SupplyO Privacy Policy

SupplyO is operated by Code Extreme, a business registered in Pakistan. This policy explains what the SupplyO mobile app collects, why, where it is held, and who else can see it. It applies to both people who use SupplyO: the supplier who runs a delivery business, and the customer who orders from him.

By creating an account and using SupplyO, you accept this policy. If you do not agree with it, please do not use the app.

The most important thing to know

Your supplier can see your information. When you order from a supplier on SupplyO, that supplier sees your name, phone number, delivery address, what you ordered, what was delivered to you, and what you have paid and still owe. That is the app working as intended, since it is how he knows where to deliver and what to charge, but you should know it before you place an order. A supplier only ever sees his own customers.

Your supplier is responsible for how he uses it. He is an independent business, not our staff. We decide what SupplyO collects and how the app handles it. What he does with what he sees, how he keeps it and who in his shop he shows it to, is his own responsibility under the law. If a supplier misuses your information, tell us at sidrees.idrees@gmail.com: we can remove his access to the platform, though we cannot reach into his own records.

What we collect

Information	Why we hold it
Your name	So your supplier knows whose order and whose bill this is.
Your phone number	It is how you sign in, and how your supplier calls you about an order.
Your delivery address and area	So the supplier can deliver, and so you can find suppliers who cover your area.
Your orders and deliveries	Products, quantities, dates and prices: the record of what was asked for and what arrived.
Bills and payments	What was charged, what was paid, and what is still owed.
Notification token	An identifier from Google that lets us send your phone a notification when your order is answered.
Sign-in records	Session tokens and failed sign-in attempts, so we can keep your account secure.

We do not collect your device's GPS location, your contacts, your photos, or anything from other apps on your phone. Your delivery address is what you typed, not where your phone is. SupplyO has no cookies, no web tracking, no advertising and no analytics, and we never handle your money. You pay your supplier directly, so we hold no card or bank details at all.

Information about other people

If you give us someone else's details, such as a delivery address for a relative, or, if you are a supplier, your customers' names and numbers entered into the app, you confirm you are entitled to share them with us, and you should tell that person their information is in SupplyO.

Who else sees it

• Your supplier, as described above.
• Google. SupplyO runs on Google Cloud and uses Firebase Cloud Messaging to deliver notifications. Your information is stored on Google's servers, which may be outside Pakistan, and your notification token and the contents of a notification pass through them.
• Courts and authorities. If we are lawfully required to disclose information by a court, regulator or other competent authority, we will comply.

That is the complete list. We do not sell or rent your information to anyone, for any purpose.

Your rights

• See what we hold. Ask us and we will tell you what information is stored about you.
• Correct it. You can change your own name and address in the app at any time. Your phone number is how you sign in, so it cannot be edited in the app. Write to us and we will change it for you.
• Delete your account. See the deletion request page, and read the next section, which explains what deletion does and does not remove.

Any of these: sidrees.idrees@gmail.com. We respond within 30 days, free of charge.

How long we keep it, and what deletion means

We want to be straight about this rather than promise something the app does not do.

Orders, deliveries, bills and payments are a business record shared between you and your supplier. When you ask us to delete your account, we deactivate it and remove your personal details, meaning your name, phone number and address, so you can no longer be identified from them or signed in. The underlying delivery and payment records are retained, no longer linked to your personal details, because they are also your supplier's record of goods he sold and money he is owed, and Pakistani tax law requires a business to keep its accounting records for several years.

How it is protected

• Everything between the app and our servers travels over HTTPS.
• Passwords are stored only as a one-way hash, so nobody at CodeExtreme can read your password.
• Sign-in tokens are held in your phone's own encrypted storage.
• Sign-in attempts are rate-limited to make guessing a password impractical.

No system is perfectly secure, and information sent over the internet can never be guaranteed against every attack. We will not ask you for your password by phone, SMS or email. If anyone does, it is not us, and we would like to hear about it.

If the business changes hands

If Code Extreme is sold or merges with another company, the information described here may transfer to the new owner, who would be bound by this policy until you are told otherwise.

Children

SupplyO is a tool for running a delivery business and is not directed at children. We do not knowingly create accounts for anyone under 18.

Changes to this policy

If we change what we collect or who we share it with, we will update this page and change the date at the top.

Contact

Questions about this policy, or about your information, go to sidrees.idrees@gmail.com. Our postal address is 106-A Ghalib City, Canal Road, Faisalabad, Pakistan. See also our terms of use.