About This App

KAS Driver is a private app for authorised delivery drivers of KAS Retail Group. It is not a consumer app — you sign in with an account created for you by your store manager. This policy explains how we handle your data when you use the app.

1. Data Controller

2. Data We Collect

Driver Account Information

• Name, email address, and phone number (set up by your store manager)
• Vehicle type and vehicle registration
• Assigned store

Location Information

• Your device location while the app is in use and you are on shift, used to show your position on the map, calculate delivery routes and ETAs, and let the store and customer see live delivery progress
• We do not track your location in the background or when you are off shift / signed out

Delivery & Proof-of-Delivery Data

• Orders assigned to you and their status (assigned, picked up, on the way, delivered)
• Proof-of-delivery photos and notes that you choose to capture
• Delivery-issue reports and any photos you attach
• Age/ID verification confirmations for restricted items (Challenge 25)
• Your delivery counts and earnings totals

Camera & Photos

• Camera and photo access is used only to capture proof-of-delivery and delivery-issue photos. Photos are uploaded to secure storage and linked to the relevant order.

Device & Technical Information

• Device type, operating system, and app version
• Push notification tokens (for delivery assignments and updates)
• Authentication identifiers

3. Legal Basis for Processing

• Contract / Employment (Article 6(1)(b)): To assign and manage your deliveries as part of your work for KAS Retail Group
• Consent (Article 6(1)(a)): For location, camera, and photo access (which you grant via device permissions)
• Legitimate Interest (Article 6(1)(f)): To operate the delivery service, keep customers informed, and ensure security
• Legal Obligation (Article 6(1)(c)): For age-verification compliance and record-keeping

4. How We Use Your Data

• Show your assigned deliveries and let you update their status
• Calculate optimised routes, distances, and ETAs
• Share your live location with your store and the customer during an active delivery
• Send delivery assignments and updates via push notification
• Capture and store proof of delivery
• Verify age for restricted items (alcohol, tobacco, vapes)
• Track your delivery totals and earnings
• Improve the app and ensure security

5. Data Sharing

We share your data only as necessary with:

• KAS Retail Group / your store — to manage deliveries and your driver account
• Firebase (Google Cloud) — authentication, database, file storage, and push notifications
• Expo — app delivery and push notification routing
• The customer — limited live-delivery information (such as driver name and live location) during their active delivery

6. Data Retention

• Account data: Retained while you are an active driver, then removed on request
• Delivery & proof-of-delivery records: Retained for operational and legal record-keeping (up to 7 years)
• Live location: Not stored permanently — only your latest position is held while on shift

7. Your Rights Under UK GDPR

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction & Objection — limit or object to certain processing
• Data Portability — receive your data in a portable format
• Withdraw Consent — revoke location/camera permissions at any time in your device settings

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Data Security

• TLS encryption for all data in transit
• Encryption at rest for stored data and photos
• Secure authentication via Firebase Auth
• Role-based access controls

9. App Permissions

• Location (while in use): for the map, routing, and live delivery tracking. Background location is not used.
• Camera: to take proof-of-delivery and issue photos.
• Photos: to attach a photo as proof of delivery.

You can change or revoke any of these permissions at any time in your device settings.

10. International Data Transfers

Your data may be processed by Firebase (Google Cloud) servers that may be located outside the UK. Where transfers occur, appropriate safeguards such as Standard Contractual Clauses are in place.

11. Eligibility

KAS Driver is intended only for authorised KAS Retail Group delivery drivers aged 18 or over. It is not intended for use by the general public or by children.

12. Complaints

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated within the app. Please review this policy periodically.

14. Contact Us

• Email: [email protected]
• In-app: Profile → Help & Support