Information we collect
- Account information such as name, email address, phone number, role, and authentication records.
- Customer information such as delivery addresses, delivery instructions, saved preferences, bookings, orders, reviews, support messages, and payment-method preferences.
- Merchant information such as business details, menus, operating hours, contact details, permits, identity documents, and uploaded photos.
- Rider information such as contact details, vehicle and service area, location during delivery workflows, license or permit information, identity and verification documents, background-check consent, payout details, and delivery evidence.
- Transaction and operations information such as order totals, cash or GCash-to-rider selections, receipts, refunds, disputes, delivery status, and audit records. Dunpin's current launch mode does not collect card details or process online checkout.
- Technical information such as IP address, browser or device type, app version, timestamps, error logs, and security events.
- Approximate or precise location when you choose to enable location features for nearby results, navigation, dispatch, delivery tracking, or proof of service.
How we use information
We use information to create and secure accounts, show nearby places, process orders and bookings, coordinate merchants and riders, provide navigation and live delivery updates, support users, prevent fraud, resolve disputes, improve reliability, and comply with legal obligations.
When information is shared
We share only the information needed to provide a requested service. For example, customers, merchants, and assigned riders receive the order, contact, location, and handoff information needed to complete a delivery. Authorized Dunpin operations staff can access information needed for support, safety, verification, and dispute handling.
We also use service providers to operate Dunpin, including Vercel for hosting, Supabase for managed data storage, Cloudinary for uploaded media, Resend or configured email providers for account messages, Google and Meta when users choose social sign-in, and map providers such as OpenStreetMap and CARTO. These providers process information under their own terms and privacy commitments.
Location data
Dunpin requests foreground location only when a location-based feature needs it. Customers can browse without location or choose an area manually. For riders, precise location is requested after the rider chooses to accept an assigned delivery. During that active delivery, Dunpin uses a location foreground service with a persistent notification so delivery tracking can continue when the app is minimized or the phone is locked. The assigned customer and authorized Dunpin operations staff may see the rider's live delivery position for navigation, safety, support, and handoff coordination. Tracking stops when the delivery is completed or cancelled. Dunpin does not request Android background-location permission and does not use rider location for advertising.
Storage, security, and retention
Information is transmitted over HTTPS and access to production systems is restricted. We retain information while an account is active and as needed for service delivery, security, fraud prevention, dispute resolution, accounting, and legal compliance. Retention periods may differ by record type. We remove or anonymize information when it is no longer reasonably needed.
Your choices and rights
You can decline location permission, use an area instead of GPS, update account information, change notification preferences, and request access, correction, or deletion of account information. Some records may be retained when required for security, fraud prevention, dispute resolution, or law; we will explain any applicable retention when responding to a request.
Children
Dunpin is intended for adults and is not designed for children under 18.
Policy updates
We may update this policy as Dunpin changes. The effective date at the top identifies the latest version.
Contact and privacy requests
Use the Dunpin account and data request form to contact the operations team about privacy, access, correction, or deletion.