Privacy Policy

1. Data we collect

We collect only the data needed to operate the App and complete deliveries:

• Account data - your email address and password, used to sign you in. Your name, role, avatar, and the company (tenant) you belong to are provided by your employer and shown in your profile.
• Proof of delivery - when you complete a delivery you may capture a photo and/or an on-screen signature, together with the recipient's name, a note, and a timestamp.
• Vehicle inspection data - checklist answers and, where applicable, photos of defects captured during a pre-trip vehicle check.
• Chat messages — text, photos, and locations you exchange with your dispatcher through the in-app chat.
• Location shared in chat. At your request, the App obtains the device’s current location so you can tell your dispatcher, for example, where an entrance or delivery point is. The device may provide precise or approximate location depending on the permission granted and the available accuracy. After you review and confirm sending it, the coordinates are sent to our server and become part of a message associated with your account and conversation.
• Push notification token - a device push token (Firebase Cloud Messaging / Apple Push Notification service) used to deliver notifications about your routes and messages.
• Profile photo - an optional avatar image you may upload.

2. Data we do not collect and what the App does not do

To be clear about what the App does not do:

• The App does not continuously track your movements or access your location in the background. Location is obtained when you select the corresponding action in chat. Sending the resulting point to your dispatcher requires your confirmation. Delivery-address coordinates provided by your company are processed separately from the location you choose to share.
• We do not use advertising identifiers, and we do not show ads.
• We do not run analytics or behavioral tracking, and we do not use third-party analytics or crash-reporting SDKs. Firebase Analytics and Ads are disabled.
• We do not sell your personal data.

3. Customer data you handle

To perform deliveries, the App displays personal data about delivery recipients that our business customer provides - such as recipient name, phone number, and delivery address. This information is shown to you only to complete the assigned delivery (for example, to navigate to the address or contact the recipient). You must use it solely for that purpose and must not retain, copy, or share it.

4. How we use data

We use the data described above to:

• Authenticate you and keep you signed in;
• Assign, display, and confirm your delivery routes and stops;
• Record proof of delivery and vehicle inspections;
• Enable real-time chat between you and your dispatcher;
• Share the location you select with conversation participants to coordinate delivery and clarify a meeting point, entrance, or unloading location;
• Send you push notifications about routes, deliveries, and messages.

5. Data stored on your device

The App stores sign-in data and a local sending queue on your device.

• Authentication tokens that keep you signed in are stored in the platform’s secure storage (iOS Keychain / Android Keystore).
• If you enable biometric sign-in, your sign-in credentials are saved in the device’s secure storage. After a successful system biometric check, the App uses them to sign in to our server over a secure connection. The App itself does not receive or store facial images or fingerprints.
• To work with an unstable connection, the App saves pending messages and actions on your device. Local copies of chat photos are created in the App’s storage. For a pending location, the App saves the coordinates, the time the location was obtained, and available accuracy information. This data is used to display the sending status and retry sending when the connection is restored and the App is running.
• You can remove unsent photos and locations from the queue in the App. When you explicitly sign out, pending photos and locations for that account are removed from the device after a warning. Removing a local pending item does not delete a message or file already accepted by the server.

6. Permissions the App requests

The App asks for the following device permissions, each only when needed:

• Camera — to take proof-of-delivery photos, vehicle-defect photos, chat images, and profile photos;
• Photo library — to attach existing images to a delivery, vehicle check, or chat, and to select a profile photo;
• Notifications - to send you push notifications;
• Biometrics (Face ID / Touch ID / fingerprint) - optional, to sign you in.
• Location while using the App — to obtain your location once when you choose the corresponding action in chat. You can deny permission; the App’s other features remain available. If your device supports choosing accuracy, you can allow approximate location. You can change this permission in your device’s system settings. Changing permission does not delete previously sent messages.

7. Third parties and where data goes

The mobile App uploads photos, signatures, and chat attachments to our server through our API over a secure connection. Amazon S3 is not used to store this data.

Coordinates are converted to addresses by the built-in geocoder on our server. Coordinates are not sent to an external geocoding provider for this operation.

We use the following third-party services:

• Firebase Cloud Messaging (Google) - to deliver push notifications; it processes your push token. Firebase Analytics and Ads are turned off.
• Apple Push Notification service (Apple) - to deliver push notifications on iOS.
• When you choose to open an address or location in a navigation app, the App passes the destination coordinates or address to your selected mapping service. Depending on your device and choice, this may be Apple Maps, Google Maps, Yandex Navigator, or another compatible app. That service’s further processing of the data is governed by its own privacy policy.

8. Data retention and deletion

A shared location becomes part of a message and is accessible to participants in that conversation. It reflects the location shared by the driver or courier at that moment and does not update as they move. The App sends individual points rather than recording a movement history. Chat messages, including shared locations, have no fixed retention period: they are retained until the chat is deleted. Once the chat is deleted, its messages, including coordinates, are no longer retained. Data handling when an account is deleted is described below.

You can delete your account yourself from inside the App, under Profile → Delete account. You will be asked to re-enter your password to confirm. The request is declined while you still have an active route — finish or hand over your current shift first.

Once you confirm, you are signed out immediately and can no longer sign in, and your employer's administrator is notified. The profile and sign-in data listed below is permanently and irreversibly erased 14 days later. During those 14 days the account is not yet erased: your employer's administrator can restore it — for example if you deleted it by mistake — and a restored account is reached through a new invitation, never with your previous password.

After 14 days, your name, email address, avatar, sign-in credentials, and device push-notification tokens are erased. When the account is permanently deleted, personal information is anonymized; only anonymized information associated with delivery orders is retained. This also applies to personal data in chat messages, photos, and shared locations: it is not retained as information about the deleted user.

The App does not include a self-service data-export feature. To request access to, correction of, or a copy of your personal data, contact the company that provided you the App, or reach us using the details below.

To request deletion of messages, photos, and coordinates, contact the company that provided you the App or email privacy@ddklogistic.com. Signing out removes your authentication tokens and saved biometric sign-in credentials from the device. Section 5 describes removal of the local queue. Removing the local sending queue does not delete data already accepted by the server.

9. Data security

We use industry-standard measures to protect your data, including encrypted storage of credentials and tokens on the device, encrypted connections (HTTPS/WSS) to our backend, and file uploads through our API over HTTPS. No method of transmission or storage is completely secure, but we work to protect your data appropriately.

10. Your rights

Depending on your jurisdiction (including the EU/EEA under the GDPR), you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Because much of the data is controlled by your employer or the company that engaged you, please direct such requests to them; we will support them as their processor. You may also contact us directly using the details below.

Your account itself is the exception: you can delete it yourself at any time from within the App, without asking anyone, as described in section 8 above.

11. Children

The App is a professional tool for delivery drivers and is not directed to children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when it was last revised. Material changes will be communicated through the App or by other appropriate means.

13. Contact us

If you have questions about this Privacy Policy or your personal data, contact us at privacy@ddklogistic.com.