Privacy Policy

This policy explains clearly how we handle your personal data across all Bahiran Delivery apps.

We collect only what we need to operate our delivery service — your identity, location while active, and payment details. We share your data only during active deliveries with customers, and with trusted service providers. You have full control and can access, correct, or delete your data at any time.

Scope & Application

What This Policy Covers

1. This Privacy Policy applies to all Bahiran Delivery mobile applications (User, Driver, and Restaurant apps), all services provided through these apps, and all personal data processed in connection with the service.

Key Definitions

Information We Collect

Information You Provide

Account Registration

Financial Information (Drivers)

1. Bank account details (account number, bank name, holder name).
2. Mobile money accounts (CBEBirr, Telebirr).
3. Payment preferences and withdrawal history.

Information Collected Automatically

1. Location Data: Foreground: Precise GPS while navigating to deliveries, updated every 3–5 seconds. Background: Continuous tracking when you are "online" for order matching and proximity alerts.

Device & Technical Data

1. Device model and operating system version.
2. Unique device identifiers and IP address.
3. App version and crash reports.

Usage & Activity Data

1. Order acceptance and completion rates.
2. Delivery times and routes taken.
3. App interaction patterns and session duration.

Legal Basis for Processing

1. Contractual Necessity. Account creation, order processing, payment calculation, and service communication.
2. Legitimate Interests. Fraud prevention, service improvement, analytics, and dispute resolution.
3. Legal Compliance. Tax reporting, regulatory compliance, and law enforcement requests.
4. Consent. Marketing communications, background location tracking, and specific third-party sharing.

How We Use Your Data

Core Service Operations

1. Order Management: Match drivers with delivery requests, provide navigation, verify completion.
2. Payment Processing: Calculate earnings, process withdrawals, generate statements.
3. Communication: Send OTP codes, order notifications, proximity alerts, account updates.

Safety & Security

1. Verify your identity and prevent impersonation.
2. Detect and prevent fraudulent activities.
3. Monitor for suspicious account behavior.
4. Investigate and resolve disputes.

Service Improvement

1. Analyze usage patterns to improve app features.
2. Optimize delivery routing algorithms.
3. Develop new products and services.

Information Sharing

Shared During Active Deliveries

1. Your first name and last initial.
2. Phone number (may be masked).
3. Real-time location while en route.
4. Profile photo and driver rating.

Service Providers

1. Legal Disclosures: We may disclose your information when required by law: subpoenas, court orders, government investigations, or to protect the safety of any person.
2. We Never Sell Your Data: Bahiran Delivery does not sell, rent, or trade your personal data to third parties for their marketing purposes.

Data Retention

1. Account Deletion: Upon deletion: active personal data removed within 30 days, legally required records retained per law, backup copies purged within 90 days.

Data Security

Technical Safeguards

1. Encryption in Transit: All data protected by TLS 1.3.
2. Encryption at Rest: Sensitive data encrypted using AES-256.
3. Passwords: Stored using bcrypt hashing — never in plain text.
4. Access Controls: Role-based access control, MFA for admin access.
5. OTP Security: Time-limited codes via AfroMessage, max 5 attempts.

Organizational Safeguards

1. Employee security training and confidentiality agreements.
2. Background checks for personnel with data access.
3. Incident response procedures and disaster recovery plans.
4. Data Breach Response: In the event of a breach: we will investigate and contain promptly, notify affected users within 72 hours, and report to regulatory authorities as required.

Your Rights

1. Access & Portability. Request a copy of your personal data in a portable, machine-readable format.
2. Correction. Update or correct inaccurate data through your profile settings at any time.
3. Deletion. Request deletion of your account and associated personal data.
4. Opt-Out. Opt out of marketing communications and non-essential data collection.

How to Exercise Your Rights

1. In-App: Profile → Settings → Privacy.
2. Email: bahiran@gebetatech.com.
3. Response time: Within 30 days of a verified request.

Location Services

1. Why We Need Location: Location data powers our entire delivery service: real-time navigation, customer live-tracking, order matching by proximity, distance-based fare calculation, and delivery analytics.

Background Location

1. When you are "online" in the Driver app, background location is active even when the app is minimized. This is required for order matching and proximity alerts.
2. Stop Background Tracking: Go "offline" in the app, log out, or revoke location permission in your device settings. Note: revoking location permission disables core delivery functionality.

Device Permissions

Android Permissions

1. Fine Location (ACCESS_FINE_LOCATION). Precise navigation for deliveries.
2. Background Location (ACCESS_BACKGROUND_LOCATION). Tracking while online with app minimized.
3. Camera (CAMERA). QR code scanning for order verification.
4. Notifications (POST_NOTIFICATIONS). Order alerts and delivery updates.
5. Foreground Service (FOREGROUND_SERVICE). Continuous location service when online.
6. Vibration (VIBRATE). Alert for new incoming orders.

iOS Permissions

1. Impact of Denying Permissions:
   • Location: Cannot accept or complete deliveries
   • Camera: Cannot scan QR codes (manual entry required)
   • Notifications: Will miss order alerts and updates

Third-Party Services

Integrated Services

1. Mapping & Navigation: Google Maps Platform.
2. Payment Processing: Chapa, CBEBirr, Telebirr.
3. SMS & OTP: AfroMessage API.
4. Infrastructure: MongoDB Atlas, Redis Cloud.
5. Push Notifications: Firebase Cloud Messaging (FCM).

International Transfers

1. Your data is primarily stored in Ethiopia. When transferred internationally, we ensure appropriate safeguards including standard contractual clauses and data processing agreements.

Children's Privacy

1. Our service is strictly for adults aged 18 and older. We do not knowingly collect personal data from minors.

Policy Updates

1. We may update this policy at any time. Material changes will be communicated via in-app notification, email, and banner notices at least 7 days before taking effect.

Contact Us

1. Privacy Questions: bahiran@gebetatech.com
2. Data Protection Officer: bahiran@gebetatech.com
3. General Support: bahiran@gebetatech.com
4. Phone Support: +251 919 444 499

By using Bahiran Delivery apps, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.