How J&J Link handles data

This policy applies to the J&J Link iPhone and iPad application, the J&J Link support website at jjtrans.app, and related support communications. J&J Link is provided by J&J Trans LLC (“J&J Trans,” “we,” “us,” or “our”) for authorized personnel and transportation operations.

“Personnel” includes authorized drivers, dispatchers, administrators, payroll users, and other workers. “Member” or “passenger” means a person whose transportation is coordinated through the app. Members generally do not create J&J Link user accounts, but their trip information is processed so transportation can be provided and documented.

This policy describes J&J Link. Transportation brokers, health plans, medical facilities, Apple, mapping applications, and other organizations have their own notices for information they independently control.

• You and other personnel: account registration, profile changes, trip actions, inspections, notes, signatures, payroll administration, and support requests.
• Transportation operations: dispatchers, administrators, other drivers, trip history, and workflow events generated as work is performed.
• Brokers and business partners: MTM and other authorized trip sources, schedules, member contact details, accommodation needs, and status updates.
• Your device: location (with iOS permission), camera or photo-library selections, push token, and files you choose to import.
• Service providers: delivery, authentication, storage, maps, routing, notifications, and security signals needed to operate the app.

• Authenticate users, approve access, enforce roles, secure accounts, and provide app functions.
• Create, group, assign, perform, track, document, correct, archive, and report transportation trips.
• Coordinate drivers, estimate arrival time and distance, respond to help requests, and show live operations to authorized Dispatch users.
• Document member pickup or drop-off, inspections, mileage, attendance, payroll, paystubs, claims, checks, audits, and operational history.
• Send assignment, signature, payment, and other operational notifications.
• Prevent duplicate trips, investigate errors or misuse, support users, protect safety, and improve reliability.
• Meet broker, payor, contract, tax, payroll, safety, legal, and regulatory obligations that apply to J&J Trans.

The current iOS app has no integrated advertising SDK or third-party generative AI feature. Member trip details, precise driver location, health or accommodation information, signatures, and payroll records are handled for the operational purposes described in this policy, not to support an advertising service.

Driver accounts require iOS “Always” location access with Precise Location enabled to check in and perform trips. When a driver checks in, J&J Link starts location updates and may continue receiving them while the app is in the background. The app sends the driver’s current coordinates and heading to the J&J Link backend at short intervals so authorized Dispatch users can see active operations and the app can calculate routes, distance, and arrival estimates.

Tracking is intended to run only while a shift remains open. It can resume after the app restarts when the backend still shows an open shift. Checking out stops app tracking and requests removal of the current location from the active driver record. Signing out also stops app tracking. Drivers should verify that the shift is closed when work ends.

You can review or revoke J&J Link’s location permission in iOS Settings. Revoking Always or Precise Location prevents driver check-in and trip functions from working. If the app shows an incorrect shift state or appears to track after checkout, sign out or disable location access and contact Dispatch or support.

When Dispatch selects an MTM .xlsx workbook, J&J Link reads it on the device for normalization, duplicate detection, trip grouping, and review. The raw workbook and matching-only fields—such as Medicaid number or date of birth when present—are intended to remain in memory for the import session and are not uploaded, cached, or logged by the importer.

After Dispatch reviews and confirms the result, only the trip fields needed for J&J Link operations are converted into trip records and sent to the backend. Those records can include member contact details, addresses, accommodation or pregnancy indicators, special needs, and driver-facing notes. Dispatch should import only authorized files and close or reset the session when finished.

We disclose information only as needed for operations, safety, support, recordkeeping, or legal obligations:

• Authorized J&J Trans personnel: information is shown based on role, permission, assignment, and operational need. Drivers may see information necessary for assigned or available-help trips; Dispatch and administrators may have broader access.
• Transportation brokers, payors, facilities, and business partners: trip, claim, status, mileage, signature, or other documentation may be provided when required for service, verification, reimbursement, audit, or dispute resolution.
• Supabase: authentication, database, realtime updates, file storage, and backend functions for J&J Link.
• Apple: App Store distribution, device permissions, Apple Push Notification service, Sign in with Apple where available, MapKit/geocoding, and device services selected by the user.
• Navigation providers: when a user chooses Apple Maps, Google Maps, Waze, or another installed navigation app, the device may pass an address, route destination, or current location to that provider under its own privacy terms.
• Base44: hosting and delivery of this public support and privacy website. Base44 does not operate the J&J Link iOS trip database.
• Professional and legal recipients: auditors, advisors, insurers, law enforcement, regulators, or parties to a business transaction when reasonably necessary and legally permitted.

Service providers may process information only to perform the services supplied to us and must provide protection consistent with this policy and applicable law. These operational disclosures do not authorize unrelated marketing or public disclosure of sensitive records.

Trip records can reveal medical destinations, disability or mobility needs, pregnancy, and other sensitive circumstances. Location, signatures, credentials, payroll records, and payment documents are also sensitive. Personnel must access and disclose them only for an authorized work purpose and follow J&J Trans policies.

J&J Link is not a medical-record system and does not provide medical care or advice. References to health information in this policy do not by themselves mean every J&J Link record is governed by HIPAA. Applicable obligations depend on the service, contract, and parties involved.

We keep information only for as long as reasonably needed for the purpose collected and for applicable operational, broker, payor, claims, payroll, tax, employment, safety, audit, dispute, backup, security, contractual, or legal requirements. Different records have different needs, so this policy does not promise a single fixed period.

When information is no longer reasonably needed, we delete it, de-identify it, or restrict it until deletion is practical. Local caches and generated files may remain on an authorized device until removed by the app, the user, device management, or operating-system storage controls. Backup and logging copies may expire on a delayed schedule.

Account deletion does not always require deletion of every trip, payroll, safety, claim, signature, audit, or legal record. Where retention is legally required or otherwise permitted for a specific continuing obligation, we limit later use to that purpose and remove or disassociate account information when reasonably possible.

• Review or correct: update available profile fields in J&J Link or ask an authorized administrator to correct operational records.
• Location, camera, photos, and notifications: manage iOS permissions in Settings. Some app functions will not operate without the relevant permission.
• Account deletion: initiate deletion from J&J Link Settings → Delete Account. We may verify identity and retain records as explained above.
• Access or privacy request: follow the instructions on our Data requests page. We may need to verify identity, role, authority, and the scope of the request.
• Consent or permission withdrawal: revoke a device permission in iOS Settings or contact us about other consent-based processing. Withdrawal does not undo earlier lawful processing and may prevent required job or trip functions.

Rights vary by relationship and applicable law. We will review requests and explain the outcome, including any information we cannot provide, change, or delete because of another person’s privacy, security, legal, contractual, or recordkeeping obligation.

We use safeguards appropriate to the app’s role, including authenticated accounts, approval and role controls, encrypted network connections, device Keychain storage for session credentials, optional PIN or biometric lock, audit history, and access controls in backend services. Face ID and Touch ID are handled by Apple; J&J Link receives an authentication result, not your biometric template.

Some authorized records are also cached on devices so work can continue and uploads can retry. No system, network, device, or storage method is completely secure. Personnel should protect their device and credentials, use only approved exports, avoid sending sensitive records by ordinary email, and report suspected unauthorized access promptly.

J&J Link user accounts are intended for authorized J&J Trans personnel, not children. Transportation records may nevertheless concern a minor passenger or dependent when that information is supplied by an authorized broker, guardian, payor, or dispatcher. We use that information only for authorized transportation, safety, documentation, and related obligations.

J&J Trans operates in the United States. Service providers may process or store information in other U.S. locations or countries where they operate. We use contractual, technical, and organizational measures appropriate to the service and the information involved.

We may update this policy when J&J Link features, providers, or legal obligations change. The effective date at the top identifies the current version. Material changes may also be communicated in the app or through personnel channels when appropriate.