UK GDPR draft for [LEGAL NAME]. A solicitor should review this before it is linked from Google Play. Replace every bracketed placeholder. The Play listing developer name is [DEVELOPER NAME].

Privacy

This notice describes how Drivery, the app and the pages on this site, handles personal information. The controller is [LEGAL NAME] of [POSTAL ADDRESS]. Contact: [CONTACT EMAIL]. The Google Play developer name is [DEVELOPER NAME]. Bilal is the moderation and child-safety contact: [SUPPORT EMAIL].

Drivery is a network for drivers in and around Preston. It is only for people aged 18 and over. Sign-up asks you to confirm that.

Lawful bases

• Contract. Your account, groups, messages, membership and the features you use the app for.
• Consent. Sharing a live pin, automatic mileage that reads location in the background, the microphone on a call, and phone alerts. You can decline each one and still use the rest of the app. You can withdraw consent by stopping sharing, stopping mileage tracking, leaving the call, or turning alerts off.
• Legitimate interests. Keeping the network safe: reports, blocks, suspensions, and stopping abuse. The interest is the safety of drivers using the groups. You can object. Write to [CONTACT EMAIL].
• Legal obligation. Where we have to keep or pass on information, including a report of child sexual abuse and exploitation.

Account

To use groups, chat, the map, calls, pings or SOS you create an account with an email address, a password and a display name, and you confirm you are 18 or over and accept the terms. We store that account, the time you confirmed your age and accepted the terms, a call sign if you set one, an avatar emoji, your city, your status, whether ghost mode is on, and whether you have asked to share your location. Passwords are handled by the auth provider and are not stored in the app. We do not collect a government ID.

Messages and reports

Group names, membership, messages and live-call roles are stored so other members of that group can see them. You can report a message or a driver. We store the report, the reason, and who sent it. Bilal reviews open reports in the app. You can block someone. A block hides that person from you in chat, on the map and on calls. It does not delete their account. There are no direct messages.

Do not put a passenger’s name, phone number, address or booking details in chat.

Location

Precise location is collected only when you ask for a feature that needs it.

Background location. The only use of location in the background, when the app is closed or not in use, is automatic mileage tracking. Before any system location prompt, the app shows a disclosure that says this, and it asks you to accept or decline. Foreground location is requested first. Background location is requested separately, and only after you turn automatic mileage on. If you decline, you can type miles and the rest of the app still works. While tracking is on, a notification stays visible and a foreground service of type location is running. Those miles stay on the phone. They are not sent to other drivers or to the server.

Map. Sharing your pin is off until you turn it on. While it is on, the app sends your coordinates to the server about every few seconds and other members of your groups can see you on the map, unless one of you has blocked the other. Stop sharing deletes that location from the server. This is not background mileage.

SOS and pings. These use your current coordinates so the server can tell which group members are sharing a location within a straight-line distance (5 miles for SOS, the range you pick for a ping). SOS alerts drivers in your groups. It does not contact 999 or replace the emergency services. An SOS notification does not put coordinates on the lock screen.

Voice

Group voice uses LiveKit, a WebRTC service. Drivery asks LiveKit for a short-lived token so you can join the room. Calls are not recorded. Drivery does not store the audio. LiveKit processes the audio only while the call is live. When you are speaking, the Android app runs a foreground service of type microphone and shows a notification. Listeners are not asked for the microphone.

Phone alerts

If you turn alerts on, this browser’s push subscription (an endpoint and two keys) is stored against your account. That endpoint is a device identifier for delivery only. We use it to send SOS and ping alerts. The app asks for notification permission at that moment, or when mileage tracking or a call needs a notification. It does not ask on login. Deleting the account removes the subscription.

Mileage and photos on the phone

Miles, receipts, fuel, documents, tickets and accident notes stay in this browser’s storage. They are not uploaded with your account. Photos you attach are chosen with the system photo picker and stay on the phone. The app does not ask for access to your photo library. Deleting the account from this phone clears that storage on this phone. Copies on another phone are not on our server.

Crash data

This app does not include a crash reporting SDK. We do not collect crash logs or stack traces.

Who processes the data, and transfers

[LEGAL NAME] is the controller. Processors:

• Supabase hosts the database, accounts, realtime updates and the functions that delete an account, mint a call token and send push. SETUP.md tells you to create the project in London (eu-west-2) so driver locations stay in the UK. Put the signed terms here: [SUPABASE DPA].
• LiveKit carries live voice when a call is connected. LiveKit may process that audio outside the UK. The audio is not stored by Drivery. Put the transfer tool (the UK IDTA or SCCs) and the signed terms here before launch: [LIVEKIT DPA], [LIVEKIT TRANSFER].
• If you turn on phone alerts, the browser’s push service (for example Google, on Chrome) delivers them. That service is a processor for the push endpoint.

We do not sell personal information. There is no advertising SDK and no analytics SDK.

How long we keep it

• Deleted when you delete the account: the login, profile, messages you sent, memberships, shared location, SOS, pings, blocks, push subscriptions and verification requests.
• Kept: a group you created stays, with no owner, until it is deleted. Reports stay so the review record is not lost, with the reported person cleared if their account is deleted. They are kept until Bilal has closed the review, and then for up to 24 months. A deletion request sent from the public page without signing in is kept until it has been actioned, and then for up to 12 months. There is no separate backup product in this app.
• Location rows exist only while you are sharing. Stale shares are dropped.
• Mileage on a phone stays until you clear the app storage on that phone. We cannot delete a copy that never reached the server.

Your rights

If UK GDPR applies, you can ask to access, correct, erase, or restrict your information, to object to processing based on legitimate interests, and to receive a portable copy of information you provided. Email [CONTACT EMAIL]. We may need to confirm it is you. You can also withdraw consent as described above, and you can delete the account yourself.

You can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, at ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. Please write to [CONTACT EMAIL] first so we can try to fix it.

Deletion

In the app, You → Delete account removes the login and the data tied to it. You can do the same while signed in on the public deletion page. That page names the app and the developer. If you cannot sign in, the page stores a request for [LEGAL NAME] to action.

Last updated 23 October 2026. This text is a draft, not a finished legal notice.

Back to Drivery · Terms · Community rules · Delete account