What the D. apps collect, and what we do with it.

Applies to the D. Customer app and the D. Rider app.
Last updated: 8 September 2026

This policy explains what the D. apps collect, why, who it is shared with, how long it is kept, and how to have it deleted. It covers two separate apps published by AppVion Studio:

D. Customer (com.appvionstudio.ddelivery.customer) — used to book and track deliveries.
D. Rider (com.appvionstudio.ddelivery.rider) — used by our delivery riders to accept and complete jobs.

The two apps collect different information. Where that matters, the sections below say which app is being described. AppVion Studio, based in Lahore, Pakistan, is responsible for the data described here.

The short version. We collect what is needed to move a parcel from one person to another, and to pay the rider who moved it. We do not sell your data and we do not use it for advertising. Riders are located continuously while they are on duty — and only while they are on duty. You can delete your account from inside the app or by emailing us.

1. What we collect

1.1 Everyone

Data	Why we need it
Name and profile photo	To identify you to the person on the other side of a delivery. A rider sees the customer's name; a customer sees the assigned rider's name and photo.
Email address	Account identity and sign-in.
Phone number	So the customer and rider can call each other about a live delivery. This is the most important field when a delivery goes wrong.
Notification token	To send push notifications about your delivery. Provided by Google Firebase Cloud Messaging.
Crash and error diagnostics	To find and fix defects. Sent to Google Firebase Crashlytics, tagged with your account's internal ID — never your name, phone or email.

1.2 D. Customer app

Data	Why we need it
Pickup and drop-off addresses, with map coordinates	To calculate the fare, route the rider, and show you where your parcel is.
Saved addresses you choose to store	So you do not have to retype a frequent address. You can delete these at any time in the app.
Precise device location	Only while you are choosing a pickup or drop-off point, to centre the map and offer nearby suggestions. The Customer app does not track you in the background and collects no location when it is closed.
Recipient name and phone number	So the rider can find and contact the person receiving the parcel. If you enter someone else's details, you confirm you are entitled to share them with us for this purpose.
Item details — category, description, quantity, and any photos you attach	To price the delivery, let the rider identify the item, and resolve disputes about what was handed over.
For phone shipments: brand, model, condition, IMEI and declared value	To price insurance cover and identify the exact handset in a loss or damage claim. An IMEI uniquely identifies a device, so we treat it as sensitive and never display it outside your own order.
Chosen payment method (Cash on Delivery, Easypaisa, JazzCash)	To tell the rider how payment will be collected. We do not collect or store card numbers or wallet credentials.

1.3 D. Rider app

Data	Why we need it
Precise location, collected continuously while you are online — including when the app is in the background or the screen is off	To offer you jobs near you, show the customer where their delivery is, and confirm you were at the pickup and drop-off points. See section 2.
CNIC, driving licence and vehicle documents; vehicle number plate	To verify you are legally entitled to ride, and to establish who is responsible for goods in transit. These are government identity documents and are treated as our most sensitive category — see section 5.
Pickup and drop-off videos, and the recipient's signature	Proof of delivery. These protect you as much as the customer when a parcel is disputed.
Earnings, wallet balance and cash-on-delivery settlement records	To pay you correctly, and to reconcile cash you are holding on the company's behalf.

2. Location, explained plainly

This is the most sensitive thing the apps do, so it gets its own section rather than a line in a table.

Customers. Location is read only while you are actively picking a point on the map. Nothing is collected when the app is closed or in the background.
Riders. When you set yourself Online, the app starts a foreground service that reports your position to our servers roughly every ten seconds, and keeps doing so while the app is in the background. A permanent notification is shown the entire time this is happening — if that notification is not visible, location is not being collected.
Riders can stop it at any time by going Offline. Collection stops immediately.
Your live position is visible to the customer only for a delivery you are actively assigned to, and to our operations staff.
We do not build a movement history or profile from rider location. Only your most recent position is stored, and each update overwrites the last.

Android asks for your permission before any of this happens, and the app explains what it is about to do before that prompt appears. You can withdraw the permission at any time in Android Settings, though the Rider app cannot offer you jobs without it.

3. How we use your information

To create and operate your account.
To price, dispatch, route, track and complete deliveries.
To let the customer and rider contact each other about a live delivery.
To calculate rider earnings and reconcile cash-on-delivery amounts.
To investigate loss, damage, theft and disputes, and to prevent fraud and abuse.
To send operational notifications about your own deliveries.
To diagnose crashes and fix defects.
To meet legal, tax and accounting obligations.

We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.

Recipient	What they receive
The other party to your delivery	A customer sees the assigned rider's name, photo and phone number. A rider sees the customer's name and phone number, the addresses and the item details — but only once they have accepted the job.
Supabase	Hosts our database, file storage and authentication. Substantially all of the data described above is stored on their infrastructure.
Google — Maps, Places and Routes	Addresses and coordinates, to draw maps, suggest addresses and calculate routes.
Google — Firebase Cloud Messaging and Crashlytics	Your notification token; crash reports and diagnostic events tagged with your internal account ID.
Google — Sign-In (Customer app)	Used to authenticate you. Google tells us your email, name and profile photo. We never see your Google password.
Law enforcement and regulators	Only where we are legally required to, or where it is necessary to investigate a serious incident such as theft of a shipment.

Some of these providers process data outside Pakistan. By using the apps you accept that your information may be stored and processed abroad, under those providers' own security and privacy commitments.

5. How we protect it

All traffic between the apps and our servers uses HTTPS. The apps refuse unencrypted connections outright.
Your login session is stored on your device in Android's hardware-backed encrypted storage.
The Rider app's on-device database — which can hold customer names, addresses and item details while offline — is fully encrypted with a key held in the Android Keystore.
Access to records in our database is enforced at the database level, row by row. A customer's account can read only that customer's own orders; a rider can read only jobs they are assigned to or eligible for.
Rider identity documents (CNIC, driving licence, vehicle papers) are held in a private storage area that is not publicly readable. They are accessible only to the rider who uploaded them and to authorised AppVion Studio staff.
Photographs uploaded through the apps are re-encoded before upload, which removes embedded metadata such as GPS coordinates from the original camera file.

No system is perfectly secure and we do not claim otherwise. If a breach affects your personal data, we will notify affected users and the relevant authorities without undue delay.

6. How long we keep it

Category	Retention
Your profile — name, phone, photo, saved addresses	Until you delete your account, then erased.
Rider identity documents	Until you delete your account, then erased.
Rider live location	Only the most recent position is stored; each update overwrites the last, and it is deleted when you delete your account.
Delivery, fare, earnings and cash-settlement records	Retained after account deletion, in anonymised form, because they are financial records. See below.
Proof-of-delivery videos and signatures	Retained with the delivery record for dispute and claim purposes.
Crash diagnostics	Retained by Google Firebase under its own retention schedule.

We are direct about the exception because it matters: we cannot delete completed delivery and payment records. They evidence money that changed hands, cash a rider collected on our behalf, and goods we were responsible for. When you delete your account we strip your name, phone number, photo and saved addresses from those records so they can no longer be connected to you, but the transaction itself remains in our books.

7. Your choices and rights

See or correct your information. Your profile is editable inside the app. For anything else, email us.
Delete your account. See section 8.
Turn off location. Android Settings → Apps → D. → Permissions. Riders can also simply go Offline.
Turn off notifications. Android Settings, or the app's own notification settings.
Complain. Email us first — we would rather fix it. You may also raise the matter with the relevant Pakistani authority.

8. Deleting your account

You can delete your account in two ways:

In the app: open Profile and choose Delete my account.
Without the app: use the account deletion page.

Deletion is refused while you still have a delivery in progress, and for riders, while you are still holding cash on delivery that has not been settled with the office. Finish or settle those first. Full detail of what is erased and what is retained is on the deletion page.

9. Children

The D. apps are not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has created an account, email us and we will remove it.

10. Changes to this policy

If we change how we handle your data we will update this page and move the “last updated” date. Where a change materially affects you, we will also notify you in the app.

11. Contact us

Privacy questions and data requests: privacy@appvionstudio.com
General support: support@appvionstudio.com
WhatsApp: +92 346 7277143
AppVion Studio, Lahore, Punjab, Pakistan