This policy applies to the VMS Pro web application and to the two Android apps published alongside it: Fuel Pump Manager (com.autonemo.vms.pump) and Autonemo Driver.
These are workplace tools. Accounts are not open to the public — a fleet operator or filling station that subscribes to VMS Pro creates an account for each of its own staff. If you have not been given an account by your employer, there is nothing here for you to sign in to.
Your employer decides what is recorded about you at work and for how long; they are the controller of that data. We host and process it on their instruction, and we do not use it for our own purposes.
What we collect
Account identityName, mobile number, email address where given, staff ID, role, branch and the company you belong to. Your password is stored only as a one-way hash.
Work records you enterThe operational data the app exists to capture: shift open and close, nozzle meter readings, sales and receipts, credit and collections, expenses, cash handovers, wallet balances, fuel entries, trips, attendance and job cards.
Photos you attachFuel Pump Manager opens the camera only when you attach a deposit slip to a cash handover. Autonemo Driver uses it for delivery and expense proofs, and for scanning QR codes. Nothing is captured in the background, and no photo is taken unless you press the button.
Location — Autonemo Driver onlyThe driver app records the vehicle position, including while the app is in the background, so the office can follow an assigned trip and settle mileage. It runs as a visible foreground service with a permanent notification while it is on. Location collection is tied to duty: it belongs to the vehicle and the trip, not to you off shift.
No location in Fuel Pump ManagerThe pump app requests no location permission at all and cannot read your position.
Device and diagnostic dataApp version, device model and Android version for support, and a push notification token when notifications are configured.
What stays on your phone
Your sign-in token is held in the device keystore. Cached lists and your display preferences sit in ordinary app storage.
A pump canopy is exactly where mobile data drops, so a sale that cannot reach the server is written to the phone and sent when the signal returns. Until it is sent it lives only on that phone. Uninstalling the app deletes anything still queued, so let the queue clear before removing the app.
What we do not do
No selling of dataWe do not sell or rent your data to anyone, and we do not share it with data brokers.
No advertisingNeither app contains advertising, ad SDKs or advertising identifiers.
No third-party analytics or tracking profilesWe do not build behavioural profiles and we do not track you across other apps or websites.
No access to your contacts, messages, call log or filesNeither app requests these permissions.
Why we hold it
To run the service your employer subscribes to: authenticate you, show your work, keep the station or fleet accounts correct, and produce the reports your management reads.
To keep the system safe and working — investigating faults, preventing abuse, and meeting the record-keeping your employer is required to do.
We do not use your work records to train models or to build products unrelated to the service.
Who else sees it
Your employerAdministrators and managers at the company that issued your account, according to the permissions they set.
HostingOur servers, in a Tier-3 datacentre in Singapore. Data is not sold on or moved to third parties for their own use.
Google Firebase Cloud MessagingDelivers push notifications where a company has enabled them. It carries the notification and a device token, not your work records.
SMS and email gatewaysUsed to send receipts, credentials and reminders that your company chooses to send. They receive the recipient number or address and the message.
Payment gatewaysWhere a company sells online — for example bus tickets paid by bKash — the gateway handles the payment. We never see or store full card numbers.
When the law requires itA lawful order from a competent authority in Bangladesh.
How it is protected
Traffic runs over HTTPS. Passwords are hashed, never stored in readable form. Each company's data is separated so one subscriber cannot read another's, and inside a company, access follows the roles and branch permissions your administrator sets.
Servers are patched on a schedule and backed up. No system is perfectly secure, but if a breach affects your data we will inform your company administrator without undue delay.
How long we keep it
Work records — sales, shifts, ledgers, trips — are your employer's accounting records and are kept for as long as they need them, which is usually several years under Bangladeshi tax and audit practice.
Account details are kept while the account is active. When your employer closes it, or ends their subscription, the account is deactivated and removed on the timetable described on the Data Deletion page.
Your choices
See and correct your detailsAsk your company administrator; they can view and correct your profile directly.
Turn off locationAndroid settings let you revoke location from Autonemo Driver at any time. Trip tracking and mileage settlement will stop working, so tell your employer first.
Turn off notificationsRevoke the notification permission in Android settings.
Delete your account and dataSee the Data Deletion page, which explains exactly what is removed and what has to be kept.
Children
These are workplace tools and are not directed at children. We do not knowingly create accounts for anyone under 18. If you believe a child has an account, contact us and we will remove it.
Changes to this policy
If we change what we collect or why, we will update this page and move the date at the top. Material changes are also sent to company administrators.