the order of stops, and the status and time of each stop when you complete a run.
• Route data: the routes we calculate for your runs, including a starting point if you choose to start from where you are.
• Device location during a run: see “How we use your location” below.
• Push notification token: a code from your phone that lets us send you notifications.
• Notification preferences: for example, whether you want a daily digest and at what time.
• Sign-in sessions: a session cookie, plus the IP address and device or browser type for each signed-in session, so you can see and sign out your devices and so we can keep your account secure.
• Security and activity logs: records of events such as sign-ins and sign-ups, used to detect abuse and fix problems.
• Billing records: your plan, subscription status and invoices. Card and bank details are handled by the payment provider, not by us.

How we use your location

• We use your device location only while a run is active.
• In the foreground, we use it to show where you are on the map and to give turn-by-turn directions.
• In the background (when the app is closed, the screen is off or you are using another app), we use it for arrival alerts when you reach a stop, and to keep turn-by-turn directions and rerouting working.
• We do not collect your location when no run is active.
• When you build or recalculate a route, your current position may be sent to Mapbox (and through our server) as the starting point. We do not keep a continuous history of your movements.
• When you drive a run for a company on PathPilot, and only while the app is open on your screen during that run, we share your latest location with that company's dispatchers, admins and owner so they can see the run's progress. We keep only your latest position, and we delete it when the run ends, when the run is reassigned, or within 12 hours of when it was recorded. Live positions are not included in our backups. We don't keep a location history. Before your first company run with a company, the app tells you about sharing; if you choose Not now, nothing is shared during that run. To stop sharing at any time, turn off location for PathPilot in your phone's settings; your run keeps working. We never sell your location or use it for advertising.

You can turn location access off at any time in your phone's settings. Runs still work, but arrival alerts, navigation and location sharing with your company will not.

How we use your data

• To run your account and sign you in.
• To save your tasks, locations and runs and keep them in sync between the app and the website.
• To build routes, give directions and alert you when you arrive at a stop.
• To send emails you need: email verification, password reset, daily digests (if you turn them on) and account deletion notices.
• To send push notifications you have allowed.
• To manage your subscription and billing.
• To keep the service secure and to fix problems.

We do not sell your data and we do not use it for advertising.

Information about a company's customers

When a company plans runs on PathPilot, its dispatchers may add details about the places their drivers visit: addresses, a contact phone number for the place, delivery time windows and notes for the driver. We store these for the company and use them only to plan and carry out that company's runs. The company's dispatchers, admins and owner can see them, and so can its drivers, in the app, for the stops on their runs. Drivers can call a stop's phone number from the app; the call is made by their phone, not through PathPilot. The details are kept until the company deletes the location or closes its account. Files imported to add stops are kept for at most 7 days. We never sell this information or use it for advertising.

Companies can save a start address for each driver, such as the driver's home, to plan routes. It is used only for route planning and is visible only to the company's owners and admins.

Who we share it with

We share only what each service needs to do its job for us:

• Your company — if you drive runs for a company, its dispatchers, admins and owner see your latest location during those runs while the app is open (see “How we use your location”).
• Mapbox — maps, address lookup, route planning and turn-by-turn navigation. Receives addresses, stop coordinates and route requests.
• PayPal and Stripe — subscription payments. They handle your card or account details; we do not store them.
• Email delivery (Google Workspace SMTP relay) — sends verification, password reset, digest and account emails.
• Expo push service — delivers push notifications to your phone.
• Our hosting provider — the server where PathPilot and its database run.

We may also disclose data if the law requires it. We never sell your data and never share it for advertising.

Push notifications

If you allow notifications, we store your phone's push token to send you arrival alerts, reminders and a daily digest if you turn it on. You can turn notifications off in the app or in your phone's settings. Signing out of the app removes that phone's push token, and deleting your account removes them all.

Payments

Paid plans are billed through PayPal or Stripe. The payment provider processes your card or account details under its own privacy policy. We keep your plan, subscription status and invoices.

How long we keep data

• We keep your account data while your account is open.
• Sign-in sessions expire after 30 days, or 90 days if you choose “remember me”.
• Your latest location on a company run is deleted when the run ends, when the run is reassigned, or within 12 hours of when it was recorded. It is not included in our backups.
• When you delete your account, we permanently delete your data 30 days later (see below).
• Invoices are kept after deletion for legal and financial records, with the link to you removed.

Deleting your account

You can delete your PathPilot account and its data at any time. You do not need the app to do it.

• On the website: sign in at pathpilottm.com, go to Profile, then Delete account.
• Company drivers: sign in at pathpilottm.com with Sign in with company login (your company code and username), go to Profile, then Delete account. You can also ask your company, or write to support@pathpilottm.com.
• In the app: go to Settings, then Delete account.
• By email: write to support@pathpilottm.com from the email address on your account and ask us to delete it.

What happens next:

• You confirm with your password.
• Your account is locked straight away and you are signed out on every device. Your push tokens are removed.
• Any active subscription is cancelled, so you are not charged again.
• We email you the date your account will be deleted.
• You have 30 days to change your mind. To restore your account, just sign in and choose Restore.
• After 30 days we permanently delete your account and its data: your profile, tasks, locations, runs, templates, run history, routes, push tokens, sessions, notification settings, billing records linked to you, and your activity logs.
• We send a final email to confirm that your account has been deleted.
• If you belong to a company, the runs you did for it stay with the company without your name. They show as “Former driver”.
• Invoices are kept for legal and financial records, with your personal link removed.

Security

We protect your data with encrypted connections (HTTPS), hashed passwords, secure session cookies and limited access to our servers. No system is perfectly secure, but we work to keep your data safe and will act quickly if something goes wrong.

Children

PathPilot is a work tool and is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change is significant, we will also let you know by email or in the app.

Contact