Last updated:
1. Controller and scope
This Privacy Policy applies to FastShip, FastShip Driver (also displayed as Driver-FastshipHu on iOS), and the FastShipHU website. The service operator and data controller is MinThu Consulting Korlátolt Felelősségű Társaság, registered at Orczy tér 4. A. ép. 4. em. 28. ajtó, 1089 Budapest, Hungary (HU). The developer name on Google Play is FastshipCorp. Privacy requests are handled by the controller through mminh.lequang.dev@google.com.
FastShip connects customers, stores and delivery partners. Drivers are independent partners, managed and paid through FastShip. This policy describes how we access, collect, use, disclose, retain and delete personal data under the GDPR and applicable Hungarian law. The services are intended for people aged 18 or older.
2. Sources and account data
We receive data from you, your device when you use a feature or grant its permission, authentication and payment providers, and stores or delivery partners involved in your orders. A driver organisation may provide a partner profile on a driver's behalf.
Account data includes your name, email, phone number, user ID, authentication and verification information, and language preference. Profile data may include an avatar, date of birth, gender and address if supplied. We use this information to create and manage accounts, authenticate users, maintain profiles and communicate about the service.
3. Customer orders and content
We process delivery addresses and their coordinates, recipient contact details, delivery instructions, store and item selections, quantities, prices, fees, discounts, payment methods, order times and statuses, cancellations, refunds and support requests. These data enable ordering, service-area checks, delivery pricing, preparation, dispatch, delivery and dispute resolution.
We also process store and delivery ratings, comments, review tags and content you send to support. If you provide another recipient's details, you must be entitled to provide them and inform that person about their use for delivery.
4. Customer device location
FastShip accesses approximate or precise device location when you allow location access in Android, iOS or your browser. The device's location service may use GPS, Wi-Fi or mobile networks. Accuracy depends on your permission, device and surroundings.
We request individual location readings when you use the current-location feature, or when you open a store page without a selected location. We use coordinates to show your location, suggest an address, find nearby stores, check delivery availability, calculate distance and delivery fees, and fulfil an order at the address you confirm.
Coordinates may be sent to FastShip for store searches, delivery checks and orders, and to HERE to turn coordinates into an address. Address searches are also sent to HERE. Map providers receive map requests and associated technical information such as IP address and the displayed map area. Your selected address and coordinates are remembered on your device; when used in an order, they are stored with that order on our server.
The customer app does not continuously track your device location in the background. The courier position on the delivery map comes from the driver app. You may refuse or revoke device-location access and enter or select an address manually. Revoking permission does not erase existing addresses or orders.
5. Driver profiles and delivery activity
Partner registration may include name, email, phone, language, operating city and vehicle type, and date of birth, identification-document number or driving-licence number if provided. Organisation applications may include organisation name, tax number, address, number of drivers and manager contact details. Driver profiles may also include nationality, document details or an emergency contact supplied through the cooperation process.
We process application status, linked stores or organisations, online and availability status, delivery offers, acceptance, refusal, cancellation and completion events, delivery times, distance preferences, simultaneous-order limits and auto-accept preferences. We also process ratings, completion and punctuality figures, earnings, wallet balances, transactions and settlements. These data support onboarding, cooperation, dispatch, payment, service quality and support. Information about other people, including an emergency contact, should only be supplied with an appropriate basis and notice to them.
6. Driver location, including background access
FastShip Driver accesses, collects and sends precise device location to FastShip while you are online and available for delivery work, including while the app is in the background, not visible, or the screen is locked, subject to operating-system limits. This enables nearby delivery offers, dispatch and delivery-location updates for customers whose orders you deliver, and maintains your availability when you use another app.
Location data can include latitude, longitude, timestamp, accuracy, altitude, speed and direction of travel, together with online status and a tracking-session ID. Update frequency depends on movement, network connectivity and the operating system. During connectivity loss, a limited queue of previously collected points can be stored on the device and sent when connectivity returns. The server processes valid points and uses the latest position for dispatch and order updates.
Your position is provided to customers connected with an assigned order during its fulfilment. Authorised operations staff and relevant stores or driver organisations may access necessary information within their role. Map services receive information needed for maps; opening an external navigation app transfers the selected address or destination to that app.
Continuous background tracking starts when you go online and stops when you go offline or the tracking session is revoked. With permission, the app may also read your current location separately when initialising or displaying its map in the foreground. Previously collected points may be sent while ending a session. Going offline does not automatically erase the last position or existing order records.
You can go offline or revoke location permission in device settings. Delivery-request and tracking features cannot work fully without the required location access. Closing or swiping away the app does not reliably turn your online status off; use the offline control. We do not sell location data or use it for advertising.
7. Payments, authentication and notifications
Online payments and supported wallet top-ups are processed through Stripe. FastShip processes transaction identifiers, amounts, currencies, payment and refund status, and wallet or settlement records. Card details entered into Stripe payment components are submitted to Stripe; FastShip does not store full card numbers or CVC codes in its database. Stripe also processes data for payment security and fraud prevention under its privacy policy.
We use Firebase Authentication for integrated authentication, including phone verification, and Firebase Cloud Messaging for service notifications. Data can include phone numbers, authentication-provider user IDs, notification tokens, Firebase installation IDs, platform information and service-notification content. Google states that phone numbers supplied for Firebase authentication are sent to and stored by Google to improve spam and abuse prevention across Google services. See Firebase phone authentication and Firebase privacy information.
You can control location and notification permissions in your device or browser settings. Notifications concern orders, delivery offers and account or service events. FastShip does not use your personal data for advertising.
8. Technical data and local storage
We process IP addresses, browser/user-agent information, platform, device IDs and names when supplied by the client, login-session identifiers, access times, connection errors and operational logs. These support authentication, session management, notifications, service operation, security and troubleshooting. Operational logs can contain order identifiers or coordinates handled by the delivery service.
The apps and website store session information, carts, language preferences, selected locations and settings on your device. The driver app also stores tracking-session information and a limited location queue. Clearing browser/app data or uninstalling an app removes the corresponding local data but does not itself delete your account or server records.
9. Legal bases and automated dispatch
We process data necessary for accounts, orders, delivery, payment and independent-driver cooperation to perform the relevant contract or take steps you request before entering one (GDPR Article 6(1)(b)). Optional customer-device location uses consent (Article 6(1)(a)). Location required for dispatch and delivery updates during a driver's online work session is processed to perform the delivery-partner agreement; continuous tracking is limited to that session. Device permission is a technical authorisation and does not replace the GDPR legal basis.
Accounting and other mandatory records are processed to comply with applicable legal obligations (Article 6(1)(c)). Account security, fraud prevention and handling or defending specific claims use legitimate interests in protecting the service and the parties' rights, subject to necessity and balancing with your rights (Article 6(1)(f)). Consent can be withdrawn without affecting earlier lawful processing. Without information necessary for a requested service, we may be unable to provide that service.
Dispatch uses location, availability, linked stores, capacity and your distance preferences. Eligible store-linked drivers are prioritised, with proximity used within the group. If you enable auto-accept, an eligible offer may be accepted automatically. This affects which delivery offers you receive. FastShip does not use solely automated decisions to suspend your account or determine your remuneration. You can contact us to question dispatch or the use of your activity data and request a human review where applicable.
10. Recipients and international processing
Stores receive order information and recipient details needed to prepare or fulfil orders. Delivery partners receive pickup and delivery addresses, necessary recipient contact details and instructions. Customers receive relevant courier information and location for delivery tracking. Authorised staff and relevant driver organisations receive information needed to manage cooperation and delivery operations. Stripe, Google/Firebase, HERE and infrastructure providers process information needed for their services. Some maps use OpenStreetMap when HERE is not configured. Authorities or dispute-resolution parties may receive data when there is an applicable lawful basis.
FastShip's core servers, database, file storage, backups and authorised operations personnel are located in the EU. Integrated providers may process data outside the EEA: Google states that Firebase Authentication runs in the United States and Firebase Cloud Messaging uses global infrastructure. Provider roles and transfer safeguards are described in the applicable service and data-processing terms; information about relevant recipients and safeguards can be requested from our privacy contact. We do not sell personal data.
11. Retention and protection
We retain account and profile data while needed to maintain your account and provide services; driver application and cooperation records while assessing or managing the partnership; order, payment and support records while needed to fulfil the transaction, resolve issues or establish and defend claims. Data kept for a specific unresolved claim is limited to that claim and the applicable legal period. We review deletion requests against these purposes and legal obligations.
Hungarian accounting records subject to Section 169 of Act C of 2000 are retained for at least eight years. This obligation does not apply indiscriminately to all profile, photo or location data. Selected locations on the device remain until replaced or local data is cleared. Driver queue points are removed as they are acknowledged or the tracking session is cleared; the last server location is stored separately and is not automatically erased by going offline. Logs, inactive sessions and backup copies are considered when handling deletion, rather than promising instant deletion from every copy.
Provider retention can differ. Firebase states that Cloud Messaging installation IDs are retained until the Firebase customer requests deletion through the appropriate API, with removal from live and backup systems taking up to 180 days after that call. See Firebase retention information.
Access to service data is controlled through account authentication and role permissions. Payment information entered into Stripe components is handled by Stripe. We assess security and access risks and respond to data incidents under applicable requirements. No service can guarantee absolute security; please protect your account and device.
12. Your rights and account deletion
Subject to the applicable GDPR conditions, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Send your request to mminh.lequang.dev@google.com, stating which app you use and the email or phone linked to your account. We may request proportionate information to verify identity; do not send passwords or one-time codes.
For account and associated-data deletion, use the instructions on our account deletion page. In the customer app, open Settings and select Request account deletion. Requests are handled through our privacy email following verification. Uninstalling, logging out or disabling an account is not equivalent to deleting its personal data. If records must be retained for a legal obligation or specific claim, we explain the categories, reason and applicable retention when responding.
We respond without undue delay, ordinarily within one month. Complex or numerous requests may require up to two additional months; we inform you of the extension and reasons within the first month. You can complain to NAIH, Hungary's data-protection authority, or another competent EU supervisory authority, and seek a judicial remedy.
13. Age and policy changes
FastShip customer services and delivery-partner registration are intended for people aged 18 or older. If you believe that a child's data has been provided contrary to this requirement, contact us so we can investigate.
We update this policy when data practices, features or applicable requirements change. The current version is available on this website with its update date. Material changes are communicated appropriately, and consent is requested where required for a new purpose. Privacy questions and requests: mminh.lequang.dev@google.com.