Spryhaul™ Privacy Policy

Last updated: October 26, 2026 · Publisher: Cyaniz Labs, LLC

Plain-language summary. In this version your run records stay on your phone, encrypted, and are not sent to Cyaniz Labs. You own them: you can export or delete any run, or everything, in the app. Spryhaul is a logistics record-keeping tool. It is not a medical device, and it makes no claim of HIPAA certification or compliance. Medical runs keep only the minimum necessary data (facility, time, signature, temperature note); do not type patient names or medication details.

Spryhaul ("we," "us," "our") provides freight matching, a mixed-day planner, and chain-of-custody proof records for small carriers who run freight, medical-courier, airport-luggage and document legs. Tagline: The mile that pays. This policy explains what the app stores, what it does not send anywhere, and how to delete it.

Where your data lives

This version runs entirely on your device. There is no Spryhaul cloud account and no server that receives your records. Runs, signatures, photos, temperature logs, driver credentials and settings are saved in on-device storage and encrypted at rest (AES-256-GCM, with a non-extractable key kept in the app's private storage). The bundled load board is demo data: Spryhaul does not connect to DAT, Truckstop or any live load feed in this version.

Information the app handles

Run and custody records you enter: pickup and delivery points, times, receiver names, signatures, photos (sealed envelopes, bag tags, file stamps, delivery proof), temperature readings, exceptions, and notes. These belong to you, the carrier.
Medical runs, minimum necessary: facility, time, signature and temperature note only. The app is built so it does not ask for patient names, diagnoses or medication details, and you should not enter them.
Driver credential records: certificate names and expiry dates for your own drivers, used to show a route-ready badge.
Camera photos and location stamps: when you take a proof photo or confirm a pickup or delivery, the app may attach your device's GPS reading to that record. It is stored in the run record on your phone. The app does not track you in the background.
Customer phone numbers and emails you type so you can send delivery updates. They are stored in that run record on your phone.
Optional anonymous lane summaries (ZIP-3 or city pair, rate, minutes, exceptions, retries). These are saved only on your device, only if you switch them on, and are never sent anywhere in this version. They never include names, signatures, photos or street addresses.

What we do not collect

Cyaniz Labs does not receive your runs, photos, signatures, credentials, location or customer details. We do not sell data, we do not use advertising or analytics SDKs, and we do not train anything on your records. We do not do server-side learning: any "learning" is a summary computed on your own phone.

Messages and sharing

Customer updates, proof packets and PDFs are shared only when you tap send. The app opens your phone's own text, email or share sheet with the message already written; you press send. Spryhaul does not send texts or emails for you in this version, and there is no hosted customer tracking page yet.

Permissions

Camera — proof photos (sealed envelope, bag tag, delivery, exception). Photos stay in the run record on your phone.
Location (approximate and precise) — an optional time-and-place stamp when you confirm pickup, handoff or delivery, used while you are using the app. No background location.
Notifications — on-device reminders only: lane alerts you set, the STAT timer, and credential renewals. They are scheduled on your phone and cannot wake a closed app when a new load is posted elsewhere.
Internet — used by the Android WebView to load the bundled app from the device, and by Google Play Billing if you subscribe. Fonts and scripts are bundled; the app does not call third-party servers to display your records.

Subscriptions

If you buy a plan, payment is handled by Google Play Billing. We do not see your card details.

Your control, retention and deletion

Export: Data & Privacy lets you export a single run or a whole day as a PDF proof packet, or everything as a JSON file.
Delete: delete a single run, delete runs past your chosen retention period, or delete everything. Deleting removes the data from the device, including the encryption key. Uninstalling the app also removes it.
Account deletion: there is no hosted account in this version. If a hosted account is added later, deleting it will also delete your records, and this policy will be updated before it ships.
Consent: a plain-language consent screen is shown before you first use data features. You can change your choices in Data & Privacy at any time.

Security

Records are encrypted at rest on the device. If a hosted service is added in a future release, data in transit will use HTTPS/TLS and this policy will describe it first. No system is 100% secure; protect your phone with a screen lock.

Your responsibilities

Spryhaul is a record-keeping tool. You remain responsible for your own licensing, insurance, state pharmacy-board rules, driver credentials, and any privacy law that applies to the work you do. The in-app Credentials screen is general information, not legal advice.

Children

Spryhaul is a business tool intended for adult commercial carrier operators and is not directed at children under 13.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions or deletion requests: cyanizlabs@gmail.com.