Privacy Policy

For customers ordering food through Sortes.lk : Food Delivery (co.median.android.waaqqd), we collect and process the following information:

• Delivery Address & Location: We collect your selected delivery address and approximate/precise GPS location (when permission is granted) to display nearby restaurants, compute delivery estimates and fees, and ensure our riders reach your door accurately. Location data is only queried while using the app or checkout.
• Contact Information: Your name and telephone number are collected so restaurants and riders can confirm order details, call regarding meal substitutions, and coordinate doorstep delivery.
• Order History & Favorites: Items purchased, restaurant choices, order timestamps, and delivery notes are saved to facilitate convenient re-ordering and customer support.
• Push Notification Tokens (FCM): Unique Firebase device tokens are used to send instant alerts regarding your order status (e.g., "Order Accepted", "Food Preparing", "Rider Picked Up", "Arriving Soon").
• Payment Data: Cash on Delivery (COD) payment preferences and digital transaction confirmations are processed securely. We do not store raw credit/debit card numbers on our servers.

How Customer Data is Shared: Your delivery address, customer name, and contact number are shared strictly with the assigned delivery rider and the preparing merchant solely for the active duration of that delivery order. We never sell, rent, or lease your personal information to third-party marketing companies.

A. Types of Location Data Collected

• Precise GPS Location (Fine Location): High-accuracy GPS coordinates collected from your mobile device while on active delivery status.
• Approximate Location (Coarse Location): Network-based cell tower and Wi-Fi location estimates when GPS signal is low.
• Background Location Data: Location tracking running when the app is closed or not in use, specifically while the rider has set their status to "On Duty" or has an active order in transit.

B. Why Location Data is Collected

• Nearby Order Matching & Dispatch: To assign pickup requests from nearby restaurants and cloud kitchens based on your live location.
• Live Delivery Tracking for Customers: To show customers and restaurant partners the real-time progress and estimated time of arrival (ETA) of their food order on the map.
• Turn-by-Turn Navigation & Route Optimization: To assist riders in navigating safely from the kitchen pickup location to the customer's delivery destination.
• Fair Distance & Earning Calculation: To accurately calculate kilometers traveled, delivery fees, bonus payouts, and transit milestones.
• Safety & Dispute Resolution: To verify successful delivery arrival at the specified destination and protect riders from false non-delivery claims.

C. Background Location Tracking Disclosure

The Sortes Rider app requires the ACCESS_BACKGROUND_LOCATION and FOREGROUND_SERVICE_LOCATION permissions because delivery personnel frequently navigate using external mapping apps, receive incoming phone calls from customers, or keep their phones locked in pocket mounts while riding.

When is background location active? Background tracking is active only when you are toggled "On Duty" or carrying an active delivery order. When you toggle your status to "Off Duty" or close active shifts, background location tracking immediately terminates.

D. Sharing of Location Information

• Customers & Merchants: Your real-time location is shared strictly with the customer and restaurant partner associated with your currently assigned delivery order until the order is marked completed.
• Mapping Service Providers: Coordinates may be transmitted to mapping APIs (such as Google Maps) to render routes and compute traffic conditions.
• No Commercial Selling: Your location history is never sold, leased, or licensed to third-party data brokers or marketing networks.

Depending on which Sortes app is installed, the following permissions may be requested:

• ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION: Customer app: used to detect delivery destination; Rider app: used for GPS navigation and delivery tracking.
• ACCESS_BACKGROUND_LOCATION (Rider App only): Used to track transit routes continuously while the rider is actively on duty and delivering orders.
• FOREGROUND_SERVICE & FOREGROUND_SERVICE_LOCATION (Rider App): Used to keep location syncing operational with a persistent notification while fulfilling customer deliveries.
• POST_NOTIFICATIONS: Used to send order status updates to customers and urgent order dispatch alarms to riders/kitchens.
• WAKE_LOCK & VIBRATE: Used to alert device screens and vibrate on incoming orders.

We maintain industry-standard administrative, technical, and physical safeguards to protect all user data:

• All communications between our mobile apps and servers are strictly encrypted using HTTPS / TLS encryption in transit.
• Order and location logs are retained only as long as necessary for order settlement, delivery verification, and financial accounting.

How to Request Account & Data Deletion (User Rights)

Any customer, delivery rider, or merchant partner has the right to request full deletion of their account and associated personal data at any time:

• Email Request: Send an email to support@sortes.lk with the subject line "Delete My Account" and include your registered phone number.
• Processing Time: Account deletion requests are verified and processed within 24 to 48 business hours.
• Data Purged: Upon confirmation, your profile name, phone number, saved delivery addresses, and personal credentials will be permanently erased from our active databases, retaining only non-identifiable financial transaction logs as required by law.