Driver app privacy policy

Last updated:

This policy covers the Metro Driver mobile app for iPhone and Android. Stores that deliver with their own drivers use it together with the Metro Driver plugin on their own website. The app is published by WFV LLC. Only people with a staff account issued by the store they work for can use it. There is no public sign-up.

The app connects to the store you choose when you sign in. Your location, shift, delivery and account data go to that store's own website, and that store is responsible for it. What WFV LLC receives is listed under "Who it is shared with" below.

What the app collects and why

The app sends the following to the website of the store you are connected to.

• Location. Your precise location while you are clocked in or carrying orders out for delivery, including in the background when the app is closed. It is used for routing, so the store's dispatch can see deliveries in progress, and to show the customer of an order you carry an approximate area and an arrival time (never your exact position). Your location is also saved with each clock in and clock out. The app collects no location when you are clocked out with no orders out for delivery.
• Time clock and pay records. Clock in and clock out times, breaks, positions worked, schedules, shift and time off requests, hours, and pay estimates. Used for timekeeping and payroll.
• Delivery records. Order status updates, delivery notes and proof of delivery photos you choose to take or attach.
• Account and vehicle. Your name, email, phone number, profile photo if you add one, and your vehicle type (car, motorcycle, bicycle or e-bike), which sets how routes and arrival times are calculated.
• Push token. A notification token so the store can tell you about new orders and schedule changes.
• Problem reports. Only when you tap Send problem report: the app version, phone model and operating system, permission settings, the app's recent log lines and your note. Used for support.

Who it is shared with

• The store you work for: its dispatch staff and managers, to run deliveries, timekeeping and payroll. The data is kept on that store's own website.
• The customer of an order you carry: your first name, vehicle, an approximate location and an arrival time.
• Google Maps, to calculate routes and travel times.
• Push notification services, to send notifications. The store's website sends each notification through a relay run by WFV LLC, which forwards it to Expo push notifications (with Apple and Google, who deliver it to your phone).

What WFV LLC receives. WFV LLC does not receive your name, email, phone number, location, addresses or notes. It receives three things from the store's website:

• Licence checks. The store's website checks its licence with WFV LLC. A check sends the site address, the licence key, the plugin and WordPress versions, and daily counts of drivers, devices and app versions. The server logs the IP address of each request.
• The push relay. Each notification sent to your phone passes through the relay. The store's website sends the store's licence key, site address, plugin and WordPress version, and the message itself: your device's push token, the title, the body, a small data object such as an order id or screen name, and the sound, channel and priority. The relay checks the licence and forwards the message to the push service. The relay does not store the messages. The store writes the notification text and is asked to keep customer details out of it where it can.
• Route, cash and pay figures. For stores on Metro Driver Pro, route order, delivery times, the cash analysis and pay figures are worked out on a server run by WFV LLC. The store's website sends numbers only. For routes and delivery times: travel times between stops, stop numbers and straight-line distances. For pay and reports: a number that stands for you (your user id on the store's site), the days and minutes you worked, your position, your pay rates and any adjustments. For cash: dates, amounts and order numbers. No names, emails, phone numbers, addresses, coordinates or notes are sent. Your name is added back on the store's own website. The server does not keep this data.

Your data is not sold, not used for advertising, and the app contains no analytics or advertising tools.

How long it is kept

Your records are kept on the website of the store you work for, and that store decides how long to keep them. Location points are deleted after 30 days unless the store changes that setting. Time clock, hours and pay records are kept for as long as the payroll law where the store operates requires. Problem reports are kept until the problem is resolved. Other account data is kept while you work for the store and deleted on request after that, except records the law requires the store to keep. The push relay run by WFV LLC does not store messages.

Your choices, and deleting your account and data

You can turn off location or notifications in your phone settings, but you cannot clock in or go out for delivery without location.

To see, correct or delete your data, or to delete your account, ask the store you work for first. Your account and records are on that store's website, so the store is the one that can change or delete them. Payroll records are kept for the period the law requires and then deleted.

For anything WFV LLC holds, email [email protected] with the subject "Driver app account deletion" and the name of the store you work for.

Security

All data is sent over HTTPS. Your sign-in token is kept in your phone's secure storage.

Contact

WFV LLC
5615 SR 11, De Leon Springs, FL 32130
[email protected]

Driver app support