Rider Privacy Policy

Introduction

This Privacy Policy applies to delivery riders who use the Toreta Rider app. It explains how we collect, use, disclose, and safeguard your information as a rider partner. This policy is separate from the privacy policy applicable to customers.

By registering and operating as a Toreta rider, you agree to the collection and use of information described in this policy.

Information We Collect

Identity & Contact Information

• Full name
• Phone number
• Email address
• Profile photo
• Date of birth

Identity Verification Documents

• Government-issued ID (Aadhaar, PAN card, or equivalent)
• Driving licence
• Vehicle registration certificate
• Bank account details for earnings payouts

Location Data

We collect precise, real-time GPS location data while you are on an active delivery. This data is used to:

• Show your location to the customer during active deliveries
• Calculate optimal delivery routes
• Verify pickup and drop-off events
• Resolve disputes and support requests

Location collection stops once a delivery is completed and you go offline. We do not track your location when you are not on an active delivery session.

Delivery & Performance Data

• Delivery history (accepted, completed, and cancelled orders)
• Delivery times and distances
• On-time performance and reliability metrics
• Customer ratings and feedback

Device & App Usage Information

• Device model and operating system
• Unique device identifiers
• App version and crash logs
• Push notification token (for delivery assignments)

How We Use Your Information

• Onboarding and verifying your identity as a rider partner
• Assigning and routing delivery orders to you
• Tracking deliveries in real time for customers and our operations team
• Calculating and processing earnings and payouts
• Evaluating performance and maintaining service quality
• Sending delivery assignments, updates, and support communications via the app and WhatsApp
• Resolving disputes between riders and customers
• Improving route optimisation and operational efficiency
• Complying with applicable laws and regulations

Information Sharing and Disclosure

We may share your information with:

• Customers: Your first name and real-time location are shared with the customer during an active delivery so they can track their order
• Operations Team: Our internal staff access delivery and performance data to manage dispatch, resolve issues, and ensure quality
• Payment Processors: Bank account details are shared with our payment partner solely for processing earnings disbursements
• Cloud & Infrastructure Providers: Data is stored securely on Supabase-hosted infrastructure
• Legal Authorities: When required by law, court order, or to protect the rights and safety of our users and partners

We do not sell your personal information to third parties.

Location Data & Background Access

The Toreta Rider app requests access to your device location, including in the background, while you have an active delivery session. This permission is necessary for core app functionality. Specifically:

• Foreground location: used while the app is open to show your position on the map
• Background location: used during an active delivery to keep tracking if you switch apps or your screen locks

You can revoke location permissions at any time in your device settings. Doing so will prevent you from accepting or completing deliveries.

Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including identity documents and bank details, using encryption in transit and at rest. Access to sensitive rider data is restricted to authorised personnel only. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as you are an active rider partner and as required by applicable law (e.g., financial records for taxation purposes). Delivery location history is retained for up to 90 days for dispute resolution purposes. When you cease to be a rider partner and request account deletion, we will delete or anonymise your data except where legally required to retain it.

Your Rights

As a rider partner, you have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated personal data
• Restriction: Request that we restrict processing of your data in certain circumstances
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us using the information below.

Age Requirement

Toreta rider partners must be at least 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that a rider is under 18, we will terminate the partnership and delete associated data promptly.

Changes to This Privacy Policy

We may update this Rider Privacy Policy from time to time. We will notify you of material changes via the app or the contact details on your rider profile. We encourage you to review this policy periodically. Continued use of the Toreta Rider app after changes take effect constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Rider Privacy Policy or how we handle your data, please contact us: