Privacy Policy and Driver Notice

Last updated 17 October 2026

FILITO stores all personal data in Rwanda and uses it only to run fleet management for our clients. This policy explains what we collect and the rights you have over it.

1. Who we are

FILITO is a product of FN TECH SOLUTIONS LTD, Company Code/TIN 150002787, Norrsken House Kigali, 1 KN 78 St, Kigali, Rwanda. We are registered with the National Cyber Security Authority (NCSA) under Law N° 058/2021 relating to the protection of personal data and privacy.

We act in two roles:

  • Data controller for the data of our own clients, website visitors and account holders: we decide how it is used.
  • Data processor for the fleet data our clients collect about their drivers and vehicles: the client company (your employer or vehicle owner) decides how it is used, and we process it on their instructions.

Data Protection Officer: Fiston NSHIMIYANDINZE — fistonnshimiyandinze@gmail.com, +250 791 839 952.

2. What we collect and why

WhoDataPurposeLegal ground
Client account holdersName, phone, email, company details, login details, billing recordsCreate and run the account, invoicing, supportContract; legal obligation (tax)
Drivers and field staffName, phone, vehicle plate, GPS location from the tracker or driver app, trips, speed, ignition, alarmsVehicle tracking, trip records, safety and theft alerts for the vehicle ownerClient’s contract or legitimate interest; consent where required
Drivers and field staffFuel, expense and maintenance records, receipts and photos, approvalsFleet cost and maintenance managementClient’s contract or legitimate interest
Website and app visitorsName, email, phone (if you contact us), IP address, device and log dataAnswer enquiries, demos, security of the serviceConsent; legitimate interest

When location is collected. A GPS tracker reports whenever the vehicle is powered or moving. The FILITO driver app collects phone location only while the driver is logged in and on duty for a trip; it does not track drivers off duty.

We do not collect sensitive data such as health, religion or biometric data, and we never sell personal data or use it for advertising.

3. Sharing, storage and security

Who sees your data. Only the client company that tracks the vehicle, authorised FN TECH staff who run the service, and these providers:

  • Strettch Cloud — hosting of our servers in Rwanda.
  • MTN Rwanda and Airtel Rwanda — mobile connectivity for trackers.
  • Authorities such as RURA, NCSA or the police — only when the law requires it.

Where it is stored. All personal data is stored and processed on servers in Rwanda. Trackers send data directly to our servers, not to the device manufacturer. We do not transfer data outside Rwanda.

How we protect it. Each client sees only its own vehicles; administrators use multi-factor authentication; data is encrypted in transit and at rest; access is logged; backups are kept; and every tracker’s default password is changed before installation.

How long we keep it. Location and trip history: 12 months, unless the client sets a shorter period. Account and billing records: as long as the account is active, then as required by tax law. When a client contract ends, we return or delete its data within 30 days.

If a data breach affects you, we inform the client company and NCSA as the law requires.

4. Your rights and how to contact us

Under Law N° 058/2021 you have the right to:

  • be informed about how your data is used;
  • access a copy of your data;
  • have wrong data corrected;
  • have data deleted when it is no longer needed;
  • object to or restrict processing in certain cases;
  • withdraw consent where processing is based on consent.

If you are a driver or staff member of a client company, send your request to that company first; we will help them answer it. You can also write to our Data Protection Officer at fistonnshimiyandinze@gmail.com or call +250 791 839 952. We reply within 30 days.

If you are not satisfied, you may complain to the NCSA Data Protection and Privacy Office: complaint@dpo.gov.rw, toll-free 9080.

We will post any change to this policy on filito.rw with its new date.

5. Driver tracking notice and acknowledgement

Client companies give this one-page notice to each driver or staff member before tracking starts, and keep the signed copy. The FILITO driver app shows the same text on first login, with an “I agree” button.

Vehicle and driver tracking notice — [Client company name]

[Client company name] uses FILITO, a fleet management system run by FN TECH SOLUTIONS LTD, to manage its vehicles.

  1. What is collected: the GPS location, trips, speed, ignition status and alarms of vehicle [plate number]; and, when you use the FILITO driver app, your phone’s location while you are logged in and on duty, plus fuel, expense and maintenance records, receipts and photos you upload.
  2. Why: vehicle safety and theft recovery, trip and fuel records, maintenance planning and cost control.
  3. When: the vehicle tracker works whenever the vehicle is in use. The app does not track you when you are logged out or off duty.
  4. Who sees it: authorised managers at [Client company name] and FN TECH staff who run the system. Data is stored in Rwanda and is not sold.
  5. How long: 12 months, then deleted.
  6. Your rights: you can ask [Client company name] to see or correct your data, or raise questions with FN TECH’s Data Protection Officer (fistonnshimiyandinze@gmail.com) or NCSA (complaint@dpo.gov.rw).

I have read this notice and understand how my data is collected and used.

Driver name
National ID number
Vehicle plate
Signature
Date