Privacy

What we hold

An account, made when you sign in. It holds the name and email address your sign-in carries, and the language you read in. It is your own, not a venue's: a runner who works two bars has one account and one earnings history.

Which venues you are paired with, whether each pairing is active, suspended or ended, whether you are on shift there, and any payout rate a venue has set for you alone. The orders you claimed. Your balance with each venue. What you write in an order's chat. Your position while you carry an order.

A notification token for this device, held by Firebase so an offer can reach you.

Your position

Your position is the most personal thing here, so we keep it narrow. The app asks for it only when you ask to share it, with the reason on screen. It is shared while you carry an order, so the customer can see you approach, and while the app is in the background if you allow that.

The server accepts a position only for an order you have picked up and are delivering. It keeps the latest one and nothing before it, so there is no trail of where you have been. It is dropped once the order ends, delivered, cancelled or rejected. With no order in your hands, nobody is shown where you are.

What customers and venues see of you

The customer sees your name and photo when you take their order, so they can tell who is walking up, and your position while you carry it. The venue sees the same, and sees you on its list of paired runners with your status, whether you are on shift, and any payout rate set for you.

A venue sees your name and photo only after you have confirmed the pairing from your own device. Pairing uses a short code you show the venue; it expires quickly and is deleted once pairing completes.

What you see about customers

Offers show the venue, the number of items, the distance and your payout. They show no tip and no delivery spot. Once you claim an order you see where to collect and where to walk, and the customer's note.

The customer's phone number reaches you at pickup and not before. You are never shown a customer's email address.

Earnings and cash

Each order you deliver adds to your balance with that venue, by the rule the venue set: a percentage of the items, or a fixed amount. Tips are counted as well. A cancelled or rejected order adds nothing.

If you collect cash, you owe that to the venue, so a balance can run in either direction. You see one balance per venue and currency. The venue's owner and managers see the entries behind it. We count money; we never move it.

Entries are never edited or removed, and a mistake is corrected with a new entry.

Why we hold it

We hold it to offer you orders, get them to the customer, tell you when something moves, let you and the others on an order talk about it, and keep the books straight between you and the bar. We do not build a profile of you and we do not sell anything to anyone.

The companies we use

We use three companies and no others. Firebase, from Google, holds sign-in and delivers notifications. Sentry receives crash reports on servers in the European Union, and those reports say what went wrong rather than who you are. Map tiles come from OpenStreetMap, which sees that a map was drawn. Each of them works on our instructions and holds nothing for its own purposes.

How long it lasts

Your position is not kept once the order ends. Your account stays until it is deleted. An order stays as the bar's record of a sale, and its chat stays with it. Ledger entries are never changed or removed, because a balance is owed between you and the venue.

Deleting it

The app has no delete button yet. Write to privacy@starfrontventures.com and we will delete what can be deleted and tell you what cannot, and why.

Ledger entries stay, because the venue is owed or owes the same sum whether or not you keep an account. Signing in again afterwards makes a new account, not the old one.

Your rights

You can ask what we hold about you, ask us to correct it, and ask us to delete it. Where you live may give you more than that, such as the right to object, to restrict, or to receive a copy, and we honour those wherever they apply. Write to privacy@starfrontventures.com and we will answer.

Children

Beach Bliss for Runners is for people who work at a bar, not for children, and you should not use it if you are under 16.

Changes and contact

When this changes, the new version appears here with a new date. Anything you want to ask about it goes to privacy@starfrontventures.com.