Privacy

What we collect, and why

We collect each item below because part of the app needs it. Nothing is collected for advertising: the app has no ads, no analytics service and no tracking across other apps or websites.

• Your name and phone number, and your email address if you sign up with one, so that an account exists and an order can be delivered to a person.
• Your birth date and your gender, if you choose to give them on Edit profile. Both are optional, both are blank until you fill them in, and both can be cleared again.
• Your password, stored only as a one-way hash, and the one-time codes used to sign in and to confirm deletion.
• Your delivery addresses, including any note you add for the driver.
• Your orders: what you bought, when, what it cost and what happened to the order.
• Your Haddak Credits balance and the entries that make it up.
• Messages you send to support, and the replies, including problems you report about a delivery.
• Messages you exchange with your driver or with our dispatch team while a delivery is in progress, and when each was sent and read. Calling and WhatsApp between you and the driver are switched off; this is the channel instead.
• The rating you give a driver after a delivery: the stars, any tags you choose and any comment you write. The driver sees only their overall rating and how many ratings it is based on, never who gave which one.
• If you sign up while Haddak is opening in stages, your request for access and whether it was approved.
• Files you upload to the Print service, which are yours and are not read for any other purpose.
• Requests you make to the other services, including the medicine details the Pharmacy intake asks for. That is health information, and it is treated as the most sensitive thing the app holds. The intake cannot accept a prescription photograph: no service in the app asks for a file, and none can receive one.
• Your device's location, but only while you are choosing or confirming an address, and only if you allow it. The app does not follow you in the background.
• What you search for in the catalogue. To improve search, the server also keeps each search without anything that identifies you — no account, no IP address, no device — for 180 days.
• Which notifications you have turned on.
• A push notification token, if this device is ever issued one. None is today: the app has no push provider, so no token is created and none is collected.
• The IP address and browser or app version your session signs in from. It is what lets the Sessions screen show you where your account is signed in, so that you can end a session you do not recognise, and it is kept with the session and goes when the session does.
• A record of what our staff did with your data: who opened an order, who changed it, who refunded it, who read a service request, and when. It is kept so that a question about your account has an answer, and it is not erased when your account is — it is a record of our conduct rather than of yours.
• Nothing at all when you simply read this website. There is no analytics script, no advertising pixel, no third-party font and no cookie of our own on these pages. Two things on this website collect what you type into them: the deletion page (your email address and the code you are sent), and the store and driver interest forms, which send the details you enter to Haddak by email so that we can reply. The website itself does not store them.

Who else receives it

At the time of writing, these, and only these:

• Google. When you pick an address on the map, or ask the app what is near you, the coordinate is sent to Haddak's own server, which asks Google's Geocoding service to turn it into a street name. Google receives that coordinate under the Google Maps Platform terms.
• The email provider that carries our messages. Your email address and the contents of the message reach it, because that is what sending an email is.
• The companies that host our servers and store our data for us. They process it only to run Haddak.
• The participating store that prepares your order, through the Haddak Vendor Portal: what you ordered, any note you leave for the store, and what it needs to hand the order over.
• The driver who delivers it, through the Haddak Driver app, and only while the delivery is in progress: your first name, the delivery address, your instructions for the driver, the messages you send them, and the amount to collect if you pay in cash. Your phone number is not shown to the driver unless Haddak has switched calling on for deliveries.

Who does not receive it

There is no advertising network, no analytics product, no data broker and no social network in this application. There is no payment processor: an order is paid in cash on delivery or from Haddak Credits. No outside delivery company, pharmacy, repair or contracting partner is connected to the app today. If one is, this page will be updated to say what it receives.

Keeping it safe

Passwords are stored only as one-way hashes. The app and this website use encrypted connections (HTTPS). Staff can see only what their role allows, and what they do with your data is recorded.

Deleting your account

You can ask for your account to be deleted from inside the app, or from this website without installing it, at the link below. You do not need to contact anybody.

Some records survive deletion, and you should know which before you ask. Orders, payments and their audit records are kept as commercial and tax records, with your identity removed from them and the address reduced to what an accountant needs. Any remaining Haddak Credits are forfeited — the amount is shown to you in words and figures before you confirm, and it cannot be restored or paid out afterwards.

Children

Haddak is not intended for children, and an account is not knowingly created for one.