Privacy

Effective September 2026 · DRAFT for legal review · ROADWORTHY™ is operated by Josmol Group Inc. (DoktorConnect), El Paso, Texas.

The short version

Your health record belongs to you. Your fleet sees aggregates and injury reports, never a diagnosis, reading, or conversation. The DoktorConnect care team sees your record only while you have switched that on. We never touch the FMCSA Drug & Alcohol Clearinghouse. You can delete everything from inside the app.

What we collect

Account: email and password (Firebase Authentication), or an anonymous device account if you choose "continue on this device".
Health data you enter or sync: blood pressure, heart rate, oxygen saturation, weight, glucose, sleep hours, CPAP hours, pain, mood, screening answers, Ready Mindset assessment results, and injury reports. Bluetooth devices are read only when you tap to connect; CSV files you import are processed on your device.
Location: with your permission, speed (to switch to hands-free mode while moving) and, if you opt in, a rough position (about 1 km) shared with the care team and your fleet office. Your fleet already holds your exact position from the ELD.
Voice: speech is converted to text on your device by your browser; the text of your conversation with the Co-Driver is sent to our server to generate a reply and is not stored on our servers. Conversation history stays on your device.
Engagement: readings logged, pathway days completed, MOVE sessions — used for your Convoy points if you opt in. Your handle and points are visible to drivers in your office; no health value ever is.

Who sees what

You: everything.
Your fleet's safety office: office-level aggregates (readiness distribution, card-risk counts, program participation), broadcasts they send you, and the injury reports you file.
DoktorConnect care team: your trend (up/flat/down) and, only while your "care team can view my record" setting is on, your full record so they can course-correct you.
Clinicians: what you share in a video visit. Video rooms are private, expire after the visit, and are not recorded.
Processors: Google Firebase (authentication and database), Netlify (hosting), Anthropic (AI replies, text only), Omega Wellness Center (The Ready Mindset assessment), Daily.co (video), OpenStreetMap (store locations). Each receives only what its function needs.

What we never do

Sell or advertise with your data.
Give your fleet a diagnosis, a reading, your mindset profile, or your conversations.
Access, query, or report to the Drug & Alcohol Clearinghouse.
Certify you. The DOT physical is in person with a National Registry examiner.

Your controls

Change sharing settings any time under More → Fleet & privacy.
"Reset this device" deletes your local record and signs you out; email joseph@josmolgroup.com to delete your cloud record — we complete deletion within 30 days.
Export any injury report as a file from inside the app.

Security

Data is encrypted in transit and at rest. Access rules are enforced by the database itself: the fleet key cannot read a driver record, and the field set of every fleet-visible document is locked so health values cannot be written there.

Contact

Josmol Group Inc. · El Paso, Texas · joseph@josmolgroup.com · 915-478-8807