Privacy Policy

Welcome to the Mallu Order Driver application ("App"), operated by Mallu Tiffin House ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile driver application for delivery management services.

By registering an account, logging in, or using the App, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any provision, please discontinue use of the App immediately.

We collect the following categories of information to provide and improve our delivery management services:

Data Category	Specific Data	Purpose
Identity Data	Full name, email address, phone number, profile photograph	Account creation, authentication, and driver identification
Vehicle Data	Vehicle registration number	Delivery fleet management and order assignment
Authentication Data	Login credentials (email/mobile and password), session tokens	Secure access control and session management
Location Data	GPS coordinates, reverse-geocoded address	Delivery routing, area-based order assignment, and operational logistics
Order Activity Data	Pickup confirmations, delivery statuses, timestamps, order history	Delivery tracking, performance analytics, and dispute resolution
Device Data	FCM token, device type, operating system version	Push notification delivery and app compatibility
Media Data	Profile images uploaded via camera or gallery	Driver identification within the platform

Your information is used for the following operational and business purposes:

• Authentication & Access: To verify your identity, maintain secure login sessions, and manage bearer token-based authentication.
• Delivery Operations: To assign orders, facilitate pickups, track delivery status updates, and manage real-time order workflows.
• Location Services: To determine your current position for route optimization, area-based order filtering, and displaying your approximate location on the dashboard.
• Push Notifications: To send real-time order alerts, delivery reminders, status updates, and system announcements via Firebase Cloud Messaging (FCM).
• Profile Management: To allow you to view and update your personal details, vehicle information, and profile image within the app.
• Performance Analytics: To display your delivery and pickup statistics on the dashboard for self-assessment and operational insights.
• Payment Tracking: To facilitate and record payment statuses associated with your assigned deliveries.
• Customer Support: To assist with issue resolution, order disputes, and account recovery.

We employ industry-standard measures to protect your personal data:

• Local Storage: Session tokens, user preferences (e.g., theme settings, remember-me credentials), and cached profile data are stored securely on your device using encrypted local storage mechanisms.
• Transport Security: All data transmitted between the App and our servers is encrypted via HTTPS/TLS protocols to prevent interception.
• Token-Based Authentication: API communications are secured using bearer token authentication, with automatic session invalidation upon detecting unauthorized access (401/400 status codes).
• Session Management: On logout, all cached session data, authentication tokens, and locally stored images are permanently cleared from your device.

The App requests access to your device's location services to provide delivery-related functionality:

• Purpose: Location data is used to display your current area, optimize delivery routes, and support area-based order management.
• Consent: Location access is requested at runtime through your device's permission system. You may deny or revoke this permission at any time via your device settings.
• Fallback: If location access is denied, the App will continue to function with limited location-dependent features and display a "Location Denied" indicator.
• Accuracy: We use medium-accuracy GPS positioning to balance functionality with battery optimization.

The App uses Firebase Cloud Messaging (FCM) to deliver push notifications. These notifications may include:

• New order assignments and pickup requests
• Delivery status updates and reminders
• System maintenance and operational announcements

You can manage notification preferences through your device's system settings. Disabling notifications will not affect the core functionality of the App, but you may miss time-sensitive delivery alerts.

The App may request access to your device's camera and photo library for the following purposes:

• Profile Image: To capture or select a profile photograph for driver identification within the platform.
• Barcode Scanning: To scan order barcodes during the pickup process using the device camera.

Camera and gallery access is requested only when you initiate these specific actions. Images are compressed for efficient upload and are transmitted securely to our servers.

The App integrates the following third-party services, each governed by their own privacy policies:

• Firebase (Google): Used for push notification delivery (FCM), crash analytics, and app performance monitoring. Firebase may collect device identifiers and usage data. Firebase Privacy Policy →
• Google Geocoding API: Used for converting GPS coordinates into human-readable addresses. Location coordinates are transmitted to Google for reverse geocoding. Google Privacy Policy →

We recommend reviewing the privacy policies of these third-party providers to understand how they handle your data.

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Active Accounts: Your data is retained as long as your driver account remains active on our platform.
• Order Records: Delivery and order data may be retained for operational auditing, dispute resolution, and legal compliance purposes.
• Post-Termination: Upon account deletion or deactivation, your personal identifiable information will be removed from active systems within a reasonable timeframe, subject to legal retention requirements.
• Local Data: Session data stored on your device is immediately cleared upon logout or app uninstallation.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Update or correct inaccurate personal information through the in-app profile editor or by contacting us.
• Deletion: Request the deletion of your personal data, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Withdrawal of Consent: Revoke previously granted permissions (location, camera, notifications) through your device settings at any time.
• Objection: Object to certain processing activities where applicable under law.

To exercise any of these rights, please contact us using the details provided in the Contact section below.

The Mallu Order Driver App is intended exclusively for authorized delivery personnel aged 18 years or older. We do not knowingly collect personal information from children under 18. If we become aware that a minor has provided us with personal data, we will take steps to delete such information promptly.

We reserve the right to update or modify this Privacy Policy at any time. When changes are made:

• The "Effective Date" at the top of this document will be updated accordingly.
• Material changes may be communicated via push notifications or in-app announcements.
• Continued use of the App after any modifications constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

• Business Name: Mallu Tiffin House
• Website: mallutiffinhouse.com
• Application: Mallu Order Driver (com.mallu.driver)