Privacy Policy: Kiwi Eats Drivers
This covers information about you, the driver. Information about customers is covered separately and is not yours to control; see "Customers' information" below.
Who holds it: Tauranga Food Limited, NZBN 9429046588135, 70 Tynan Street, Te Puke 3119. Privacy Officer: Charandeep Singh, info@kiwieats.co.nz.
What we hold about you
Everything, and nothing else:
| What | Why | Where it comes from |
|---|---|---|
| Email address | It is your login, and how we send you a sign-in code | You |
| Name (optional) | So the store knows who is collecting an order | You |
| Phone number (optional) | So a store can reach you about a delivery in progress | You |
| Which stores you deliver for | To decide which jobs you are offered | Us |
| Notification token for your phone | To tell you a delivery is available | Your device |
| Your notification and availability preferences | To respect them | You |
| The deliveries you accepted and completed | To calculate what you are owed, and to resolve disputes | The system |
| Sign-in codes and session tokens | To sign you in and keep you signed in | The system |
| Where you were at three moments of a delivery you accepted: when you accept it, when you reach the store, and when you deliver it | So the store can see how far away you are, and as part of the record of that delivery | Your phone, only if you allow location |
| The IP address and the phone and app details sent when you accept one of these documents | A record of when you agreed, and from what | Your device |
Sign-in codes are stored hashed, never in readable form, and are deleted 7 days after they expire. Old session tokens are deleted after 30 days.
What we do NOT hold
Stated explicitly, because people reasonably assume otherwise about delivery apps:
- We do not track you. The app records where you are only at the three moments in the table above: when you accept a delivery, when you reach the store, and when you deliver it. It takes one reading each time, only while the app is open, never in the background and never between deliveries. If you do not allow location, the app records none and you can still deliver. One exception that is not ours to control: on Android, a proof-of-delivery photo can keep the location, time and phone model that your phone's camera saved in it, even if you do not allow Kiwi Eats to use your location. Your camera's own location setting decides that. There is no map of where drivers have been. If that ever changes (a dispatch feature that finds the closest driver would need more), we will reissue this policy and ask you to accept it before turning it on.
- We do not record how fast you drive, or anything else about how you drive.
- We do not have a driver rating or performance score. Nothing scores you, and nothing shows a star rating to anyone.
- We do not hold your bank details in this app. If that changes, we will reissue this policy first.
- We do not sell your information to anyone, ever.
Why we can hold it
To run the delivery service you contract with us to provide: to offer you work, tell you about it, let the store know who is collecting, work out what you are owed, and sort out problems. We do not use it for anything else.
Who else sees it
- The store you are delivering for sees your name, for that delivery, and where you were at the three moments above. The app does not give the store your phone number, though a store may already have it from when you first spoke to them.
- The store you delivered for is also told what you earned from the deliveries you did for it, so that it can pay you. Each store pays its own drivers (Independent Contractor Agreement, clause 4), and holds the bank details it needs to do that itself: they do not pass through this app.
- Our hosting and email providers (Amazon Web Services, in Sydney) hold the data on our behalf. Your sign-in code is sent by email through them.
- The notification service (Expo) receives your device token to deliver notifications. It does not receive your name, your email, or any customer's details.
- Nobody else, unless the law requires it.
Your information is held in Australia (AWS Sydney), by our hosting provider on our behalf.
How long we keep it
- Your account: while it is open. After you close it we keep the record of deliveries, and your name and phone number only until anything still open between you and a store is settled (see below).
- Sign-in codes: deleted 7 days after they expire.
- Session tokens: deleted 30 days after they expire.
- Delivery records: kept. They are the record of work done and money owed, both of us may need them later, and New Zealand tax law requires business records to be kept for 7 years.
Closing your account
You can delete your account from the app at any time. When you do:
- your email address is released, so you could sign up again later;
- your name and phone number are removed. If a store still owes you money, or you still have its cash or an order, we keep them until that is settled, then remove them;
- your availability preferences and vehicle details are deleted;
- the record of deliveries you completed survives, because it is also the store's record of work done and money paid, and deleting it would erase their books as well as yours.
Customers' information
While delivering you see a customer's name, address and phone number. That is not your information and this policy does not give you rights over it.
- You see a customer's full address only after you accept a delivery. Before that you see the suburb.
- Your own trip history shows only the suburb afterwards.
- Proof-of-delivery photos are photographs of a customer's property. They are kept 30 days and then deleted automatically. If a customer asks us to delete one sooner, we do, and that request is theirs to make, not yours, because it is their home.
Your rights
Under the Privacy Act 2020 you can ask what we hold about you and ask us to correct it. Contact the Privacy Officer above. We will respond within 20 working days.
If you are not happy with how we handle it, you can complain to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.
If something goes wrong
If information about you is lost or exposed in a way that could cause you serious harm, we will tell you, and we will notify the Privacy Commissioner as the Privacy Act requires.
Changes
If we change this policy we will show you the new version in the app and ask you to accept it. Accepting this version is not acceptance of a later one.