Driver Privacy Policy

Falco, Inc. ("Falco," "we," "us," or "our") operates the Falco Driver mobile application (the "Driver App"), which independent delivery partners use to receive, accept, and complete delivery offers on the Falco platform.

This Driver Privacy Policy explains what information we collect from you as a delivery partner, why we collect it, who we share it with, and the choices you have. It is separate from, and does not replace, the consumer Privacy Policy that applies when you use Falco as a customer to place your own orders.

Who We Are:

Scope: This policy applies to you when you apply to become, or act as, a Falco delivery partner and use the Falco Driver app. If you also hold a customer account, the consumer Privacy Policy governs that account separately.

By using the Falco Driver app, you agree to the collection and use of information as described in this policy.

Identity and Contact Information

• Name — your legal first and last name, as it appears on your government-issued identification
• Email address and phone number — used to create your account, sign you in, and contact you about deliveries
• Home or mailing address — street, city, state, and postal code, collected during onboarding
• Date of birth — used to confirm you meet the minimum age to deliver, and to verify age-restricted handoffs
• Profile photo — if you choose to add one; it may be shown to customers so they can identify you at handoff

Verification Documents

To deliver on the Falco platform you must upload documents that prove you are eligible to drive and deliver. We collect:

• Driver’s licence — images of the front and back, and the licence number, class, and expiry date
• Government-issued identification — where a licence is not sufficient or a jurisdiction requires it
• Vehicle insurance — proof of active coverage, including policy number and expiry date
• Vehicle registration — proof that the vehicle you deliver with is registered
• Vehicle details — make, model, year, colour, and licence plate for each vehicle you add to your account

These images and the data read from them are used for verification, compliance, and fraud prevention. They are not shown to customers or vendors.

Location Information

Location is the core of how the Driver App works, and we collect it in more detail than the consumer app does. See the dedicated section on background location below.

• Precise GPS location — including heading, speed, and accuracy, collected continuously while you are online and available for offers, and throughout an active delivery
• Background location — collected while the app is in the background or the phone is locked, so long as you remain online
• Arrival and handoff location — the position recorded when you mark yourself as arrived at a pickup or drop-off

Financial and Payout Information

• Bank account details — routing number and account number, so we can pay you
• Taxpayer identification number — required to issue tax documents and to satisfy reporting obligations
• Earnings records — delivery pay, promotions, adjustments, tips, and payout history

Bank and tax details are transmitted to and held by Stripe, our payments and payouts processor. Falco does not store your full bank account number on its own servers.

Delivery Activity and Proof of Delivery

• Offer and delivery history — offers shown to you, offers you accepted or declined, timestamps, routes taken, and completion status
• Proof-of-delivery photos — photographs you take at drop-off when a photo is required
• Signatures — a signature captured on your device where the order requires one
• Verification codes — PINs and QR codes scanned or entered to confirm a handoff
• Age-verification scans — for orders containing alcohol or other age-restricted items, the app reads the barcode on the recipient’s identification to confirm their age. We record only the verification outcome and the fields needed to evidence it, not a copy of the customer’s ID
• Ratings and performance data — acceptance rate, completion rate, on-time performance, and customer ratings

Communications

• Delivery chat — messages exchanged with customers, vendors, and Falco support in connection with a delivery
• Voice messages — audio you record and send through delivery or support chat. Audio is captured only while you actively hold the record control, and only after you grant microphone permission
• Support tickets — the content of issues you raise and our responses

SMS and One-Time Passcode (OTP) Data

When you register or sign in with your phone number, we send a one-time verification code by SMS. In connection with this we collect your phone number, the delivery and verification status of the code, and the time it was requested, for security and fraud prevention. We do not send you marketing SMS without your explicit consent.

Device and Technical Information

• Device information — device model, operating system version, and unique device identifiers
• Push notification tokens — so we can alert you to new delivery offers and order updates
• Diagnostics — crash reports and performance data, which are not linked to your identity
• Log data — IP address, access times, and app events

Information from Third Parties

• Social sign-in — if you sign in with Google or Apple, we receive your name and email address from that provider
• Payments processor — Stripe returns verification and payout status for your account

The Driver App requests the "Always" location permission on iOS and background location permission on Android. This is necessary for the app to function; a delivery app that could see your position only while you were staring at the screen could not do its job.

Why we need it

• To offer you work. Delivery offers are matched to the drivers closest to a pickup. If we cannot see where you are while your phone is in your pocket, we cannot send you an offer
• To let customers and vendors track their order. During an active delivery, your position is shown on the customer’s tracking map and shared with the vendor so they know when you will arrive
• To navigate. Turn-by-turn guidance, route recalculation, and arrival detection all depend on a continuous position stream
• To confirm handoffs. We record your position when you mark yourself arrived, and when a delivery is completed, to evidence that the delivery happened where it was supposed to
• To pay you correctly. Distance-based pay components are calculated from the route actually travelled

When collection starts and stops

• Collection begins when you tap to go online and make yourself available for offers.
• Collection continues while the app is backgrounded or your phone is locked, for as long as you remain online.
• Collection stops when you go offline, sign out, or revoke the permission in your device settings.
• We do not collect your location while you are offline, and we do not collect it after you delete your account.

Your control

You can revoke location permission at any time in your device settings. Doing so will prevent the Driver App from offering you deliveries, because the platform cannot dispatch to a driver whose position is unknown. Going offline in the app is the normal way to stop location collection without changing any device setting.

• To operate the platform — matching you with delivery offers, routing you to pickups and drop-offs, and completing handoffs
• To verify who you are — confirming your identity, your right to drive, your insurance, and your age before you are approved, and re-verifying when documents expire
• To pay you — calculating delivery pay and tips, issuing payouts through Stripe, and producing tax documents
• To keep deliveries safe and honest — detecting fraud, investigating disputed or undelivered orders, and enforcing our standards for age-restricted deliveries
• To support you — responding to your questions and resolving problems with an order or a payout
• To communicate with you — sending offer alerts, order updates, verification codes, and service announcements
• To improve the product — analysing aggregate delivery and routing data to make dispatch, navigation, and pay estimates more accurate
• To meet legal obligations — complying with tax, transport, alcohol-service, and law-enforcement requirements

We do not sell your personal information. We do not use your location, documents, or delivery data for advertising or tracking, and the Driver App does not include third-party advertising or analytics trackers.

Before you can accept deliveries, we verify the documents you upload. Verification may be performed by Falco staff, by an automated check, or by a third-party verification provider acting on our instructions.

• Document images are stored encrypted and are accessible only to staff who need them for verification, compliance, or fraud investigation.
• Documents are never shown to customers or vendors.
• We re-check documents when they approach expiry and may suspend your ability to accept offers until a valid replacement is provided.

Age-restricted deliveries

When an order contains alcohol or another age-restricted item, you are required to verify the recipient’s age at handoff by scanning the barcode on their identification. The scan is processed on your device to read date of birth and expiry. We retain the verification outcome, the fields needed to evidence that the check was performed, and the time and place it occurred, because we are required to be able to demonstrate compliance. We do not retain a photograph of the customer’s identification.

What we collect

To confirm that the person applying to deliver is the same person shown on the government identification they upload, our identity-verification provider, Stripe Identity, performs an automated check that compares a live capture of your face against the photograph on your identification. That process creates and uses a scan of your facial geometry.

Under BIPA, a scan of face geometry is a "biometric identifier," and information derived from it is "biometric information." We are telling you so in writing, in advance, because BIPA requires it.

Why we collect it

• To verify that you are the person on the identification you submitted, which OCR of the document alone cannot establish.
• To prevent identity fraud, account takeover, and one person delivering on another person’s approved account — a practice that puts customers and other delivery partners at risk.
• To meet our obligations to verify the identity of the people who deliver on our platform.

We use it for those purposes and no others.

How long we keep it, and when we destroy it

This is our publicly available written retention schedule and destruction guideline, as BIPA requires:

• Retention: we retain biometric identifiers and biometric information only for as long as needed to complete identity verification and to resolve any dispute or investigation arising from it.
• Destruction: we permanently destroy them when the initial purpose for collecting them has been satisfied, or within three years of your last interaction with Falco, whichever occurs first.
• On account deletion: deleting your driver account triggers destruction of biometric identifiers and biometric information held for you, subject to the same outer limit above.

Our identity-verification provider is contractually required to apply retention and destruction terms consistent with this schedule to any biometric data it holds on our behalf.

We do not sell it

We do not and will not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information. BIPA prohibits it and so does our policy.

Who we disclose it to

We disclose biometric identifiers and biometric information only to our identity-verification provider for the purpose described above, and otherwise only where you consent in writing, where disclosure completes a transaction you requested, or where it is required by law, ordinance, or a valid warrant or subpoena.

How we protect it

We store and transmit biometric identifiers and biometric information using the same or a more protective standard of care than we apply to other confidential and sensitive information, encrypted in transit and at rest, with access restricted to personnel with a specific verification or fraud-investigation need.

Your consent

We ask for your written consent before any biometric collection begins, and you may decline. Identity verification is a requirement to deliver on the Falco platform, so declining means we cannot approve your account — but it does not affect any other account you hold with Falco, and you may withdraw consent at any time by deleting your driver account.

Customer identification at handoff

Age verification for alcohol and other age-restricted orders is a different process and does not involve biometrics. The app reads the barcode on the recipient’s identification on your device to check date of birth and expiry. No facial scan of the customer is performed, and no photograph of the customer’s identification is retained.

With customers

During an active delivery, the customer receiving the order sees your first name, your profile photo if you have added one, your vehicle make, model, and colour, and your live position on a map. Customers do not see your phone number, your home address, your documents, your payout details, or your date of birth. Calls and messages between you and a customer are routed through the platform so that neither party sees the other’s real number.

With vendors

The vendor preparing an order sees your first name and your estimated arrival, so they know when to have the order ready.

With service providers

• Stripe — payments and payouts, including your bank and tax details
• Cloud infrastructure and storage providers — hosting the platform and storing documents and photos
• Mapping and routing providers — generating routes and estimated arrival times
• Messaging providers — delivering SMS verification codes and push notifications
• Identity verification providers — checking the documents you submit

Service providers may access your information only to perform services for Falco, and are contractually prohibited from using it for their own purposes.

For legal and safety reasons

We may disclose information when required by law, in response to valid legal process, to investigate a serious incident, to establish or defend a legal claim, or where we reasonably believe disclosure is necessary to prevent harm.

Business transfers

If Falco is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

• Account and identity information — kept while your account is active, and afterwards for as long as needed to meet legal, tax, and accounting obligations
• Verification documents — kept while your account is active and for the period required by applicable transport, insurance, and alcohol-service rules
• Location traces — detailed position histories are kept for a limited operational period sufficient to resolve delivery disputes, then reduced to summary form for pay and performance records
• Proof-of-delivery photos, signatures, and age-verification records — kept for the period we are required to be able to evidence a delivery or an age check
• Earnings and payout records — kept for the period required by tax law
• Diagnostics — kept for a short period and not linked to your identity

• Information is encrypted in transit using TLS and encrypted at rest.
• Verification documents and proof-of-delivery media are stored in access-controlled storage and served only through short-lived, signed links.
• Access to driver documents and payout information is restricted to staff with a specific operational need.
• Sensitive credentials are held in a managed secrets store, not in application code.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

Deleting your account

You can delete your driver account from inside the app: open Profile and choose Delete Account. Deleting your account removes your profile, stops all location collection, and closes your access to the platform. We retain the limited records we are legally required to keep — principally earnings, tax, and delivery-evidence records — for the periods described above.

Exercising other rights

To make any other request, email founder@thefalco.com from the address on your driver account. We will verify your identity before acting, and respond within the time required by applicable law. We will not discriminate against you for exercising a privacy right.

The Falco Driver app is not intended for anyone under 18, and you may not deliver on the Falco platform unless you meet the minimum age required in your jurisdiction — which is higher than 18 where alcohol delivery is involved. We collect your date of birth to enforce this. If we learn that someone under the minimum age has created a driver account, we will deactivate it and delete the associated information.

We may update this Driver Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and notify you in the app or by email before the change takes effect. Continuing to use the Falco Driver app after a change takes effect means you accept the updated policy.

Questions about this policy, or about the information we hold about you as a delivery partner:

If you use Falco as a customer as well, the consumer Privacy Policy applies to that account.

Consumer Privacy Policy · Delivery Partner Terms