Rider Privacy Policy

This policy covers Mitho Rider, the Android application used by Mitho Delivery's delivery partners ("riders"). It does not cover the Mitho Delivery customer app, which has its own policy.

Mitho Rider is a work application. You use it as a delivery partner of Mitho Delivery("we", "us", or "our"), and the information described here is collected to assign you deliveries, verify that you are eligible to make them, and pay you for them.

1. Information We Collect

1.1 Information you give us

• Name, phone number and password — when you register, to create and secure your rider account
• Email address — optional, added from Profile → Account. Used for account recovery and notices, and verified by a one-time code
• Profile photo — optional, so the kitchen and support can recognise you
• Vehicle type, name and registration number — during onboarding, to match you to deliveries your vehicle can make
• A photo of your vehicle — optional, for vehicle verification
• Identity and vehicle documents — identity proof, driving licence, vehicle registration (RC) and vehicle insurance, collected during onboarding to verify that you are legally permitted to make deliveries. Reviewed by our operations team and stored against your account
• Bank account details — account holder name, account number, bank name and branch, collected when you add a payout account so we can pay your earnings. They are reviewed before approval, and once submitted the app only ever displays the last four digits back to you
• A reason, and optional written feedback — if you delete your account, so we understand why riders leave

Your phone number is verified by a one-time code at registration. Your password is never stored on your device in readable form and is never shown back to you.

1.2 Location

Your location is used to:

• show your position on the map in the app;
• draw the route line between you, the kitchen and the delivery address;
• tell our servers where you are at the moment you go online, so you can be matched with nearby deliveries.

Going online sends your current coordinates once, along with your online status. Going online is a state held on our servers until you go offline — it is not maintained by a stream of location updates from your phone, so putting your phone in your pocket does not drop you out of the delivery pool and does not keep sending your position.

If you decline the location permission, the app still works: you can go online and take deliveries. The map will not show your own position.

1.3 Information collected automatically

• A push notification token and a device identifiergenerated by the app — to send you delivery offers and account notices. Stored in your device's secure storage
• Your delivery history — orders assigned, accepted, declined, completed and lost, to show your history and to calculate your acceptance and completion rates
• Your earnings ledger and wallet balance — to show what you have earned and what you are owed
• Your rider statistics — completion rate, acceptance rate and average rating, shown to you in the app and used by our operations team

We do not use any advertising identifier. Mitho Rider contains no advertising SDK and shows no ads.

1.4 What we do not collect

For clarity, and because our customer app's policy may suggest otherwise, Mitho Rider does not use:

• Firebase Analytics, Google Analytics or any other analytics SDK;
• Firebase Crashlytics or any other crash reporting service;
• Cloud Firestore or Firebase Authentication;
• social login of any kind (Google, Facebook, Apple);
• any payment gateway — you are never asked to pay anything in this app;
• your microphone, your contacts, your calendar, or your SMS messages.

The app requests camera and photo access only when you choose to add a profile photo, a vehicle photo, or a document, and only for that purpose.

2. How We Use Your Information

We use the information above to:

• create, secure and support your rider account;
• verify your identity and your eligibility to deliver;
• offer you deliveries and let you accept them;
• give you directions and a route to the kitchen and to the customer;
• record what you have earned and pay it to your bank account;
• send you notifications about offers, deliveries and your account;
• handle disputes, investigate misuse, and meet our legal and tax obligations.

We do not sell your personal information, and we do not use it for advertising or profiling unrelated to your work.

3. Who We Share It With

Service providers used by the app itself:

• MapTiler — receives the map area you are viewing, which reflects your approximate location, in order to supply the map imagery
• Our routing provider — receives the start and end coordinates of a delivery leg, in order to calculate the route line drawn on the map
• Expo and Google (Firebase Cloud Messaging) — receive your push notification token and the contents of the notifications we send you, in order to deliver them to your phone

Within Mitho Delivery: our operations and support staff can see your profile, your documents, your bank details, your delivery history and your earnings, in order to verify you, support you and pay you.

The kitchen and the customer: your first name and, during an active delivery, your phone number and your progress through that delivery.

Others: we may disclose information where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim, or to investigate fraud or a safety incident.

4. Security

Every connection between the app and our servers uses HTTPS. Your session tokens, your push token and the device identifier are held in your device's operating-system secure storage (Android Keystore), not in ordinary app files. Access to documents and bank details inside Mitho Delivery is limited to staff who need it for verification, support or payout.

No system is perfectly secure. If you believe your account has been accessed by someone else, contact us immediately at the address in section 8 and change your password from Profile → Settings.

5. How Long We Keep It

We keep your account information for as long as you are a delivery partner, and after that for as long as we need it to meet our legal, tax and accounting obligations, and to resolve any outstanding dispute or payment. Delivery and earnings records are retained as business and tax records.

6. Your Choices

Deactivate your account — Profile → Settings → Deactivate or delete account. This closes your account and takes you out of the delivery pool. Signing in again restores it whole, with your orders, earnings, documents and bank details intact.

Delete your account permanently — the same screen. Both paths require your password. Permanent deletion is refused while you are carrying an open delivery or while you are still owed a wallet balance, so settle both first.

You can also request deletion without using the app, by writing to us at the address in section 8. See our account deletion page for both routes.

Location— you can withdraw location access at any time in Android's app settings. The app continues to work without it.

Notifications— you can turn off delivery, payment and account notifications individually in Profile → Settings, and turn off all notifications for the app in Android's settings.

Your other rights — you can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, by writing to the address in section 8. You can correct most of it yourself from Profile → Edit Profile.

7. Children

Mitho Rider is for delivery partners aged 18 and over. It is not directed at children and we do not knowingly collect information from anyone under 18.

8. Contact Us

Questions about this policy, or requests about your information:

• Email: info@mithodelivery.com
• Phone: +977 976-8050001
• Address: Chipledhunga, Pokhara, Nepal

9. Changes to This Policy

If we change what we collect or who we share it with, we will update this page and change the "Last updated" date above. Material changes will also be notified in the app.