Baboon Driver – Privacy Policy

1. Introduction / Hyrje

This Privacy Policy describes how Baboon sh.p.k. ("Baboon", "we", "us") collects, uses, shares, retains and deletes personal data of drivers and couriers who use the Baboon Drivermobile application (the "App"). By using the App you agree to this Privacy Policy.

Controller: Baboon sh.p.k., Tirana, Albania. Contact: [email protected].

2. Data We Collect / Të dhënat që mbledhim

• Account & profile data: name, email, phone number, password, address, profile photo, ID document for driver verification.
• Location data (precise & approximate): see Section 3 below.
• Transaction data: order details, pickup/drop-off addresses, earnings and payment information.
• Device & usage data: device model, OS version, IP address, app crashes, language preferences, advertising identifiers.
• Communications: in-app chat and support messages between drivers, customers and Baboon support.

3. Location Data – Access, Collection & Use

The Baboon Driver app accesses and collects precise (GPS) and approximate locationdata from the driver's mobile device. Location is collected:

• In the foreground, while the driver is actively using the app.
• In the background, only while the driver is logged in and available ("online") or has accepted an active delivery, so that we can match orders, navigate, track delivery progress and calculate ETAs for customers and restaurants.

Purpose of Location use:(a) to match drivers with nearby orders; (b) to provide turn-by-turn navigation to pickup and drop-off points; (c) to share the driver's live location with the customer and the restaurant during an active delivery; (d) to calculate distances, fares and ETAs; (e) to support safety, fraud prevention and incident investigation.

Location collection stops when the driver goes offline, logs out, or revokes the location permission from the device settings. Drivers can use the app without background location, but some features (receiving orders, navigation) will be limited. Location data is not sold to third parties and is not used for advertising.

4. How We Use the Data

• To provide, maintain and improve the Baboon Driver service.
• To process payments and driver earnings.
• To communicate order, account and safety updates.
• To ensure safety, prevent fraud and comply with legal obligations.
• For research, analytics and product development (in aggregated form).

5. Data Sharing

• With customers and restaurants: driver name, photo, rating, vehicle and live location during an active order.
• With service providers: Google Maps (navigation), payment processors, cloud hosting (AWS), analytics and crash reporting providers — all under contractual data-protection obligations.
• For legal reasons: when required by law, court order or to protect rights, property or safety.

We do not sell personal data.

6. Data Retention / Sa kohë i ruajmë të dhënat

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to meet legal obligations. Specifically:

• Driver account & profile data: retained while the account is active and for up to 5 years after account closure, to comply with Albanian tax, accounting and labour-law record-keeping requirements.
• Location history of completed deliveries: retained for up to 12 months, then anonymised or deleted.
• Real-time location (while online): not stored long-term; only the route of an active delivery is kept as part of the order record.
• Transaction and invoicing records: retained for 5 years as required by Albanian law (Law 9920/2008 on tax procedures).
• Support messages: retained for up to 24 months.
• Device identifiers & analytics: retained for up to 14 months.

After the applicable retention period expires, the data is permanently deleted or irreversibly anonymised.

7. Data Deletion / Si mund ta fshini llogarinë

Drivers can request deletion of their account and associated personal data at any time, free of charge, through any of the following channels:

• In the app: open Baboon Driver → Settings → Privacy → Delete my account.
• By email: send a request from your registered email to [email protected] with the subject "Delete my Baboon Driver account".
• Web form: baboon.al/elemino-profilin.

Upon receiving a verified deletion request, we will delete the driver's account and personal data within 30 days, except for data we are legally required to keep (for example tax, accounting and anti-fraud records, which will be retained for the minimum period required by law and then deleted). We will confirm completion of the deletion by email.

8. Your Rights

Under Albanian Law No. 9887/2008 on the Protection of Personal Data (and the GDPR where applicable), you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You may exercise these rights by contacting [email protected]. You also have the right to lodge a complaint with the Albanian Information and Data Protection Commissioner (IDP) at www.idp.al.

9. Security

We apply technical and organisational measures (encryption in transit, access controls, logging, regular backups) to protect personal data against unauthorised access, alteration, disclosure or destruction.

10. Children

The Baboon Driver app is not intended for persons under 18. We do not knowingly collect personal data from minors.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the app or by email before they take effect.

12. Contact

Baboon sh.p.k. — Tirana, Albania
Email: [email protected]