Admin App Privacy Policy

This Privacy Policy describes how the Delico Admin App ("we", "us", or "our") collects, uses, and protects information when you use our administrative mobile application (the "App"). The Admin App is designed exclusively for authorized Delico administrators to manage and oversee platform operations.

By downloading, installing, or using the Admin App (com.delicoadmin), you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Administrator Account Information

When you register or are granted access as an admin, we collect:

• Administrator name and designation
• Official email address and phone number
• Username and secure password credentials
• Employee ID or staff identification number
• Role and permission level within the system
• Department or team assignment

1.2 Platform Management Data

As you manage the Delico platform, the app collects:

• Actions performed on customer accounts, restaurants, and delivery partners
• Order management and dispute resolution activities
• System configuration changes and settings modifications
• Reports generated and analytics viewed
• Support tickets handled and customer communications
• Financial transactions and payment processing oversight
• User verification and approval decisions
• Platform performance monitoring data

1.3 Login and Activity Logs

• Login timestamps and session duration
• Actions performed during each session
• Features accessed and screens viewed
• Search queries and filters applied
• Data exports and report downloads
• System modifications and administrative changes

1.4 Device and Technical Information

• Device type, model, and manufacturer
• Operating system version and build
• Unique device identifiers (Android ID)
• IP address and network information
• App version and installation details
• Error logs and crash reports
• Device performance metrics

1.5 Communication Records

• Internal communications with other admins
• Customer support interactions
• Notifications sent and received
• Announcements and system alerts created

2. How We Use Your Information

2.1 Platform Administration

• Enable you to manage customer accounts, orders, and operations
• Oversee restaurant and delivery partner activities
• Monitor platform performance and service quality
• Handle customer complaints and dispute resolution
• Process refunds and financial adjustments
• Verify and approve new partner registrations
• Manage promotional campaigns and offers

2.2 Security and Access Control

• Authenticate your identity and verify authorization
• Track administrative actions for audit purposes
• Detect and prevent unauthorized access
• Identify suspicious activities or policy violations
• Maintain security logs for compliance
• Enforce role-based access permissions

2.3 Analytics and Reporting

• Generate business intelligence reports
• Analyze platform usage and performance metrics
• Track key performance indicators (KPIs)
• Monitor revenue and financial statistics
• Evaluate operational efficiency

2.4 Support and Training

• Provide technical support for admin functions
• Deliver training materials and updates
• Troubleshoot technical issues
• Improve app features and user experience

2.5 Legal and Compliance

• Comply with legal obligations and regulations
• Maintain audit trails for regulatory requirements
• Investigate fraud, abuse, and violations
• Enforce company policies and terms of service
• Respond to legal requests and court orders

3. Android Permissions

The Admin App requires minimal permissions to function securely:

Permission	Purpose	Required/Optional
INTERNET	Connect to Delico servers to access admin dashboard, manage operations, and sync real-time data	Required
POST_NOTIFICATIONS	Receive important alerts about orders, disputes, system issues, and urgent matters requiring admin attention (Android 13+)	Required

Note: The Admin App follows a minimal permission approach to ensure maximum security. Only essential permissions are requested to maintain data privacy and system integrity.

4. Information Sharing and Disclosure

4.1 Internal Sharing

Your administrative activity logs may be shared with:

• Other authorized administrators based on role and need-to-know basis
• Senior management for oversight and compliance review
• IT security team for monitoring and threat detection
• HR department for performance evaluation (if applicable)

4.2 Service Providers

We may share information with trusted third parties who assist us with:

• Cloud hosting and data storage infrastructure
• Analytics and business intelligence tools
• Security monitoring and threat detection services
• Communication and notification systems

4.3 Legal Requirements

We may disclose your information when required by law:

• Compliance with legal processes (subpoenas, warrants, court orders)
• Government investigations and regulatory audits
• Law enforcement requests
• Protection of company rights and prevention of fraud
• Investigation of security breaches or policy violations

4.4 Business Transfers

If Delico is involved in a merger, acquisition, or sale of assets, administrator information may be transferred to the acquiring entity.

4.5 No External Sharing

We do NOT share administrator information with:

• Customers or general public
• Restaurant or delivery partners
• Marketing or advertising companies
• Third-party data brokers

5. Data Security

We implement robust security measures to protect administrative data:

• Encryption: All data transmission uses bank-grade SSL/TLS encryption
• Secure Authentication: Multi-factor authentication (MFA) for admin login
• Access Controls: Role-based access with least privilege principle
• Session Management: Automatic logout after inactivity
• Audit Logging: Comprehensive tracking of all administrative actions
• Network Security: Firewall protection and intrusion detection
• Regular Updates: Security patches and vulnerability fixes
• Data Isolation: Admin data segregated from customer data
• Monitoring: 24/7 security monitoring for suspicious activities
• Secure Storage: Data encrypted at rest in secure servers

Password Security: Administrators must use strong passwords and are encouraged to change them regularly. Never share your credentials with anyone.

6. Data Retention

We retain administrator data for the following periods:

• Active Accounts: Data retained while you have active admin access
• Activity Logs: Maintained for 7 years for audit and compliance purposes
• Financial Records: Retained for 7 years per tax regulations
• Security Logs: Kept for 3 years for security analysis
• Terminated Accounts: Access removed immediately; logs retained per policy

7. Your Rights and Responsibilities

7.1 Administrator Rights

• Access your own admin profile and activity history
• Update personal contact information
• Request information about data processing activities
• Report security concerns or data breaches

7.2 Administrator Responsibilities

As an admin, you are responsible for:

• Confidentiality: Keep all platform data and admin credentials confidential
• Security: Use strong passwords and never share login credentials
• Proper Use: Use admin access only for legitimate business purposes
• Data Privacy: Protect customer and partner information according to policy
• Compliance: Follow all company policies and legal requirements
• Reporting: Immediately report any security incidents or unauthorized access
• Device Security: Keep your device secure and use only authorized devices
• Logout: Always logout when leaving device unattended

7.3 Prohibited Activities

Administrators must NOT:

• Share admin credentials with unauthorized persons
• Access accounts or data beyond your authorized role
• Download or export data for personal use
• Use admin access for personal gain or advantage
• Tamper with audit logs or security systems
• Disclose confidential information to third parties

8. Notification Preferences

The Admin App sends notifications for:

• Critical Alerts: System failures, security breaches, urgent issues
• Operational Alerts: High-value orders, disputes requiring escalation
• Performance Alerts: Platform metrics exceeding thresholds
• Updates: System updates, policy changes, announcements

You can manage notification preferences in the App settings, but critical security alerts cannot be disabled.

9. Third-Party Services

The Admin App may integrate with:

• Cloud Services: For secure data storage and hosting
• Analytics Tools: For business intelligence and reporting
• Communication Services: For notifications and alerts
• Security Services: For authentication and threat detection

These third-party services have their own privacy policies. We carefully select providers that meet our security standards.

10. Children's Privacy

The Admin App is strictly for authorized business administrators (18+ years). We do not knowingly collect information from minors.

11. International Data Transfers

Administrator data may be stored and processed in servers located in India or other countries. We ensure appropriate security measures are in place for international data transfers.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. You will be notified of significant changes through:

• In-app notifications
• Email to your registered admin email address
• Updates to the effective date at the top of this policy

Continued use of the Admin App after changes constitutes acceptance of the updated policy.

13. Compliance and Legal Framework

We comply with applicable laws and regulations, including:

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices) Rules, 2011
• Payment and Settlement Systems Act, 2007
• Goods and Services Tax (GST) regulations
• Labor laws and employment regulations

14. Account Termination

When your admin access is terminated:

• Your login credentials are immediately deactivated
• You can no longer access the Admin App
• Your activity logs are retained for audit purposes
• You must return any company devices and delete the app
• You remain bound by confidentiality obligations

15. Audit and Monitoring

All administrative activities are subject to:

• Continuous monitoring for security and compliance
• Regular audits by management and security teams
• Investigation if suspicious activity is detected
• Performance reviews based on activity metrics

Administrators should have no expectation of privacy regarding their official activities on the platform.