Privacy policy

1. Who we are

A.R-Delivery is a delivery platform in Jordan that connects stores with delivery captains. It is operated by A.R-Delivery (“we”, “us”), the company named in the Captain and Store terms and conditions. The platform consists of:

the A.R-Delivery mobile app — one app for both Captains and Stores, available for Android, with an iPhone version in preparation;
the operations console used by our authorised staff; and
this website.

For any question about this policy or your data, contact us at info@ar-delivery.com or 078 007 5004.

2. Who this policy applies to

Captains — delivery drivers who register in the app to carry out deliveries.
Stores — businesses that register in the app to request deliveries, including the people who manage the store account and its branches.
Receivers — the people orders are delivered to. Receivers do not use the app; the store enters their details when it creates an order.
Website visitors — people who visit this website, including those who use its support or account-deletion forms.

3. Data we collect

Account and contact details

Your name, email address, phone number and password. The password is stored only as a one-way hash, so nobody can read it, including our staff.
Your account type (Captain or Store), account status, preferred language and the time you last signed in.
A profile photo, if you add one.

Captain profile and vehicle

Date of birth, captain number, rating and the shift hours you set.
Vehicle details: plate number, model, colour and year.

Store profile

Business name and type, tax number, address, and the store's location pin.
For each branch: its address and location pin, and a contact name and phone number.
Addresses you save in the store's address book.

Orders

Pickup and drop-off addresses and points, order amounts, notes, status history and cancellation reasons.
Ratings and comments left after a delivery.
Messages exchanged in the order chat between the store and the captain.

Receiver details

When a store creates an order, it enters the receiver's name, phone number and address, and may set a location pin.
When a captain completes a delivery, the delivery coordinates and address text are saved under the receiver's phone number and linked to that order. They are suggested only to the store that created the order, to help it fill in the address next time. Other stores never see them.

Captain location

We collect the precise location of a Captain's device only while the Captain is Online and while a delivery is in progress:

The location is updated about every 10 seconds, with high accuracy.
On Android, collection continues while the app is in the background through a foreground service, which shows a persistent notification for as long as it runs. On iPhone, the app uses the standard background-location mode, and the system shows the blue location indicator.
Collection stops when you go Offline, sign out, or close the app.
Our server keeps only your latest position; each update replaces the previous one.
Before Android asks you for location permission, the app shows a screen explaining why the location is needed and how it is used.

Store location

A Store's device location is read once, when you set the location pin of the store or of a branch. It is not tracked at any other time.

Proof of delivery

During a delivery the captain takes photos at pickup and at drop-off and records the amount collected. When the delivery is completed, the GPS point where it took place is saved with the order.

Verification documents (Captains)

To verify a Captain's identity and eligibility, we collect: national ID (front and back), driving licence, health certificate, non-conviction (criminal record) certificate, a promissory note, and vehicle documents such as registration and insurance. The health and non-conviction certificates are sensitive information; they are used only for this verification and are reviewed by authorised staff.

Wallet and payments

Wallet balances and transactions, and the receipts you upload with top-up requests.
Payout requests (cash or CliQ), including your CliQ alias, and the proof of each transfer.
Platform settlements and store order settlements, and the reference number given to each money movement.
We do not process card payments and do not collect card details.

Notifications and devices

A push-notification token for your device, the device platform (Android or iPhone) and when it was last active, so that we can send you notifications.
The notifications we send you inside the app.

Support

Support tickets you open in the app or on this website, the messages in them, and any attachments.

Security and server logs

Our web servers record the IP address, the browser or app identifier (user agent) and the address requested for each request.
Each sign-in session records the IP address and the device or user agent it was opened from.
One-time codes and password-reset requests are stored as hashes; password-reset requests also record the IP address and user agent.
An audit log records the actions our staff take in the operations console.

This website

The website sets one cookie, “lang”, which only remembers the language you chose.
The support form keeps your sign-in token in the current browser tab until you sign out or close the tab.
The account-deletion form keeps nothing in your browser.
The website loads no scripts, fonts or trackers from other companies.

What we do not collect

We do not use advertising, analytics or crash-reporting tools in the app or on this website.
We do not collect your device's advertising ID.
We do not sell personal data.

4. How we use data

To create and manage your account, and to verify Captains before they can accept deliveries.
To run deliveries: offer orders to nearby Online Captains, assign them, show the order status, and let the store and the captain contact each other.
To show a store where its captain is during an active order, and to let our operations staff follow deliveries.
To record proof of delivery and to look into complaints and disputes.
To calculate earnings, commissions, dues and settlements, handle top-ups and payouts, and keep accounting records.
To send notifications about orders, your account and payments, and to email one-time codes and password-reset messages.
To answer support requests.
To protect accounts and the platform: limit repeated sign-in attempts, prevent fraud and misuse, and investigate technical problems.
To comply with our legal obligations.

We do not use your data for advertising.

The other party of an order

The store sees the assigned captain's name, phone number and vehicle details, and the captain's live location while the order is active. After the order is finished, the store no longer sees the captain's location.
The assigned captain sees the store's name, pickup address and phone number, and the receiver's name, phone number and address.

Our staff

Authorised operations, support and finance staff can access the data they need for their work — for example to review verification documents, follow orders, answer tickets and process payments and settlements. Their actions in the operations console are recorded in the audit log.

Service providers

A few providers handle specific tasks for us, and each receives only what its task requires:

Google Firebase Cloud Messaging and, for iPhone, Apple Push Notification service — push notifications.
Hostinger — sending emails.
OpenStreetMap tile servers, and the maps app you choose for navigation — maps and navigation.

We do not sell personal data and do not share it with third parties for their own purposes.

We may disclose data where the law requires it, for example in response to a lawful request from a competent authority.

Where data is stored

Our database, uploaded files and API are hosted on the platform's own server. Push notifications, emails and map tiles pass through the providers listed above.

6. Push notifications (Firebase Cloud Messaging)

We send push notifications through Google Firebase Cloud Messaging. Google receives your device's push token and the content of each notification: its title, its text and the order or account data it refers to. On iPhone, notifications are delivered through Apple Push Notification service.

Your token is removed from our records when you sign out, or when Firebase reports that it is no longer valid. You can turn notifications off at any time in your device settings.

7. Maps and navigation

Maps in the app are loaded from OpenStreetMap tile servers, which the app contacts directly. Those servers see your device's IP address and the map area being displayed.
When you tap a navigation button, the app opens Google Maps, Apple Maps or another maps app on your device and passes it the destination coordinates in a link. That app's own privacy policy then applies.

8. Email

One-time codes and password-reset emails are sent through our email provider, Hostinger (SMTP). It receives your email address and the content of the message.

9. App permissions

Location — Captains: precise location while Online and during an active delivery, including in the background, as described above; a Captain cannot go Online without it. Stores: read once when setting a store or branch pin.
Camera — to photograph proof of delivery, verification documents, top-up receipts and your profile photo.
Photos — to attach a picture already on your device. The system photo picker gives the app only the pictures you choose.
Notifications — to alert you to new orders, order updates and account messages.
Biometrics (optional) — to unlock the app with your fingerprint or face. The check is done by your device's operating system, and the app only learns whether it succeeded. Your biometric data never leaves your device, and we never receive it.

You can review or withdraw these permissions at any time in your device settings.

10. How long we keep data

We have not yet set fixed retention periods. We keep personal data while your account is active and, after that, for as long as necessary for the purposes in this policy — such as accounting, resolving disputes and preventing fraud — and as required by applicable law. We will update this policy when retention periods are defined.

These limits already apply:

Captain location: only the latest position is kept; each update replaces the previous one.
Sign-in sessions last up to 30 days and are deleted 7 days after they expire.
Web server access logs are deleted after 14 days by automatic log rotation.
Counters that block repeated failed sign-in attempts expire within 24 hours.
Push-notification tokens are removed when you sign out or when Firebase reports them as no longer valid.

When you delete your account, the rules in the next section apply.

11. Deleting your account

Captains and Stores can delete their account at any time: in the app (Profile → Delete account), or on our account deletion page, which works without the app.

What happens immediately

Your account is disabled and you can no longer sign in.
You are signed out on all devices, and your push-notification tokens are removed.

What we delete or anonymise

Your name, email address, phone number, password, profile photo and date of birth.
Captain verification documents — national ID, driving licence, health certificate, non-conviction (criminal record) certificate, promissory note and vehicle documents — together with their files, and your vehicle details.
Your saved addresses, in-app notifications, and support tickets with their attachments.
The order-chat messages you wrote are removed or redacted, and the comments in your ratings are removed.
For Stores: the business name, tax number, address and location pin, the branches' contact details, and the receiver-location suggestions learned from the store's orders.
One-time codes and password-reset records.

What we keep, and why

Some records have to be kept for accounting, dispute resolution, fraud prevention and legal obligations. We keep them, linked to an anonymised account instead of your profile:

Order records — orders, their status history, proof-of-delivery photos and GPS points, and amounts.
Financial records — wallet transactions, top-up receipts, payouts (including the CliQ alias and the transfer proof), platform settlements (which include a copy of the captain's name and phone number), store order settlements, and transaction reference numbers.
Security and audit logs.

We keep these records for as long as necessary for those purposes and as required by applicable law. No fixed retention periods have been set yet; we will update the privacy policy when they are.

Outstanding balances and orders in progress

If your account still has money to settle — a wallet balance, a pending payout, an open platform settlement or an unpaid store order settlement — it is disabled immediately, and the deletion of your personal data is completed after our operations team has settled the balance.
A Captain or Store with an order in progress must finish or cancel it before deleting the account.

We keep a record of each deletion request — its date, the account type and its status — without any personal content.

12. Security

All connections between the app or this website and our servers are encrypted with HTTPS (TLS).
Passwords are stored only as one-way hashes; session refresh tokens and one-time codes are also stored as hashes.
Repeated failed sign-in attempts are limited and temporarily locked.
Access to personal data is limited to authorised staff, and their actions in the operations console are logged.

No system is completely secure. If you think someone has accessed your account without your permission, contact us straight away.

13. Children

The platform is for adults aged 18 or over and is not directed at children. We do not knowingly accept accounts from anyone under 18. If you believe a minor has registered, contact us so that we can review and close the account.

14. Your choices and how to contact us

See and correct your data — you can see your profile in the app. To correct your details, contact support (Stores can change their location pin in the app themselves).
Delete your account — in the app or on the account deletion page.
Location — you can withdraw location permission at any time in your device settings. Captains cannot go Online without it.
Notifications — you can turn notifications off in your device settings; you will then not be alerted to new orders or updates.
Receivers — if a store gave us your details for a delivery and you have a question about them, contact us.

Contact us at info@ar-delivery.com or 078 007 5004, or open a ticket from our support page. To protect your account, we may ask you to contact us from the email address or phone number registered on it.

15. Changes to this policy

We will update this policy when the platform or the way we handle data changes, including when retention periods are defined. Each update is published on this page with a new “Last updated” date.