1. Overview & Data Controller
This Privacy Policy describes how personal and operational data is handled when you use the DevAura Courier mobile application and accompanying software.
DevAura provides enterprise mobile logistics software for businesses that run field sales and delivery teams using the Odoo ERP system. The employer company (the licensed Odoo customer) is the Data Controller for all staff, driver, and end-customer records. DevAura acts as the software provider and data processor.
2. Information Collected & How It Is Used
The application collects only the minimum necessary data to perform deliveries, calculate routes, and sync with your employer's Odoo ERP instance:
- Account Data: Name, username, business email, phone number, operational role (Courier or Supervisor), and assigned company. This account is created by your employer in Odoo.
- Precise Location (GPS): Collected only while you are on an active work shift or recording check-ins and stop completions, and only after explicit device permission. Used to determine route progress, stop arrival, and supervisor dispatch maps. No background location tracking occurs when the application is closed or in the background.
- Signatures and Photos: Digital customer signatures captured on the touchscreen as proof of delivery (POD); inspection photos attached to field notes. These are uploaded directly to the employer's Odoo server as verified attachments.
- Customer & Order Data: Customer contact details, addresses, delivery orders, quotations, collected cash-on-delivery amounts, and van stock inventory counts entered during your shift.
- Device & Diagnostic Data: Device model, operating system version, application version, device identifier, IP address, and Firebase Cloud Messaging (FCM) push notification tokens used solely to dispatch real-time stop updates.
- Security & Access Logs: Sign-in attempts, token refreshes, and IP addresses, retained securely for 180 days for audit and fraud prevention, then automatically deleted.
3. What We Never Do
- No Advertising: There are zero advertisements, third-party trackers, or ad-targeting SDKs in the application.
- No Selling of Personal Data: We never sell, monetize, or broker personal data to any third party.
- No Cross-App Tracking: We do not track your activity across third-party websites or services.
4. Data Storage & Security
All communication between the mobile application and your employer's Odoo server occurs exclusively over encrypted HTTPS/TLS connections. On the device, local offline records are stored in an encrypted SQLite database (SQLCipher), and session keys are secured in the platform hardware keystore (Android Keystore / Apple Keychain). Logging out completely purges all local session keys.
5. Demo Mode
The application includes an offline Demo Mode that requires no account. Demo data is entirely fictional (demo Cairo distribution routes), resides strictly on the local device, is never transmitted to any external server, and is wiped when you exit demo mode.
6. Legal Bases & Privacy Regulations
We process data based on contractual necessity (to fulfill employer delivery tasks) and legitimate operational interests. We respect principles under the European Union GDPR, Egypt Data Protection Law No. 151/2020, and Saudi Arabia PDPL.
7. User Rights & Account Deletion
You have the right to request access to, rectification of, or deletion of your personal data. You may request account deletion directly within the mobile app (Profile → Delete my account) or via our public Account Deletion Page. Deletion requests are processed within 30 days. Historical sales and tax records that the employer must retain under commercial accounting laws will be decoupled from personal identifiers.
8. Contact
For inquiries regarding data privacy, contact our Data Protection team at: privacy@devaura.uk.