Privacy Policy

1. Introduction & Scope

Dairy Fresh ("we," "our," or "us"), operated under Naqsh Imprints, is committed to safeguarding the personal privacy and operational confidentiality of all users of our mobile applications, web platforms, and internal testing channels.

This Privacy Policy applies to the Dairy Fresh mobile application (package com.naqsh.dairyfresh) across all user roles—including Customers, Field Delivery Riders, Dispatch Coordinators, and Operations Administrators—as well as internal field testers evaluating pre-release Android APK builds.

2. Information We Collect

We collect information you provide directly, data generated through application operations, and device diagnostics necessary for reliable morning logistics:

• Account & Contact Identifiers: Full name, telephone number, email address, password hash, and assigned organizational role (Customer, Rider, Coordinator, Admin).
• Delivery Addresses & Doorstep Pins: Physical residential or commercial delivery address, sector/block, gate number, and precise geographic coordinates (latitude and longitude) for doorstep dropoff.
• Subscription & Order Data: Standing daily milk quotas (liters, milk category such as Cow or Buffalo), one-time extra bottle requests, scheduled vacation pause dates, delivery status timestamps, and bottle return deposit counts.
• Device & Connection Telemetry: Device hardware model, operating system version (e.g., Android 14), unique installation identifiers, cellular network operator, and application crash reports via Firebase Crashlytics.

3. Geolocation & Live Tracking Disclosures

Location data is fundamental to the operation of a physical dawn delivery logistics network. We handle location with strict proportionality:

• Customer Location: Captured once during initial address registration or delivery pin modification to establish the physical drop point and generate the permanent gate QR code. Customer locations are never tracked continuously in the background.
• Field Rider Location (Active Shift Only): While on-duty between 5:00 AM and 7:00 AM, the rider's device transmits continuous GPS updates to calculate turn-by-turn routes and display live delivery radar to dispatch coordinators.
• 20-Meter Geofence Enforcement: When a rider scans a doorstep QR code, the app performs a local trigonometric distance verification against the customer's registered coordinates. The drop cannot be marked complete unless the device is physically within 20 meters of the customer's doorstep.
• Zero Off-Duty Tracking: When a rider toggles "Duty Off" or closes the shift, all background GPS tracking services immediately terminate. No location data is gathered outside assigned delivery hours.

4. Camera Access & QR Scanning

The Dairy Fresh mobile application requests Android Camera permissions (android.permission.CAMERA). This access is strictly restricted to:

• Scanning permanent QR codes affixed to customer doorsteps or gates to provide tamper-proof proof of delivery.
• Scanning equipment or crate barcodes during warehouse morning dispatch.

The camera stream is processed locally in real time by the device's optical scanner. Dairy Fresh does not take covert photographs, record video streams, or transmit raw camera captures to external servers without your explicit knowledge.

5. How We Use Your Information

We process collected data exclusively for the following operational and technological purposes:

• To sequence, route, and execute daily morning milk deliveries prior to the 6:00 AM customer delivery SLA.
• To send automated push notifications confirming delivery completion, bottle pickup, or vacation status changes.
• To manage bottle return credits and maintain an accurate accounting ledger between customers and the dairy farm.
• To enable coordinators to reassign delivery stops in real time in the event of rider vehicle breakdown or weather delays.
• To detect application memory leaks, database deadlocks, or network timeouts in pre-release tester APKs.

6. Offline Local Storage & Database Sync

To withstand weak cellular connectivity in basements and rural outskirts, Dairy Fresh utilizes an offline-first architecture powered by Drift (SQLite) on the local device.

Delivery logs, pending QR scans, and local quota edits are recorded immediately in an encrypted local database. When network connectivity is re-established, the app synchronizes queued transactions securely with Cloud Firestore using transactional idempotency keys. Local database contents are wiped upon user logout or application uninstallation.

7. Third-Party Service Providers

We partner with trusted enterprise cloud infrastructure providers to operate the platform. Each provider processes data under strict confidentiality agreements:

• Google Cloud Platform & Firebase: Provides user authentication (Firebase Auth), real-time database synchronization (Cloud Firestore), push notifications (Firebase Cloud Messaging), and crash reporting (Firebase Crashlytics).
• Geoapify & MapTiler: Provides geocoding, reverse geocoding, street vector tiles, and route distance calculation algorithms.

8. Data Security & Encryption

We implement comprehensive technical and organizational safeguards to protect your personal and operational information:

• All network communications between mobile devices, backend APIs, and Firebase servers are encrypted using Transport Layer Security (TLS 1.3).
• Database access is strictly governed by Cloud Firestore Security Rules, ensuring that customers can only view their own delivery records, while riders access only their active route stops.
• Release APK packages are digitally signed with an RSA-3072 bit PKCS12 keystore to guarantee binary integrity and prevent unauthorized code injection.

9. Internal Tester Telemetry & Feedback

If you participate as an internal tester using directly downloaded APKs:

• Pre-release builds may emit verbose diagnostic logs to help developers trace database transactions, polyline rendering performance, and background service lifecycle states.
• Tester feedback submitted through the application or web portal (including device model, Android version, and reproduction steps) is retained solely for debugging and software enhancement.
• Test accounts are populated with sanitized demonstration data or real pilot accounts authorized by Dairy Fresh management.

10. Your Rights & Choices

Depending on your jurisdiction, you possess the following rights regarding your data:

• Access & Correction: You may inspect and modify your contact details, delivery address, and daily milk quotas directly in the app's Profile and Settings screens.
• Push Notifications: You can enable or disable promotional or non-critical push alerts in your Android system notification settings.
• Account Deletion: You may request complete erasure of your profile and historical records by contacting our support team or initiating deletion under Settings → Account → Delete Profile.

11. Contact & Data Protection Officer

For privacy inquiries, data deletion requests, or questions regarding our internal testing protocols, please reach out to: