Effective date: 1 November 2025
Short version (TL;DR): We collect only the details we need to run a restaurant order and dispatch workflow. That includes staff account information, restaurant profile details, order metadata, driver availability and the push-notification tokens needed to alert teams in real time. We do not track precise device location or sell personal data. You can ask us to access, correct, delete or export your information, and you can disable notifications from your device settings.
Ustool (the “App”) is provided by [Ahmad Amireh]. In this policy, “we”, “us” and “our” refer to this provider.
Contact for privacy matters:
Depending on how the App is used, we may act as a data controller (e.g., for driver/admin accounts and platform operations) and/or a data processor on behalf of restaurants that use Ustool (e.g., order information entered by a restaurant). Where a restaurant inputs its customers’ details, that restaurant is usually the controller for those customer records; Ustool acts as their processor.
This policy applies to your use of the Ustool mobile application and related services, support channels and websites that link to it (together, the “Services”). It covers information we collect from:
We collect different information depending on your role and how you interact with the Services.
We do not collect precise GPS location or background location trails. Driver state is limited to availability toggles and order milestone timestamps, and we do not request location permissions.
Restaurants are instructed not to enter special-category data (e.g., health or religious details) in free-text fields. If such data is added in error, please contact us so we can address it.
Under UK/EU GDPR and similar laws, we rely on the following bases:
The current Ustool app does not request or store precise location data. Driver-focused functionality records whether you are online or offline and updates order status timestamps as you progress through a job. If we introduce location tracking in the future, we will update this policy and ask for the appropriate permissions.
We use Expo Notifications (APNs/FCM) to deliver operational alerts such as new orders or assignment updates. The app requests notification permission, registers a push token and stores it alongside your user ID and locale to route messages correctly. You can change notification preferences or disable them entirely in your device settings, though doing so may affect timely order handling.
The mobile app does not use browser cookies. We rely on local state and secure storage provided by the device operating system and Firebase SDKs to keep you signed in and to deliver notifications. If you access any accompanying web dashboard, additional cookie notices may apply there.
We share data only as needed for the purposes above:
nam5 Firestore region.We do not sell personal data.
Firebase may process data in countries outside your own (including the United States, where the nam5 Firestore region is hosted). When we transfer personal data internationally, we rely on lawful mechanisms such as adequacy decisions or standard contractual clauses.
We keep personal data only for as long as needed to operate the platform and meet legal requirements:
We may anonymise order metrics for analytics; anonymised data is not considered personal data.
We use administrative, technical and organisational measures to protect personal data, including Firebase Authentication, role-based access controls, and Firestore security rules that restrict who can read or update particular documents. While no system is perfectly secure, we monitor for errors and will notify affected users and regulators when required by law.
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. If we process data based on consent, you may withdraw it at any time. California (CCPA/CPRA): you may have rights to know, delete and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioural advertising. We do not sell personal information. To exercise your rights or appeal a decision, contact us at ahmad.ali.amireh@gmail.com. Where we process data on behalf of a restaurant, we may refer your request to that restaurant.
The Services are not directed to children. We do not knowingly collect personal data from children. If you believe a child’s data has been provided to us, please contact us so we can take appropriate action.
The App may link to third-party sites or services. Their privacy practices are governed by their own policies. Please review those policies before using their services.
We may update this policy from time to time. We will post the new version in the App and update the effective date. Material changes may also be notified via in-app message or email where appropriate.
If you have questions, concerns or requests regarding your data, contact ahmad.ali.amireh@gmail.com. You may also have the right to complain to your local data protection authority.
nam5 (Google Cloud).Note: The exact list of providers may change as we improve the Service. We will update this annex or our website accordingly.
This document is provided for general information and does not constitute legal advice. Privacy laws vary by jurisdiction. Please consult your legal adviser to tailor this policy to your specific circumstances.