Privacy Policy — DreamHome Driver
This Privacy Policy explains how Dhammatek Limited("we", "us", "our") collects and uses personal data in the DreamHome Drivermobile application (the "App"). The App is an internal tool provided to our delivery drivers to receive and complete assigned delivery routes. It is not intended for the general public.
Who we are
- Data controller: Dhammatek Limited
- Privacy contact: accounts@dhammatek.co.uk
Data we collect
| Data | Purpose |
|---|---|
| Driver account & sign-in details (name, username, and a password/PIN held securely on the device) | Authenticate the driver and link activity to the correct account |
| Precise location, including in the background — from the moment you sign in until you sign out, and it continues while the App is minimised, the phone is locked, or the App has been closed/swiped away (on Android an ongoing notification stays visible the whole time) | Show live delivery progress to dispatch, sequence routes, and stamp proof-of-delivery events with location |
| Delivery events — arrived, departed, delivered, failed — with timestamps | Record the status of each delivery and provide customer updates |
| Proof of delivery — photos, signatures (load and delivery), recipient name, delivery notes | Evidence that a delivery was completed and to resolve disputes |
| Barcode / parcel scans (camera) | Confirm the correct parcels are loaded and delivered |
| Messages between driver and dispatcher (where messaging is enabled) | Operational communication during a route |
| Device & diagnostic data — app version, device model/OS, and crash logs (only where crash reporting is enabled) | Diagnose crashes and keep the App stable |
| A push-notification token for your device (a random identifier issued by Google/Apple, not linked to your phone number) | Tell you a route has been assigned to you, including when the App is closed |
The App does not use your data for advertising, and we do not sell personal data.
Location — when it runs
The App collects precise location for as long as you are signed in — it starts when you sign in and stops when you sign out. It is not limited to the time you have a route open on screen.
- Android:location runs through a foreground service that keeps a persistent notification visible the entire time ("DreamHome Driver· Running — location & data sync"), so you always know it is active. It continues while the App is minimised, the phone is locked, or the App has been swiped away from recent apps. It stops when you sign out (or your session ends).
- iOS: location may likewise continue in the background while you are signed in, for the same purposes.
Before any collection begins, the App asks for your permission and shows an in-app disclosure explaining this use. To stop location collection, sign out of the App. Location is never collected after you sign out or uninstall the App.
Route notifications
So that you find out a route has been assigned to you without having to check the App, we register a push-notification token for your device and use it to send you a short alert (for example, "New route assigned — Route 1234, scheduled for tomorrow"). These alerts contain no customer names, addresses or delivery details.
Because they are intended to reach you between shifts, these route alerts can still arrive after you sign out— signing out stops location collection, but it does not stop route notifications. To stop them, turn off notifications for the App in your phone's settings, or uninstall the App.
How we share data
- Internal dispatch and admin users of our operations system, to plan and monitor deliveries.
- Hosting and storage providers that run our servers and store files on our behalf (application hosting and database, and private object storage for photos and signatures).
- A crash-reporting provider (Sentry) — only where crash reporting is enabled for the build.
- Customers — only the delivery information needed for delivery tracking and proof of delivery.
- Authorities or advisers where required by law.
Legal basis (UK GDPR)
We process this data on the basis of our legitimate interests in operating a delivery service and, where the driver is our employee or contractor, for the performance of that working relationship. Precise location is processed for route management and delivery evidence during working activity only.
Security
- All data is transmitted over encrypted connections (HTTPS/TLS).
- Access to the operations system is role-based and restricted to authorised staff.
- Delivery photos and signatures are held in private storage, not publicly accessible.
- Sign-in credentials are stored securely on the device.
Retention
- Delivery and proof-of-delivery records are retained for business, legal and audit purposes.
- Driver account data is retained while the account is active.
- Diagnostic and crash logs are retained for a limited diagnostic period.
Your rights and deletion
Subject to UK data-protection law, you may request access to, correction of, or deletion of your personal data. Because delivery and proof-of-delivery records must be kept for legal and audit reasons, those specific records may be retained even after an account is closed. To make a request, contact accounts@dhammatek.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Changes
We may update this policy from time to time. The "Last updated" date at the top shows the latest revision.