HomieLunch — Rider Tracking

This Privacy Policy describes how HomieLunch ("we", "us", "our") collects, uses, and protects information when you use the HomieLunch Rider Tracking mobile app and the admin dashboard at fiverrimage.com/Homielunch (the "Service"). By installing or using the app you agree to this policy.

1. Information We Collect

a) Location Data (foreground & background)

• Precise location (latitude, longitude, accuracy, speed, heading) when you toggle On Duty — Start Tracking.
• Collected via ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION and ACCESS_BACKGROUND_LOCATION (Android) / Always and When In Use (iOS) with a persistent foreground notification "HomieLunch Tracking — ON/OFF".
• We batch locations locally (every 4–5 points or 60s) and upload to our server over HTTPS when internet is available. Offline points are queued on-device and flushed when connectivity returns.

b) Account & Device Data

• Rider name, phone number, assigned branch, password hash, rider ID.
• Device info: battery optimization status, OS version, push/notification permission status, last heartbeat timestamp.

c) Usage Data

• Duty session start/stop times, total KM/points per session, trip history, daily/monthly aggregates.
• Server logs (IP, timestamp, endpoint) for security and debugging — retained 30 days.

We do not collect contacts, photos, microphone, camera, or advertising IDs.

2. How We Use Your Information

• Show live location to your branch admin on the Live Map and compute daily route & KM per duty session (START/STOP exact, not gaps).
• Generate Daily / Monthly reports, salary/attendance calculations, and route history playback.
• Keep the app reliable: retry offline batches, monitor heartbeat (online if seen < 5 min, history retention 10 min), and prevent fake/spoofed points (speed > 70 km/h dropped).
• Account authentication (phone + password) and branch-scoped access control.

3. Legal Basis

Legitimate interest and performance of the employment/contracting relationship between rider and HomieLunch branch to provide delivery/logistics services. Location tracking is active only while you are On Duty; toggling Stop Duty stops all collection immediately.

4. Permissions We Request — Why

You can deny or revoke location permission anytime in system Settings — tracking will pause until re-granted.

5. Data Sharing

• Within HomieLunch: your live/duty data is visible only to admins of your assigned branch and Super Admin (branch-scoped RBAC). Impersonation by Super Admin is logged.
• Service providers: hosting at fiverrimage.com (shared hosting, MySQL over HTTPS), map tiles © OpenStreetMap / Esri Satellite — no location data is sold.
• Legal: if required by law or to protect safety/legal rights.

We never sell your location or personal data to third parties and we do not use it for ads.

6. Data Retention

• rider_locations and duty_sessions: retained while your rider account is active and up to 12 months thereafter for audit/payroll, then anonymized or deleted on request.
• Offline batches on-device: cleared after successful upload or on Logout.
• Backups: encrypted DB backups retained 30 days.

7. Data Security

• All transport over HTTPS (TLS). Passwords stored as password_hash (bcrypt). Branch isolation via branch_id filter on every API.
• Access to dashboard is session-based; admin passwords are hashed and reset tokens expire in 15 minutes.
• No method is 100% secure — please keep your phone passcode and HomieLunch password confidential and use Stop Duty + Logout when off shift.

8. Your Rights & Controls

• On/Off control: toggle Start Duty / Stop Duty anytime — Off means zero location collection, even in background.
• Access / Correction / Deletion: request your data export, correction, or deletion via your branch admin or the contact below. Deletion removes rider_locations & duty_sessions for your account.
• Revoke permission: system Settings → Apps → HomieLunch → Permissions → Location → Deny. The app will show a prompt to re-enable if you go On Duty.
• Background notice: a persistent notification is always shown while On Duty so you know tracking is active.

9. Children's Privacy

The Service is for delivery staff 18+ and is not directed to children under 13. We do not knowingly collect data from children.

10. International Transfers

Data is stored and processed on servers in India (hosting provider). By using the Service you consent to processing in India.

11. Changes to This Policy

We may update this policy (e.g., when adding iOS background modes or billing module). The Last updated date at the top will change and material changes will be notified in-app or by your branch admin. Continued use after changes means acceptance.

12. Contact Us

HomieLunch
Email: bhaumik.patel20@gmail.com
Phone: via your Branch Admin panel → Riders → contact
Address: Vapi / Daman — as configured per branch
For privacy requests or deletion: email with subject "Privacy — Rider ID & Phone" and we respond within 7 days.

13. Consent & Prominent Disclosure (Google Play)

This app requests Background Location solely to record delivery routes while the rider is On Duty. A prominent in-app disclosure is shown before the system permission prompt, and background tracking runs only after the rider explicitly taps Start Duty and grants Allow all the time. Users can stop it anytime via Stop Duty or by revoking permission. This disclosure and this Privacy Policy are linked on the Play Store listing and inside the app (Settings → Privacy Policy).

---

App: HomieLunch Rider Tracking  •  Package: com.HomielunchRider  •  URL for Play Console: https://fiverrimage.com/Homielunch/privacy_policy.php
If you host under a different path, keep this file publicly accessible without login and paste the exact URL in Play Console → App content → Privacy policy.