Draft — to be reviewed by an Australian lawyer before commercial launch.
Privacy Policy
Who we are, and whose data this is
DelPod is operated by Biondi Fresh Foods Pty. Ltd. (“we”, “us”). DelPod is used by delivery businesses (“the company”) to record proof of delivery.
The company owns its delivery data. We process it on the company’s behalf. If you are a driver, or a customer receiving a delivery, and you want to see, correct or delete information about you, ask the company you deal with first — they decide what happens to their records. You can also contact us at delpodapp@gmail.com and we will help them act on it.
What DelPod records
When a driver saves a delivery, the app records:
- the customer name as it appears on the run sheet, and the run and driver name for that shift;
- the date and time;
- photographs taken by the driver at the drop, and a signature where one is captured;
- the phone’s location at that moment (see below);
- for a credit note: the items, quantities, reason, and the customer and invoice numbers from the paper docket.
Run sheets are read by text recognition so the stops can be listed. Dollar amounts are stripped during that step and are never stored.
Location
DelPod does not track vehicles or drivers. There is no background location tracking, and the app does not ask for background location permission — only “while in use”.
A single location reading is taken at the moment a driver:
- saves a delivery or marks one as undeliverable;
- raises a credit note or reports vehicle damage;
- completes a vehicle check;
- opens Today’s run, so the app can show how far away each remaining stop is. This reading is used on the phone to sort and label the list and is not stored with any record.
Between those moments the app records nothing about where a phone is.
Photographs
Delivery photographs are stored in Google Cloud Storage in Australia and are visible to the company through its dashboard. A copy also stays on the driver’s phone.
Links you can share
Two kinds of link can be copied out of DelPod and sent to a customer:
- A proof link for a single delivery, copied from the dashboard.
- A credit note link for a single credit.
Anyone holding one of these links can open that one record without signing in. That is what makes them useful to send to a customer, and it means they should be treated like any other document you email: the link is the key. Each link opens one record and nothing else — it cannot be used to browse, list or search anything.
The driver app no longer sends a link when a credit is shared; it sends the credit itself as a plain text message. Links already sent continue to work.
Who else is involved
We use these providers, and no others. We never sell data, and we never share it for advertising.
- Google Firebase — the database, file storage and sign-in. Data is held in Google’s Australian region (
australia-southeast1). - Google Cloud Vision — reads the text on a photographed run sheet so the stops can be listed.
- Resend — sends us an email when someone uses the contact form on this website, where that feature is switched on. It is not used for delivery data.
- Apple and Google — distribute the app through their stores.
How long data is kept
- Deliveries, photographs and credits are kept while the company’s account is active.
- If a company cancels, it may request an export within 30 days. Data is deleted 90 days after cancellation.
- Credit notes are kept for 365 days.
- On the driver’s phone: deliveries and their photographs are removed at the end of each day, credit notes after 28 days, and run sheets after 14 days.
What the phone keeps, and for how long
Each night, the app removes the previous days’ deliveries and their photographs from the driver’s phone. The copy in the company’s account is the record from then on, and the office dashboard is where deliveries are read.
Nothing is removed from a phone until the app has checked with the server and been told the record is there. If that check fails for any reason — the phone is out of signal, the server does not answer, or the record turns out to be missing — the phone keeps its copy, for as long as it takes. A delivery is only ever deleted in one place at a time.
Credit notes stay on the phone for 28 days after they reach the office, and scanned run sheets for 14 days. A driver can still raise a credit against an older delivery: the app looks that delivery up from the company’s account.
Uninstalling the app, or clearing its data, removes everything it holds on that phone immediately.
Security
Access is controlled server-side: each company’s records can only be read or written by that company, enforced by rules on the database rather than by the app. Data is encrypted in transit and at rest by Google.
Access, correction and deletion
Email delpodapp@gmail.com. If the request concerns a company’s delivery records we will refer it to that company, who decides.
Complaints
If you are not satisfied with how we have handled a privacy matter, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes materially we will update the date above and tell companies using DelPod.