Privacy Policy

This policy explains what the Wild North Fish Delivery Android app collects, why we collect it, who we share it with, and the choices you have. It is written for the people who use the app — our delivery drivers, riders and field staff.

1 Who we are

2 Summary at a glance

3 Information we collect

3.1 Account and profile information

• Your login username and password, submitted when you sign in.
• Your user ID, display name, driver name, email address and phone number.
• Assigned vehicle details, including vehicle name and vehicle number.
• Your account creation date and online/offline status within the app.

Passwords are transmitted to our server for authentication and are not stored on the device. After sign-in the app holds a session token together with the token name and its expiry time.

3.2 Location information

With your permission, the app collects your device's precise location (latitude and longitude). It is captured at specific points in the delivery workflow — opening or updating an assigned order, and confirming a delivery — so we can calculate delivery distance and estimated time and record where a delivery was completed. The app does not run a background location service, does not request ACCESS_BACKGROUND_LOCATION, and collects nothing while it is closed.

3.3 Photos and camera

When completing a delivery, the app asks you to capture or select images used as delivery proof and, depending on the payment method, payment proof. These images are uploaded and stored against the relevant order record. The camera and photo picker are opened only when you choose to attach an image.

3.4 Order, task and operational data

• Orders and tasks assigned to you, their reference numbers, and status changes you make.
• Customer name, delivery address and related order details needed to complete the job.
• Payment method selected (cash, card, cheque, online, credit or multiple), amounts and transaction references.
• Reasons you select for failed, delayed or returned deliveries, and any notes you enter.
• Timestamps of the actions you take in the app.

Customer information is processed on behalf of Wild North Fish for the sole purpose of fulfilling that customer's order. The app does not collect customer card or bank details — cash-on-delivery amounts are recorded as figures only.

3.5 Expenses and tips

Expense entries you submit (date, category, amount, payment mode, description and status) and tip amounts recorded against your account, including your total expenses and total tips.

3.6 Support requests

If you raise a helpdesk ticket through the app, we collect the subject, description and any details you include, along with your account identity.

3.7 Device and technical information

• Device model, Android version and app version — used for compatibility and update checks.
• Network connection status (mobile / Wi-Fi / offline) so the app can handle connectivity changes.
• A push notification token issued by Firebase Cloud Messaging, used to deliver notifications to your device.
• Diagnostic logs and error information generated while the app runs.

The app does not collect your Android Advertising ID, contacts, SMS, call logs, calendar, microphone audio, or the list of other apps installed on your device.

4 Android permissions

The app requests only the permissions it needs. Runtime permissions are requested in context, with an explanation shown before the Android system dialog. You can grant or revoke each one under Settings → Apps → Wild North Fish Delivery → Permissions, though refusing some will prevent you from completing deliveries.

5 How we use your information

We do not use your information for advertising, ad profiling or cross-app tracking, and we do not sell or rent it. We do not use it for automated decision-making that produces legal or similarly significant effects on you.

6 Google Play data safety

This table mirrors the Data safety disclosure we file in Google Play. “Shared” means disclosure to a separate company for its own purposes — it does not include our service providers, who process data only on our instructions.

All data is encrypted in transit. You can request deletion of your data — see section 12.

7 Legal basis for processing

We process personal data under the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where the EU or UK GDPR also applies to you, we rely on the following legal bases:

• Performance of a contract — to operate the app and manage the delivery work covered by your employment or engagement with us.
• Legitimate interests — to run our delivery operations efficiently, secure our systems, prevent fraud, and evidence that deliveries and payments took place.
• Legal obligation — to keep financial, tax and employment records as required by UAE law.
• Consent — for the runtime permissions in section 4, which you grant at the operating-system level and can withdraw at any time in Android settings.

8 How we share information

We share personal information only where necessary, and never with data brokers. Recipients are:

• Wild North Fish management and operations staff — to allocate work, verify deliveries, approve expenses and manage payroll-related matters.
• Odoo — our backend runs on the Odoo platform, which stores account, order, expense and proof-of-delivery records.
• Google (Firebase Cloud Messaging) — to deliver push notifications to your device.
• Professional advisers — accountants, auditors and lawyers, where required and bound by confidentiality.
• Authorities and legal parties — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims.
• A successor entity — if our business is merged, acquired or reorganised, subject to this policy.

9 Third-party services

The app relies on the following third-party services. Their own privacy terms apply to the data they process:

The app contains no advertising SDKs and no third-party analytics or attribution SDKs.

10 Storage and retention

On your device

The app stores your session token and other sensitive values in Android's encrypted storage, backed by the Android Keystore. Non-sensitive preferences and cached order data are stored locally so the app works smoothly and survives brief connectivity loss. Android auto-backup is disabled for credential storage. Signing out clears your session from the device, and uninstalling the app removes its local data.

On our servers

Records are retained while your account is active, and afterwards only as long as needed for the purposes above:

• Account and profile records — for the duration of your engagement, then 12 months.
• Delivery, proof-of-delivery and payment records — 5 years, to meet UAE accounting and tax record-keeping obligations.
• Expense and tip records — 5 years, for the same reason.
• Support tickets — 24 months after the ticket is closed.
• Diagnostic and access logs — 90 days.

When a retention period ends we delete the information or irreversibly anonymise it.

11 Security

• All communication between the app and our servers uses encrypted HTTPS (TLS) connections.
• Session tokens are held in Android's encrypted secure storage; sessions expire and require re-authentication.
• Access to backend records is restricted to authorised personnel on a need-to-know basis.
• Credentials must not be shared. Tell us immediately if you believe your account has been compromised.

No system can be guaranteed completely secure, but we apply appropriate technical and organisational measures to protect your information, and we will notify you and the UAE Data Office of a qualifying personal data breach as required by law.

12 Account and data deletion

13 Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we are not required to keep it.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Portability — receive your information in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to the UAE Data Office, or to your local data protection authority if you are outside the UAE.

To exercise any of these, contact us using the details in section 17. We respond within the time limits set by applicable law. Because the app is a work tool, deleting operational records such as proof of delivery may not be possible while legal retention obligations apply.

Controlling permissions and notifications on Android

• Permissions: Settings → Apps → Wild North Fish Delivery → Permissions.
• Notifications: Settings → Apps → Wild North Fish Delivery → Notifications, or long-press the app icon → App info.
• Clear local data: sign out from within the app, or Settings → Apps → Wild North Fish Delivery → Storage → Clear storage.
• Remove everything on the device: uninstall the app.

14 International transfers

Our service providers may process and store information outside the United Arab Emirates. Where personal information is transferred abroad, we rely on the safeguards permitted by UAE Federal Decree-Law No. 45 of 2021 — an adequacy determination, or contractual clauses imposing equivalent protection — and, where the GDPR applies, on standard contractual clauses. Our Odoo backend is hosted in data centres operated by Odoo S.A. and its infrastructure providers, and push notifications are routed through Google's Firebase infrastructure.

15 Children's privacy

The app is a workplace tool intended only for authorised staff aged 18 or over, in line with UAE labour law. It is not directed at children and we do not knowingly collect information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

16 Changes to this policy

We may update this policy as the app or the law changes. The “Last updated” date at the top of this page always reflects the current version. If a change materially affects your rights, we will give you notice in the app or by email before it takes effect. Continuing to use the app after an update means you accept the revised policy.

17 Contact us

If you are in the UAE and are not satisfied with our response, you may complain to the UAE Data Office. If you are in the EU or UK, you may lodge a complaint with your national supervisory authority.