Privacy Policy for YalaBox Delivery Driver Application

Introduction

Welcome to YalaBox ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the YalaBox Delivery Driver mobile application (the "App"). YalaBox is a delivery management application designed for delivery drivers to manage and track shipment deliveries.

Your privacy is important to us. Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information (Account Registration)

When you register for an account or log in, we collect:

• Full Name: To identify you within the system
• Email Address: For account authentication and communication
• Phone Number: For contact purposes and account verification
• Password: Securely stored for account authentication
• Device Token: For push notification delivery
• Shop/Company ID: To associate you with your employer

1.2 Work-Related Information

As a delivery driver using our App, we collect:

• Driver ID: Unique identifier for tracking deliveries
• Role/Position: Your role within the delivery system (e.g., driver, admin)
• Online Status: Whether you are currently active/online
• Work Statistics: Number of deliveries completed, delivery performance

1.3 Location Data

We collect precise location data when you are actively delivering shipments. This includes:

• Real-time GPS Coordinates: Latitude and longitude during active deliveries
• Location Timestamps: When and where location updates occur
• Delivery Route Information: Path taken during shipment delivery

1.4 Shipment and Order Information

We collect information related to deliveries you handle:

• Shipment IDs: Unique identifiers for each delivery
• Client Information: Customer name, phone, email, and delivery address (provided by the system)
• Order Details: Items count, weight, payment method, delivery fees, total amounts
• Delivery Status: Pending, accepted, started, delivered, cancelled, paid
• Timestamps: When orders were created, started, delivered, paid, or cancelled
• Driver Notes: Notes you add about deliveries
• Cancel Reasons: If you cancel a delivery, the reason provided

1.5 Authentication Data

For secure login, we may collect:

• Biometric Data: Fingerprint or Face ID authentication data (stored locally on your device only, never transmitted to our servers)
• Login Credentials: Email and password (password is encrypted)
• Authentication Tokens: Secure tokens for maintaining your login session

1.6 Device Information

We automatically collect:

• Device Type: Model and operating system (iOS/Android)
• Device Token: For push notifications
• App Version: Version of YalaBox installed
• Language Preference: Your selected language (English/Arabic)
• Theme Preference: Light or dark mode setting

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Process and manage shipment deliveries
• Track delivery progress in real-time
• Update customers about their delivery status
• Calculate and process delivery fees and payments

2.2 Account Management

• Create and manage your driver account
• Authenticate your identity
• Enable secure biometric login
• Maintain your session and preferences

2.3 Communication

• Send push notifications about new orders
• Alert you about order status changes
• Provide important service announcements
• Respond to your inquiries and support requests

2.4 Performance and Operations

• Monitor delivery performance and statistics
• Optimize delivery routes and assignments
• Improve App functionality and user experience
• Troubleshoot technical issues

2.5 Security and Compliance

• Prevent fraud and unauthorized access
• Comply with legal obligations
• Protect the rights and safety of users
• Enforce our Terms of Service

3. Information Sharing and Disclosure

3.1 We DO NOT Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

3.2 Authorized Sharing

We may share your information only in the following circumstances:

With Merchants/Shops:

• Your name and contact information to coordinate deliveries
• Your location during active deliveries for tracking purposes

With Customers:

• Your name and general location during delivery
• Estimated arrival time

With Service Providers:

• Cloud hosting providers for data storage
• Push notification services
• Analytics services for App improvement

Legal Requirements:

• When required by law or legal process
• To protect our rights, privacy, safety, or property
• In response to lawful requests by public authorities

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Security

We implement robust security measures to protect your information:

4.1 Technical Safeguards

• Encryption: All data transmitted is encrypted using SSL/TLS
• Secure Storage: Passwords and tokens are stored using industry-standard encryption
• Flutter Secure Storage: Sensitive credentials are stored in encrypted secure storage
• Token-Based Authentication: Secure access tokens with expiration

4.2 Access Controls

• Role-based access to information
• Authentication required for all App functions
• Automatic session timeout for security

4.3 Biometric Security

• Biometric data (fingerprint/Face ID) is processed locally on your device
• Biometric credentials are never transmitted to our servers
• Used only to unlock the App for convenience

5. Data Retention

5.1 Active Account Data

• Personal information is retained while your account is active
• Delivery history and statistics are maintained for operational purposes

5.2 Location Data

• Real-time location data is retained only for the duration of active deliveries
• Historical delivery location data may be retained for dispute resolution and analytics

5.3 After Account Termination

• Account data is deleted upon request, subject to legal retention requirements
• Some anonymized data may be retained for analytics purposes
• Backup data is purged according to our backup rotation schedule

5.4 Legal Compliance

• Certain data may be retained longer if required by law
• Financial transaction records are retained as required by tax regulations

6. Your Rights and Choices

6.1 Access and Review

You have the right to:

• Access your personal information
• Review your delivery history and statistics
• View your profile information within the App

6.2 Update and Correct

You can:

• Update your profile information
• Correct inaccurate data
• Change your contact details

6.3 Delete Your Data

You may request:

• Deletion of your account
• Removal of your personal information

Note: Some data may be retained for legal compliance

6.4 Control Location Tracking

• Location tracking only occurs during active deliveries
• You can decline deliveries if you don't want to be tracked
• Location tracking automatically stops when delivery is completed

6.5 Notification Preferences

• You can manage push notification settings on your device
• Critical delivery notifications may still be sent

6.6 Biometric Authentication

• Biometric login is optional
• You can enable/disable biometric login in App settings
• Your biometric data remains on your device

7. Third-Party Services

Our App may integrate with third-party services:

7.1 Map Services

• We use device GPS for location services
• Maps may be provided by Google Maps or Apple Maps

7.2 Push Notifications

• Firebase Cloud Messaging (FCM) for Android
• Apple Push Notification Service (APNs) for iOS

7.3 Analytics

• We may use analytics services to improve the App
• Data is anonymized where possible

These services have their own privacy policies, and we encourage you to review them.

8. Children's Privacy

The YalaBox App is intended for use by adult delivery drivers only. We do not knowingly collect personal information from children under 18 years of age. If we discover that a child under 18 has provided us with personal information, we will promptly delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending a push notification for significant changes

Your continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@yalabox.com
• In-App Support: Navigate to Profile > Support > Contact Us
• Response Time: We aim to respond to all privacy-related inquiries within 30 days.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Arab Republic of Egypt, without regard to its conflict of law provisions.

13. Consent

By using the YalaBox Delivery Driver Application, you consent to:

• The collection and use of your information as described in this Privacy Policy
• Location tracking during active deliveries
• Receiving push notifications related to deliveries
• Storage of authentication credentials for secure login

Summary of Key Points

Data Type	Collected	Purpose	Retention
Personal Info (Name, Email, Phone)	Yes	Account & Communication	While account active
Location Data	During deliveries only	Real-time tracking	Duration of delivery
Biometric Data	Optional, local only	Secure login	Device only
Delivery Information	Yes	Service delivery	Operational period
Device Information	Yes	Notifications & Analytics	While app installed