Your information · FLEE7 Driver
Privacy, explained.
This notice explains the records used by FLEE7, who handles them and how to ask about your information. It applies to the company portal, driver portal and iPhone app.
This notice covers the company portal, driver portal, FLEE7 Driver iPhone app and shared account records used to provide features to drivers and authorized managers.
Effective 3 October 2026 · Version 1.0. The retention rules are managed through manual review.
1. Who handles your information
M&N TOP SPEED DELIVERY LTD is the operator and controller for the company’s handling of your personal data through FLEE7 Driver.
Naxou 12C, 1070 Nicosia, CyprusPrivacy contact: info@flee7.com
Delivery platforms and services such as Apple Maps and WhatsApp may handle information independently under their own privacy notices.
2. Information used by the app
- Account and contact details: Courier ID, name, phone number, email, city, address and account permissions.
- Identity and work documents: passport and ARC details, residence and work-permit information, social insurance and tax identifiers, driving-licence details, expiry dates and uploaded documents.
- Work and pay records: reported earnings, tips, targets, salary statements, deductions, advances and related requests.
- Driver services: requests and messages about motorcycles, breakdowns, police recovery, oil changes, housing and phone orders, including supporting files you submit.
- Sick leave: dates and necessary supporting certificates submitted for leave/pay administration. Do not provide a full medical history or unrelated diagnoses.
- Reported activity and locations: platform account references, online/offline observations, dated activity and recorded location points made available through FLEE7 to permitted managers.
- Security and technical records: session identifiers and cookies, login attempts, access/audit records and information needed to process network requests, including information ordinarily available to the server.
Information comes from you, existing company records, authorized staff and platform reports or integrations. The native iPhone app does not request access to this phone’s GPS or collect its GPS location. Displayed manager locations come from existing FLEE7 observations, not a new background tracking feature in this app.
3. Why information is used
We use the relevant records to authenticate your account, show your own records, manage work and pay, process driver services, maintain required documents, support drivers, give authorized managers access to their permitted drivers, and protect the service from unauthorized access.
| Purpose | Ground |
|---|---|
| Account access and requested work services | Performance of your agreement with the company, where applicable. |
| Mandatory work, immigration, accounting and payroll records | Applicable work, immigration, social-insurance, tax and accounting obligations. Ask us which obligation applies to a particular record. |
| Security, fraud prevention and necessary fleet support | Legitimate interests, subject to necessity and your rights. Reported activity is used to understand performance, support drivers and investigate operational issues. Monitoring is limited to permitted company records and role/city access; it is not a new phone-tracking feature. |
| Sick-leave health information | Necessary leave/pay administration under the applicable employment agreement or legal obligation (GDPR Article 6(1)(b) or (c)), together with Article 9(2)(b) only where processing is authorised by employment/social-security law or a qualifying collective agreement and appropriate safeguards apply. The company must establish the applicable authorising provision or qualifying agreement and safeguards before requesting health information. An individual employment contract or app permission alone is not this condition. Verification of the specific condition for certificate processing is still being completed; this notice does not itself authorise health-data collection. |
Permission to choose a photo or take a document picture on your iPhone is separate from the legal ground for processing the document.
4. Who can access information
Access within FLEE7 is controlled by account permissions. Drivers access their own records; authorized managers and staff access the records required for their permitted role and city scope. Owner-only driver viewing is restricted to the company owner’s access.
Production configuration identifies Render for application/database hosting, ClickSend for SMS verification and configured operational messages, and Google Sheets record mirrors enabled for company records. Company mail uses Google Gmail transport. Document content is held in company database/document records; selecting a file does not grant access to your entire photo library or device storage.
Information may also be provided to delivery platforms, professional advisers or authorities where necessary for the relevant service or legal obligation. Only the information relevant to the particular work process should be shared. Wolt and Bolt provide platform reports/observations and handle their own platform accounts under their notices.
Company reporting tools also have OpenAI API access configured. The reviewed Insights integration sends selected performance evidence and computed reporting context to help prepare manager explanations, with response storage disabled in the request. This is a company reporting feature, not a native advertising/analytics SDK. Reviewed reporting paths send selected performance rows, pseudonymous history references, calendar/hour patterns and manager-supplied reporting context. Manager text may contain personal information. These reporting functions do not send document attachments or raw coordinates in the reviewed payloads. A disabled response-storage flag is not a promise of zero provider retention. Provider terms and applicable permissions remain part of the company’s release verification; this notice is not consent to send information to AI.
5. Maps, calls and WhatsApp
Map screens use Apple MapKit. A Directions action opens Apple Maps for the displayed point. A phone or WhatsApp button opens the relevant external service using the driver’s contact number. FLEE7 does not automatically place a call or send a WhatsApp message when showing these buttons.
The external provider’s own privacy rules apply after you open its service. Avoid sharing unnecessary sensitive documents through external messaging.
6. Information on your iPhone
Session information is stored using iOS Keychain. Loaded portal information is cached in memory so you can move between screens. Signing out clears the app’s session and loaded private state. Temporary files used for document sharing are protected and removed when the app’s share-sheet handling finishes.
The app may request camera or photo/file access when you choose to upload a document. It does not register for push notifications, request an advertising identifier or include a third-party advertising or analytics SDK in the current iOS release. This statement covers the native app; server-side logs and integrations are reviewed separately.
7. Keeping and deleting records
The company adopted a retention policy with defined limits and monthly manual review on 3 October 2026. Existing records are preserved at adoption. Their retention clock starts no earlier than 3 October 2026; original earnings, activity, upload and closure dates remain unchanged. Later records use their real verified trigger. Missing closure, replacement-verification and tax dates require review, not a fabricated date. No automatic purge is enabled.
| Information | Retention limit |
|---|---|
| Detailed location points and route replay | 90 days from observation |
| Detailed online/offline events and day timelines | 6 months from activity date |
| Non-financial performance summaries and rankings | 12 months from reporting date |
| Current identity, ARC/residence, work-permit and driving-licence copies | While needed for the active relationship, then 6 months after the driver relationship ends |
| Superseded identity/document copies | 90 days after a valid replacement is verified, or the post-exit deadline above, whichever is earlier |
| Medical certificates and supporting sick-leave files | 6 months after the sick-leave case is finally closed |
| Salary, earnings, payments, deductions, advances and required tax/accounting evidence | 6 years from the latest applicable tax-return or amended-return filing deadline or actual filing date |
| Core contract, terms, work-eligibility verification and relationship closure evidence | Review at exit and retain only necessary evidence for up to 6 years after the relationship ends |
| Non-financial driver service requests, housing/bike support and support correspondence | 12 months after final closure |
| Account/contact/profile details not otherwise legally required | Active relationship plus 6 months after final closure |
Routine security logs are kept for 90 days; non-financial audit records for 12 months. Privacy-request and deletion evidence is limited to 3 years after closure. Temporary exports are removed after their immediate use. The target for backup remnants is expiry within 90 days of active-system deletion, with deletions reapplied before a backup is restored to normal use.
Longer retention requires a specific legal duty or documented live claim, dispute or investigation. Only relevant records are preserved, with restricted access and a review at least every 90 days. Financial recordkeeping does not justify keeping unrelated medical certificates, passport copies or complete location history.
Retention is reviewed monthly. The policy requires reviewed disposal by the applicable deadline; there is no automatic purge or claim that existing data has already been erased. Removal must include older versions, files and company-controlled mirrors; simply archiving a record is not deletion. Genuinely anonymous statistics may be retained, but reversible identifiers are not anonymous.
Read the full retention and deletion policy. To request deletion or an explanation of retained records, contact info@flee7.com. We verify your identity and assess lawful retention exceptions. Uninstalling the app does not delete company records.
8. Storage and international transfers
The FLEE7 application service and managed PostgreSQL database are hosted by Render in Frankfurt, Germany, as verified on 3 October 2026. This identifies the application/database region; it does not establish every backup location or every provider’s processing location. Provider support, messaging, Google records/mail and reporting services may involve processing outside the European Economic Area. Company policy requires a lawful transfer mechanism for transfers outside the EEA, such as an applicable adequacy decision or Standard Contractual Clauses with necessary supplementary measures. Provider-specific agreements, processing countries and the safeguards actually in force are still being verified; this notice does not claim that every provider agreement or transfer has been verified. Contact info@flee7.com for information about the recipient and safeguards for your particular records and, where applicable, a copy of those safeguards.
9. Your requests and rights
You can contact info@flee7.com to request information about your data, access, correction, erasure, restriction or portability, or to object to processing where the relevant right applies. You may withdraw consent for processing that relies on consent, without affecting earlier lawful processing.
Include your Courier ID if available. Do not email a password or verification code. The company may need to verify your identity before disclosing or changing records. Rights are subject to their legal conditions and any records that must lawfully be retained. We normally respond within one month of receiving a request. If a permitted extension is necessary, we explain it within that first month. We ask only for proportionate identity evidence and explain any refusal or retained-record exception.
You may complain to the Cyprus Commissioner for Personal Data Protection or the competent data-protection authority.
10. Calculations and activity summaries
FLEE7 displays calculated target progress, statements and activity summaries from available reports. These can be delayed or incomplete. Contact the company if a figure or observation is incorrect or if you need an explanation. Managers review the information and make decisions; earnings or location reports do not automatically dismiss a driver or impose a penalty. You may ask for human review, explain an observation and challenge an incorrect figure. Company reporting explanations do not replace this review.
11. Changes to this notice
This notice is effective from 3 October 2026. We update its version and date when it changes. Material changes to how your information is used will be communicated appropriately. Provider and health-processing verification remains open as described above; publishing this notice is not a certification of complete legal compliance.