Privacy Policy

📋 Overview

RHR & Company ("we", "our", or "us") operates the RHR & Company mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this Privacy Policy, please do not use our App.

Note: This App is a private business management tool for RHR & Company operations across Karachi, Hyderabad, and Sukkur. Access is restricted to approved users only.

👤 Information We Collect

We collect the following types of information depending on your role in the App:

• Account Information: Full name, phone number, email address, shop name, and shop address provided during registration.
• Location Data: For salesmen and delivery personnel, we collect precise GPS location data while the App is active and running in the background during work hours.
• Purchase History: Orders placed, products ordered, quantities, and payment records associated with your account.
• Payment Information: Payment amounts, payment method (cash or online), and photo proof of cash collections.
• Photos: Photos captured via camera for payment proof verification purposes.
• Device Information: Device token (FCM token) used for push notifications.
• Usage Data: App interactions including order placements, page visits, and feature usage patterns.

📍 Location Data & GPS Tracking

Our App uses your device's GPS location for the following purposes:

• Salesman Tracking: Field salesmen's live location is tracked during working hours so administrators can monitor visits, verify customer deliveries, and ensure timely service.
• Delivery Monitoring: Delivery personnel are tracked to confirm correct delivery locations and route compliance.
• Admin Login Location: Branch administrators' login location is recorded and shared with the Super Admin for security and accountability purposes.

Location tracking is only active when you are logged into the App and on duty. Tracking stops automatically when you log out. Location data is stored securely on our servers and is not shared with third parties.

The App requires the following location permissions:

• ACCESS_FINE_LOCATION — For precise GPS coordinates
• ACCESS_COARSE_LOCATION — For approximate location as fallback
• ACCESS_BACKGROUND_LOCATION — For continuous tracking while the App runs in the background during field work

🔒 How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the App's core functionality (order management, delivery tracking, account management)
• To verify payment collections and resolve payment disputes
• To monitor salesman performance and field activities
• To send push notifications about order status, approvals, and business updates
• To generate reports and analytics for business decision-making
• To ensure the security and integrity of business operations
• To comply with legal obligations and business requirements

🤝 Information Sharing

We do not sell, trade, or otherwise transfer your personal information to outside parties. Your data is only accessible to:

• RHR & Company Management: Super Admin and authorized Branch Admins for operational oversight
• Assigned Salesmen: Salesmen can only view their own assigned customers' information
• Service Providers: We use Supabase for secure data storage and Railway for backend hosting — both are bound by their own privacy policies and data security standards

We may disclose your information if required by law or in response to valid legal requests by public authorities.

🛡️ Data Security

We implement industry-standard security measures to protect your information:

• JWT (JSON Web Token) based authentication for all API access
• Role-based access control — users can only access data relevant to their role
• Encrypted data transmission using HTTPS/TLS
• Row-level security policies on our database
• Secure OTP-based phone number verification
• Account approval required before any customer can access the system

👶 Children's Privacy

Our App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. This is a professional business application restricted to approved employees and customers of RHR & Company.

🔄 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.