Privacy Policy

Boomerang (business/restaurant) and Boomerang Driver (couriers & dispatch) apps · Last updated: August 9, 2026

This policy explains what data the Boomerang and Boomerang Driver apps ("the apps", "we") collect, how we use it, who we share it with, and your rights. Using the apps means you accept this policy.

Who we are

Boomerang is a delivery-management system. The Boomerang app lets businesses/restaurants create and track deliveries; the Boomerang Driver app lets couriers carry out deliveries and lets a dispatcher/manager assign and monitor them. The data controller is Boomerang Delivery, Ashkelon, Israel.

What we collect

Data	App	Purpose
Username & password	Both	Account creation and sign-in. Passwords are stored hashed by our auth provider (Supabase). We do not collect a real email address — the username is mapped to an internal technical identifier.
Full name, phone, vehicle type, profile photo	Driver	Identifying the courier to dispatch and performing deliveries.
Precise location (GPS)	Driver	Collected only while the courier marks themselves "online/on shift", to show their live position to dispatch and route deliveries. Collection continues while the app is in the background via a foreground service with a persistent notification, and stops when the courier goes off shift.
Order & delivery details: recipient name, phone, address (street, apartment, floor, entrance), notes, payment method (cash/card) and cash amount if entered	Boomerang (entered by the business)	Fulfilling the delivery, assigning a courier and tracking status.
Business profile: name, address, phone, hours, logo	Boomerang	Displaying the business and managing its orders.
Push notification token	Both	Sending assignment, status and delivery notifications.
Basic technical/usage data (error logs)	Both	Service stability and operation.

We do NOT collect: credit-card details (the "card/cash" choice is a label only — no payment is processed in the app), device contacts, microphone, or biometric data.

Background location (important)

In the Driver app, location is collected via a foreground service so dispatch can see the courier in real time during a shift. A persistent notification is shown while location is collected. Location is not collected when the courier is off shift and is never used for marketing. You can stop collection at any time by going off shift or revoking the location permission in device settings.

How we use data

• Account creation, authentication and sign-in.
• Creating, assigning, fulfilling and tracking deliveries.
• Showing live courier location to dispatch/manager to operate deliveries.
• Sending operational notifications (assignment, status, delivery).
• Security, abuse prevention and service maintenance.

Sharing with third parties

• Infrastructure providers: Supabase (database, auth, realtime, storage) and Expo (push notification service) process data on our behalf to run the service. On Android, notification delivery is carried out via Google's Firebase Cloud Messaging under the hood.
• Maps & addresses: map tiles are loaded from OpenStreetMap; an address you enter (e.g. when creating a delivery) is sent to MapTiler to convert it into geographic coordinates.
• Within the service: the dispatcher/manager sees order details and courier locations; the assigned courier sees only the delivery address and notes.
• We do not sell personal data and do not share it for third-party advertising.

Retention & deletion

Data is retained while the account is active and as needed for operations and delivery history. You can delete your account and personal data yourself, at any time, from the profile screen in the app or via this account deletion page — no app install required. Alternatively, contact roimalka1111@gmail.com; we respond as required by applicable law.

Security

Data is transmitted over encrypted channels (HTTPS/TLS) and stored with reputable infrastructure providers under access controls. No service is perfectly secure, and we cannot guarantee absolute security.

Children

The service is intended for adult businesses and couriers and is not directed to children under 16. We do not knowingly collect data from children.

Changes

We may update this policy from time to time; the date appears at the top. Material changes will be posted in the app or on the website.

Contact

Boomerang Delivery, Ashkelon, Israel · Email: roimalka1111@gmail.com