ROADSIDE FST — PRIVACY & SUPPORT

Updated 17 October 2026

Operator: Shin Eun Gu
Company: AffendySense
Support and privacy contact: ss2299.shin@gmail.com
Public policy: https://roadside-assistant-kuwyhqjboq-as.a.run.app/privacy

FST Staff is a work app for authorized dispatch managers and roadside field service teams. Your operator provides your account. Managers monitor and dispatch requests; field teams perform assigned jobs. Customers request help on the website; the Android app does not offer account sign-up.

DATA USED FOR YOUR WORK

The app sends your email and password to the server you select for sign-in. It stores an encrypted session, not your password. It accesses assigned customer and vehicle details, contact details, locations, job status, service reports and photos so you can provide roadside assistance. Job actions and report submissions are recorded by the server.

LOCATION SHARING

Location is collected throughout your duty, including before acceptance, while travelling and during service. Dispatch managers can see the latest on-duty position. Customers can see job location only while the job is accepted, en-route or arrived; they cannot see the separate operations-only duty position. The service stores the latest positions, not a route history. Off duty stops collection and removes the operations-only position. Disabling an account or changing its role also removes that position.

Sharing continues while another app is open or the screen is locked. Android shows a foreground-service notification. Background location permission on Android and Always permission on iPhone help the app recover after a system termination or restart, subject to operating-system limits. Recovery first verifies the current account and duty. User force-stop, revoked permissions, a powered-off device and operating-system restrictions can prevent updates. You can manage location permission in device settings.

An unassigned Available team goes Off duty after 15 minutes without authenticated server contact. Assigned jobs keep their existing timeout exception. Opening the app or reconnecting does not restore an expired duty: choose Start duty. Loss of GPS signal alone does not end duty while server contact continues. A position older than 90 seconds is marked as old. Old offline measurements are never replayed.

PHOTOS AND REPORTS

Only photos you capture or select are processed. The app compresses them for job evidence and can hold an encrypted copy until upload succeeds. Report drafts and job snapshots are also stored on the device to help recover interrupted work. Unsent photos can be removed in the job screen. Signing out does not erase saved drafts or unsent photos; signing in as the same team allows recovery. Removing the app removes its private local data but does not delete records already held by the server. Temporary camera files may remain in the app's private cache until Android clears it or the app is removed.

RETAINED HISTORICAL REPORTS

The in-app feedback center has been removed. Previously submitted reports, account identity, device or browser details, screenshots, comments and progress history remain stored by the operator. They are no longer accessible through the website. Contact the support address below for corrections or deletion requests.

NOTIFICATIONS AND SERVICE PROVIDERS

Firebase Cloud Messaging processes an app installation identifier and push token to deliver operations notifications. The operator's server associates the push token with your signed-in manager or field-team account. Manager notifications cover new requests and request status changes; field-team notifications cover assignments. They may contain the request number and status but do not contain customer name, contact details, location or tracking capability. The hosted service uses Google Cloud to process and store operational data. Requests may generate security and operational logs, including IP addresses and request metadata.

Choosing Directions opens Google Maps with the job destination. Choosing Call customer opens your dialer with the customer's phone number; you decide whether to place the call. Those apps handle the information under their own policies. FST Staff does not include advertising or an analytics SDK.

MAPS, PROFILES AND PAYMENT

Embedded maps load road tiles from OpenStreetMap. The map provider receives your IP address, the requested map area and the application origin. Names, account details, exact marker coordinates and private tracking tokens are not included in tile requests. The customer pickup and assigned team markers are drawn on your device. Map data is provided by OpenStreetMap contributors.

You can view your account email and role and edit your display name and mobile number. Field-team profile changes also update your work contact details. Firebase Authentication processes account emails and passwords for sign-in, password recovery and email verification. Password recovery records a request for managers and Firebase sends a single-use reset link. A manager can also verify your identity and issue a private Firebase reset link. Account roles, profiles and service records remain in the operator’s application database. Passwords are stored as hashes, and a completed password reset revokes existing sessions and push registrations.

Managers may upload a bank or merchant QR image, send a quote and manually record receipt of payment. The service stores quoted amounts, the applicable QR image, confirmation references and staff audit records. It does not process bank transfers or verify payment automatically. Accident assistance is charged to the workshop rather than the customer; dispatch records the workshop's acceptance. Payment and workshop records are retained with the job.

ACCESS, STORAGE AND RETENTION

Authorized dispatch managers and assigned field teams access work records according to their roles. The customer tracking link grants access to the customer-visible job details and should not be shared casually. Connections to the production service use HTTPS. Cached sessions, reports, job data and queued uploads are encrypted in app-private storage and excluded from Android backup.

After a customer submits a web request or opens its private tracking link, the website stores that request capability in a secure, HttpOnly same-site cookie on the device. This lets the home page offer a return to the current request without exposing the private token in the home page. Active requests are remembered for 30 days; completed, cancelled or failed requests are remembered until seven days after closure. Choosing Remove from this device deletes the cookie but does not delete the server record or invalidate a separately saved tracking link.

Uploaded business records, reports and photos currently remain on the operator's server until the operator deletes them; there is no automatic expiry for these records. Session, notification, push and diagnostic data have separate operational lifetimes. Do not assume that signing out, closing a job or uninstalling the app deletes server records.

YOUR CHOICES AND SUPPORT

You can sign in without location access. Location permission is required to choose Start duty. Notification permission is separate. You can revoke permissions in Android settings. For account access, corrections, account closure, data deletion or questions about retention, contact AffendySense (operator: Shin Eun Gu) at ss2299.shin@gmail.com. You may also contact the dispatch manager who issued your FST Staff account. Include your account email and enough information to identify the request; do not send your password. Account disabling stops access but does not itself erase job records. The operator must review deletion requests and any records it needs to retain. Confirm the trusted server address with your operator before signing in.