Privacy Policy – Reef Driver

Last updated: August 25, 2026

Reef Driver ("the App") is a driver application operated as part of the Reef Bakery delivery management system. Drivers use the App to view and manage assigned deliveries, navigate to customers, update delivery status, report delivery issues or shortages, and upload delivery proof photos when required.

This Privacy Policy explains how information is accessed, collected, used, stored, protected and deleted when drivers use the Reef Driver application. By using Reef Driver, users acknowledge that the information described below may be processed as necessary to provide the application's delivery and driver-management functionality.

1. Information We Collect

Account and authentication information

• Driver account identifier
• Name
• Phone number or email address, where applicable
• Authentication credentials or authentication tokens
• Account status and role

Delivery and order information

• Delivery / order identifiers
• Customer information necessary to complete a delivery
• Delivery address
• Delivery instructions or notes
• Products and quantities associated with an order
• Delivery status
• Delivery timestamps
• Delivery issues, shortages or other operational reports

This information is used only for operating and managing the delivery process.

Location information

Reef Driver accesses the device's location when a driver starts a work shift and location tracking is enabled for delivery operations. Location information may be used to:

• Display the driver's current position
• Support navigation and route management
• Help coordinate deliveries
• Provide operational visibility to authorized Reef Bakery personnel
• Record delivery locations and improve delivery execution and logistics

Location data is not used for advertising purposes. The App requests foreground location permission, and also requests background location permission because location must continue to be collected while a shift is active and the App is in the background or the screen is off. On Android this runs as a visible foreground service with an ongoing notification. Background location collection stops when the driver ends the shift.

Camera and delivery photos

The App requests camera and photo-library access when a driver uses functionality that requires a delivery-related photo. Photos are used as proof of delivery or to document delivery-related issues, are uploaded to the Reef Bakery backend storage, and are not used for advertising.

Device and technical information

• Device and operating system information
• Application version
• Diagnostic information
• Crash or error information
• Network-related technical information (for example connectivity state)
• Push notification registration token, when notifications are enabled

We do not intentionally collect persistent hardware identifiers such as IMEI numbers for unrelated purposes.

2. How We Use Information

• Authenticate drivers and manage driver accounts
• Assign and display deliveries, addresses and instructions
• Support navigation and route management
• Track delivery progress and update delivery statuses
• Document successful deliveries and report shortages or delivery problems
• Communicate operational information, including push notifications
• Maintain application security
• Detect and troubleshoot technical problems
• Maintain and improve the reliability of the delivery system
• Comply with applicable legal requirements

We do not sell personal information to third parties, and we do not use driver location information for advertising purposes.

3. Sharing of Information

Information may be accessible to authorized Reef Bakery personnel and authorized service providers where necessary to operate Reef Driver and the delivery-management system. Information may be processed by the third-party infrastructure providers listed in section 8, only as necessary to provide their services and maintain the application infrastructure.

We do not sell or rent personal information. We may disclose information when required by law, legal process, or to protect the security, rights or property of Reef Bakery, its users, customers or other persons.

4. Data Security

• Encrypted (HTTPS/TLS) communication between the application and backend services
• Authentication and authorization controls, including row-level access rules in the database
• Access restrictions based on user role
• Managed cloud infrastructure
• Delivery photos stored in a non-public storage bucket and served through time-limited signed links
• Operational monitoring and error reporting

No method of electronic storage or transmission is completely secure, so absolute security cannot be guaranteed.

5. Data Retention

We retain information only for as long as reasonably necessary for:

• Operating the delivery system
• Maintaining delivery records
• Resolving delivery disputes
• Maintaining operational and accounting records
• Security and fraud prevention
• Meeting legal or regulatory obligations

When information is no longer required, it may be deleted, anonymized or securely disposed of in accordance with applicable requirements and our operational retention procedures.

6. Account Deletion

Users may request deletion of their Reef Driver account and associated personal information through our public request page: reeflogistics.co.il/delete-account.

Deletion requests are handled by Reef Bakery staff after the request is verified. When a valid request is received, we delete or anonymize personal information associated with the account, unless retention is required for legitimate legal, security, accounting or dispute-resolution purposes. Certain delivery or business records may need to be retained for a limited period.

7. Children's Privacy

Reef Driver is a business application for authorized adult users performing delivery-related work. It is not directed toward children, and we do not knowingly collect personal information from children through Reef Driver.

8. Third-Party Services

Reef Driver relies on the following third-party services:

• Supabase — authentication, database, backend functions and storage of delivery photos
• Google Firebase Cloud Messaging — push notification delivery on Android
• Google Maps Platform — address autocomplete, navigation links and route directions
• MapLibre / OpenStreetMap-based map tiles — map rendering
• Cloudflare-based hosting used by the Lovable platform — serving the web application

Reef Driver does not include third-party advertising SDKs or third-party marketing analytics SDKs. Error and diagnostic reporting is handled by our own backend services.

9. Permissions

• Location (foreground and background) — shift tracking, navigation and delivery coordination
• Camera and photo/media access — delivery proof photos
• Notifications — operational delivery notifications
• Network / network state — communication with backend services and offline handling
• Foreground service, wake lock, boot completed and battery-optimization exemption — keeping shift location tracking reliable

Permissions are requested only when necessary for the corresponding functionality.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the application, technology, legal requirements or our data practices. When material changes are made, the "Last updated" date will be updated.

11. Contact Us

For privacy questions, account deletion requests or questions about how information is handled through Reef Driver, contact us at:

Privacy contact: office@reefbakery.co.il

12. Developer / Company Identification

The Reef Driver application is operated by Reef Bakery (Reef Logistics), the operator of the website reeflogistics.co.il and the developer listed for the application (package co.il.reeflogistics.driver).