Privacy Policy – Odoo Batch Delivery Manager App

ℹ️ 1. About This App

Odoo Delivery is an internal-use mobile application developed by Creyox Technologies for exclusive use by delivery drivers employed or contracted by our clients. The app connects securely to a private Odoo ERP server to manage and complete delivery operations.

If any Odoo users want to use this mobile application, they need to install our custom Odoo module on their Odoo server to support this application.

📋 2. Information We Collect

The app collects only the data required to perform delivery operations. No data is collected for advertising or sold to third parties.

Authentication credentials – Odoo username and password entered at login.
Delivery photos – Images captured per delivery order as proof of delivery.
Customer signature – Digital signature drawn on-screen and stored against the delivery order.
GPS coordinates (on validate) – Precise location snapshot taken at the moment the driver taps "Validate" on a delivery order.
Real-time GPS location (continuous) – During an active batch delivery, the driver's precise GPS coordinates are automatically sent to the Odoo server every 5 seconds via a foreground service. This enables live driver tracking for operational monitoring by the back-office team. Tracking stops immediately when the delivery batch ends or the driver logs out.

🔐 3. App Permissions

The following Android permissions are declared in the app:

Permission	Purpose	Type
`INTERNET`	Connect to the Odoo ERP server over HTTPS to fetch and sync delivery data.	Required
`CAMERA`	Capture photos at the delivery point as proof of delivery.	Required
`ACCESS_FINE_LOCATION`	Record the driver's precise GPS coordinates when the "Validate" button is tapped.	Required
`ACCESS_COARSE_LOCATION`	Fallback location access when fine location is unavailable.	Optional
`ACCESS_BACKGROUND_LOCATION`	Maintain GPS access during active delivery via a foreground service, so location is not lost when the screen is off.	Required
`FOREGROUND_SERVICE`	Run the location tracking service while the driver is on an active delivery route.	Required
`FOREGROUND_SERVICE_LOCATION`	Declare the foreground service type as location (Android 14+).	Required
`POST_NOTIFICATIONS`	Display an ongoing notification while the location foreground service is running.	Required
`READ_MEDIA_IMAGES`	Access images saved to device storage on Android 13+ (e.g., attaching saved photos to a delivery).	Optional
`READ_EXTERNAL_STORAGE` (API ≤ 32)	Read images on older Android versions (Android 12 and below).	Optional
`WRITE_EXTERNAL_STORAGE` (API ≤ 28)	Save temporary camera photo files on legacy Android 9 and below.	Optional

        Note on Background Location: This permission powers the active-delivery foreground location
        service (LocationTrackingService), which sends the driver's GPS coordinates to the Odoo server
        every 5 seconds while a batch delivery is active. The driver always sees a persistent
        notification stating "Sending location every 5s" while tracking is running. Location is
        never collected silently or between deliveries.
      

🔄 4. How We Use Collected Data

Delivery photos, signatures, and GPS coordinates are uploaded directly to the client's private Odoo ERP server and stored against the respective delivery order.
Real-time GPS location (sent every 5 seconds during active batches) is stored on the Odoo server to allow back-office staff to monitor driver progress. This data is not shared with other drivers or any external party.
Authentication credentials are used only for Odoo session login and are never stored in plaintext on the device.
GPS coordinates are also used to launch Google Maps for turn-by-turn navigation to customer addresses (via system Intent — no data is sent to Google by this app directly).

🛡️ 5. Data Storage & Third-Party Sharing

All delivery data is stored on the client's private Odoo server, not on any public cloud or third-party server controlled by Creyox.
Communication between the app and the Odoo server uses HTTPS (TLS). Cleartext traffic is disabled (android:usesCleartextTraffic="false").
The app uses Google Maps (via Intent) for navigation only. No location data is sent to Google by the app directly; navigation opens the external Maps app.
We do not sell, rent, or share personal data with third-party advertisers or analytics platforms.

🗓️ 6. Data Retention

Data stored on the Odoo server (photos, signatures, GPS records) is retained according to the data retention policy of the client organisation and applicable labour/logistics regulations. Temporary files created during photo capture are deleted from the device immediately after successful upload.

🔒 7. Security

All API communication is encrypted with TLS/HTTPS.
Odoo session tokens are stored in encrypted Android SharedPreferences (EncryptedSharedPreferences).
The app is distributed internally only — it is not listed on the public Google Play Store.

🧒 8. Children's Privacy

This application is intended solely for adult professional drivers. It does not knowingly collect data from persons under 18 years of age.

📝 9. Changes to This Policy

We may update this privacy policy as the app evolves. Significant changes will be communicated to users via internal distribution channels. Continued use of the app after changes are made constitutes acceptance of the revised policy.

📬 10. Contact Us

If you have questions or concerns about this privacy policy, please contact:

Creyox Technologies
Email: info@creyox.com
Website: www.creyox.com