StoloOS Transport (com.gnoosis.empooriorider) is the app an Empoorio courier uses to receive, accept and deliver orders. This policy is written against the code of the app published on Google Play: it states the data it collects, where that data is stored and which permissions it asks for — no more, no less.
The data controller is Empoorio (https://empoorio.org). This policy covers the StoloOS Transport Android app published on Google Play as com.gnoosis.empooriorider. It does not cover the other apps in the ecosystem, each of which has its own. For any privacy matter: legal@empoorio.org.
Unlike other apps in the ecosystem, this one does have its own account. You can sign in with an email and password or with your Google account. Signing up stores: first name, last name, email, phone, address and, if you add one, a profile photo. These are what a merchant needs to know who is collecting their order and what a customer needs to know who is at the door.
In Firebase, Google's service: the account in Firebase Authentication, everything else in Cloud Firestore, and notifications through Firebase Cloud Messaging. Google therefore acts as a hosting provider processing that data on our behalf. This app writes nothing to EmpoorioChain: it does not use the chain.
The app asks for your location and reads it **at that moment**, while you have it open, to work out how far you are from an order and show you the nearby ones. There is no continuous or background tracking: the app does not record your route and does not know where you are when you are not using it. If you deny the permission you can still use the app, but it cannot sort orders by distance.
The app asks for the camera and your photos for two specific things, and only when you start them: • The profile photo when you sign up, taken with the camera or picked from the gallery. • The images you choose to send in the chat with the customer or the merchant. It does not take photos on its own, does not read your gallery in the background and uploads no image you have not picked.
The app includes a chat to talk to the merchant and the customer during an order. Messages are stored in Firestore against that order and are visible to the people taking part in it. Do not write there anything you would not want stored.
The app sends notifications to tell you a new order is in, an order changed or you have a message. For that it registers a device identifier with Firebase Cloud Messaging. You can turn notifications off in Android settings. The app keeps working, but you will have to check for orders yourself.
• No third-party analytics: no Google Analytics, no PostHog, nothing measuring what you do inside. • No crash-reporting system sending data out. • It does not sell or share your data for advertising. • It does not track you across other apps or the web. • It does not use your location while the app is closed.
The Google Play listing shows the permissions the app declares. The ones actually used are: internet, location while you use it, camera and access to your photos, and notifications. If the listing shows any further permission, it is declared in the app without its code using it. We are removing those release by release; meanwhile it is worth knowing: a declared and unused permission collects no data, but it should not be there either.
You can ask for access to your data, its correction or its deletion, and ask us to stop processing it. To do so, write to legal@empoorio.org from your account's email address. Deleting your account deletes your profile data. Chat messages and the record of orders you already delivered may be kept for as long as needed to resolve a claim from a merchant or a customer.
