Privacy Policy

Last updated: June 24, 2026

Trako ("we", "us", "our") operates the Trako Dispatch, Trako Rider mobile applications, and the delivery.itrack.pk web platform (collectively, the "Service"). This policy explains what data we collect, how we use it, and your rights.

1. Data we collect

  • Account information: Email address, name, and phone number provided during signup or staff onboarding.
  • Location data: GPS coordinates from rider devices while on duty. Location is collected in the background to enable live delivery tracking.
  • Order data: Delivery addresses, order items, timestamps, and delivery status.
  • Device identifiers: Device ID used to pair rider devices with their accounts.

2. How we use your data

  • Live tracking: GPS data enables restaurants and customers to track deliveries in real time.
  • Analytics: Aggregated order and delivery data powers the dispatch analytics dashboard.
  • Service operation: Account and order data are necessary to operate the delivery platform.
  • Route optimization: Location data may be used to calculate delivery routes via OpenStreetMap (OSRM).

3. Data storage and security

All data is stored in Supabase (hosted on AWS) with row-level security policies. Data is encrypted in transit (TLS) and at rest. We do not sell or share personal data with third parties for advertising purposes.

4. Background location (Trako Rider)

The Trako Rider app collects GPS location in the background while the rider is on duty. This is essential for customers and dispatchers to see live delivery progress. Background location collection stops when the rider goes offline or ends their shift. The rider is always informed via a persistent notification when location tracking is active.

5. Third-party services

  • Supabase: Database hosting, authentication, and real-time subscriptions.
  • OpenStreetMap / OSRM: Map tiles and route calculations (no personal data is sent).
  • Expo / EAS: App build and update infrastructure.
  • Vercel: Web application hosting.

6. Data retention

Order data is retained for business records. Location breadcrumb data is retained for 90 days for analytics and dispute resolution, then automatically deleted. You may request deletion of your account and associated data at any time.

7. Your rights

You have the right to:

  • Access: Request a copy of your personal data.
  • Correction: Update inaccurate information.
  • Deletion: Request deletion of your account and data.
  • Withdraw consent: Revoke location permissions at any time via your device settings.

8. Children's privacy

Our Service is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the app or via email.

10. Contact

For questions or data requests, contact us at agenticsochai@gmail.com