Privacy Policy

Introduction

Dream Day Distributor is an internal business application for the distribution company and its authorized users, such as administrators, delivery staff, and drivers. It is used to manage company operations, including users, distributors, stores, products, orders, deliveries, expenses, and reports.

The application is not a public service and is not intended for the general public. This policy explains what information the application processes and how that information is handled.

Account creation and access

A company administrator creates and manages user accounts. There is no public sign-up and users cannot create an account on their own.

The administrator provides each authorized person with access to the account. Sign-in uses the mobile number registered on that account and a one-time code issued by the application. An administrator may also store an optional password on the account. Keep your mobile number, one-time codes, and any password confidential. Do not share them with anyone else.

Access can be limited to active accounts and to the duties of the role the administrator assigns, such as Super Admin, Delivery Admin, or Driver Admin.

Information the application processes

The company does not collect personal information for advertising, marketing, or purposes unrelated to operating the distribution business. The application does process information that is needed for those business operations.

For user accounts, that information can include:

• Name, mobile number, and role
• Email address, city, district, state, and postal code, when they are provided
• A profile photo, when one is uploaded
• Whether the account is active
• A one-time sign-in code, stored only as a secure hash and with an expiry time
• An optional password, stored only as a secure hash when an administrator sets one
• An access token that keeps the signed-in session active until the user logs out or the token is revoked

For distribution work, authorized users can record:

• Distributor and store details, including names, mobile numbers, locations, map coordinates, and store photos
• Product and storage-location records
• Orders, delivery status, assignment to staff, invoice details, amounts, and notes
• Expenses, including type, amount, date, description, and the person who added the expense
• In-app notifications about operational events, such as an assigned order

The application does not ask for a device identifier for advertising. The servers that run the application may keep ordinary technical logs, such as the time of a request, so the service can operate and be protected. Sign-in attempts are rate-limited.

Data sharing

User and business information is not sold, rented, or shared with third parties for advertising or other commercial purposes.

Information is available inside the company to authorized users according to their role. For example, a driver can see deliveries and expenses related to their own work, while an administrator can manage accounts and company records.

The application stores this information in the company's database and file storage. It does not use advertising networks, analytics services, or a separate login provider. A provider that hosts the company's servers may process the information only as needed to host and protect the application. Invoices are generated by the application itself.

Data security

The company uses reasonable technical and organizational measures to protect accounts and the information the application processes. One-time codes and passwords are stored as hashes, API access uses a bearer token, inactive accounts can be blocked, and repeated sign-in attempts are limited.

No method of transmission or storage is completely secure. These measures reduce risk, and they are not a guarantee of absolute security. Tell the company administrator promptly if you believe your account has been misused.

Data retention and account management

Account and business records are kept for as long as the company needs them to operate, meet its record-keeping needs, and resolve disputes. The company administrator manages accounts, including updates, access problems, deactivation, and removal.

Users cannot close or change an administrator-managed account from a public page. Contact the company administrator if you need an update, cannot sign in, or need the account deactivated.

Children's privacy

The application is for authorized business users. It is not directed at children and it is not offered to the general public. The company does not knowingly create accounts for children.

Changes to this policy

The company may update this policy when the application's functionality or its practices change. The updated policy will be posted on this page with a revised date.

Contact

For privacy questions, account updates, or access issues, contact the company administrator.