AUTOLÍNEAS NUEVOMEX, S.A. DE C.V. (tax ID ANU121012G91), a member of Grupo Zinergia and hereinafter "we" or "the company", located at Cerrada Antigua Carretera a Roma 202, Colonia Colonial Lagrange, ZIP 66490, San Nicolás de los Garza, Nuevo León, Mexico, is responsible for the processing of your personal data under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable regulations of the United Mexican States.
This policy describes how we handle information from users of the Zinexus mobile application and is permanently available at https://splzinergia.com/SPLPRO/zinexus/privacidad.html.
Zinexus is an internal work application intended exclusively for drivers and staff of Grupo Zinergia and its member companies. Access is granted only through accounts created and managed by the company: there is no public sign-up. It is not directed to the general public or to children, and it is distributed in Mexico only.
When you use Zinexus, your operational information is shared with the group company you belong to (your employer) and with the administrative areas involved in your processes — human resources, operations, dispatch, purchasing and accounting — within the scope of the employment relationship.
| Category | Data |
|---|---|
| Employment identification | Name, driver/employee number, national ID (CURP), job title, company you belong to. |
| Contact | Email address and phone number. |
| Access credentials | Username and password to sign in. |
| Face photograph | ID-style photograph (selfie) used to generate your digital employee ID within Grupo Zinergia and to display it on your profile. It may be replaced by the official photograph held by Human Resources. |
| Location | Device location only while you are using the app, to record and track your trips. The app does not collect your location in the background. |
| Camera and photos | Images and documents you capture or attach as evidence (receipts, checklists, waybills, inspections). |
| Microphone and voice | Audio when you use voice dictation in the chat. |
| Chat messages | Content of the conversations you hold with the assistant and with the support team. |
| Bluetooth | Connection to the Translogik probe to capture tire readings. No location is collected through this. |
| Operational data | Trips, settlements, advances, loans, expenses, incidents and inspections related to your activity. |
| Activity log | Record of sign-ins and of the actions you perform in the app (logins, requests, approvals), linked to your account, for security and administrative traceability. |
| Technical and usage data | Device brand, model and general characteristics (RAM and storage capacity), operating system, device identifier, app version, crash reports and usage/performance data. The device identifier is used to validate the devices authorized for your account and prevent unauthorized access. |
| Notifications | Device identifier (Firebase token) to send you push notifications. |
We do not collect data about your personal bank accounts, and we do not use advertising identifiers. Zinexus shows no advertising and performs no tracking of your activity outside the application.
Your face photograph is stored. It is used to generate your digital employee ID within the group and to identify you in the app's internal processes. It is validated automatically when you upload it (see section 5).
Your biometric data is not. If you enable unlock with fingerprint or Face ID, the verification is performed by your own device through the operating system. The app does not receive, store or transmit your fingerprint or face pattern: it only receives a confirmation from the system of whether the verification succeeded. We also do not perform facial recognition or biometric matching against your ID photograph.
Primary purposes (necessary to provide the service):
Secondary purposes (not necessary for the service): usage analytics and error reports to improve the app. You may object to these purposes by writing to desarrollo@zinergia.com, without affecting your use of the app or your employment relationship.
Zinexus uses Google's artificial intelligence services (Gemini) at three specific points:
Voice dictation speech recognition, text-to-speech and the document scanner run on your own device through operating system features.
We do not sell your personal data and we do not share it with third parties for advertising purposes. We share it only in the following cases:
| Recipient | For what |
|---|---|
| Grupo Zinergia companies | The group company you belong to and the administrative areas involved in your processes access your operational information within the scope of the employment relationship. |
| Google / Firebase | Push notifications, usage analytics, crash and performance reports. |
| Google (AI – Gemini) | Photograph validation, trip evidence analysis and chat moderation. |
| Google Cloud | Hosting of the application's services. |
| Own infrastructure (SPL / SPLPRO servers) | Storage and processing of your operational information. |
| Competent authorities | Where there is a duly founded legal request. |
The providers above act as processors handling data on our behalf, following our instructions and under contractual confidentiality and security obligations; they do not use it for their own purposes. These communications do not constitute transfers requiring your consent under the LFPDPPP.
International transfers: Google services (Firebase, Gemini and Google Cloud) process and store information on servers located in the United States of America and, where applicable, in other regions of their global infrastructure. Such processing is carried out under those providers' contractual data protection commitments.
We apply administrative, technical and physical measures to protect your information: encryption of the communication between the app and our servers, encryption of sensitive data in transit, secure storage of session credentials on the device (Keychain on iOS, Keystore on Android), access control through authentication, validation of the devices authorized for your account, a role-based permission scheme, and activity logging. No measure is infallible, but we work continuously to keep your information protected.
We keep your data for the duration of your employment or service relationship with the company. Once it ends, we keep it for the periods required by applicable tax, labor and social security regulations — generally five years from the termination of the relationship or from the date of the relevant document — as well as for as long as needed to address any liability, clarification or proceeding arising from that relationship.
Once those periods expire, the data is deleted or anonymized so that it no longer identifies you, except for data that must be retained by legal mandate.
You may request deletion of your personal data by writing to desarrollo@zinergia.com with the subject "Data deletion – Zinexus", stating your full name, your employee or driver number and the company you belong to.
What is deleted: your ID photograph, the content of your chat conversations, your device identifiers and access credentials, and your usage analytics data.
What cannot be deleted immediately: Zinexus is a work tool and the information you record forms part of the company's labor, tax and accounting documentation (trips, settlements, advances, loans, expenses and their evidence). Those records must be retained for the legal periods described in section 8 and cannot be erased before those periods end; once they expire, the records are deleted or anonymized under our retention policies. In the meantime, access is restricted to the areas that require it by legal obligation.
Because Zinexus accounts are created and managed by the company, account closure is handled through Human Resources or the Development department; there is no self-service option within the application.
You have the right to access your personal data, rectify it when it is inaccurate or incomplete, request its cancellation when you believe it is not required for any of the stated purposes, and object to its processing for specific purposes. You may also withdraw your consent and limit the use or disclosure of your data.
How to exercise them: send your request to desarrollo@zinergia.com including:
We will respond within a maximum of 20 business days and, if the request is granted, it will be implemented within the following 15 business days after our response is communicated. Exercising these rights is free of charge; you would only cover shipping or reproduction costs, if any.
Please note that cancellation or objection may not proceed where the data is necessary to comply with legal, labor or tax obligations, in the cases provided by law.
If you believe your right to personal data protection has been infringed, you may file a complaint before the competent personal data protection authority in Mexico.
The app requests location (only while in use), camera, photos, microphone, Bluetooth, biometrics and notification permissions solely for the functions described in this policy. You can enable or disable them at any time from your phone settings; some functions may become unavailable if you disable them.
From Zinexus you can access the company's internal web portals (for example, the SPLPRO Portal) displayed within the application itself, as well as external links. Processing of information in those portals is governed by the company's policies and access controls; for third-party sites, their own privacy policies apply and we have no control over them.
Zinexus is a work tool intended for Grupo Zinergia staff. It is not intended for children and we do not knowingly collect data from children.
We may update this privacy policy. We will publish the current version at the same address (https://splzinergia.com/SPLPRO/zinexus/privacidad.html) and update the "last updated" date. Relevant changes will be communicated through the means available in the app or through the company's internal channels.
If you have questions about this policy or about the processing of your data, contact us: