Effective / last updated: 2026-10-04
This policy applies to the Curry King Rider app for Android, distributed through Google Play. The app is a work tool for delivery riders and mobile-sales staff, operated by Curry King (Private) Limited ("Curry King", "we", "our", "us"). This notice explains what the app collects, where it goes, who can see it, and how you can ask us to close your account. By creating an account and using the app you agree to the practices described here.
What we collect
- Your name, phone number and email address — at sign-in and while you use the app, to identify you as a rider and link you to your trips and sales.
- Precise GPS location — only while a trip is in progress, reported to us about every 10 to 60 seconds. Collection stops when the trip ends. In the Android app, if you choose “Allow during trips” when the app asks, location is also collected while the app is closed or not in use, for as long as the trip is running, and a “Trip in progress” notification is shown the whole time. If you choose “Only while the app is open”, location is collected only while the app is open on screen. You can change this choice at any time in the app under Settings → GPS tracking. This lets dispatch route you, lets customers track their delivery, and measures the distance of the trip.
- Proof-of-delivery photos (up to 3) and your signature capture — when you complete a delivery, as proof the order was delivered.
- Delivery outcomes, cash collected, and sales you record — as you work, for operations, stock and settlement.
- Customer name and phone number — optional, only when you record a sale for a named customer. Walk-in sales are recorded anonymously with no customer details.
- Chat messages you send in the app — when you use the Chat tab (see "Automated assistant" below).
- Error reports — the error message and technical detail, your device/browser user-agent string, and the screen you were on, collected automatically when something goes wrong, to diagnose and fix faults.
- A random device identifier generated by the app — if your device is paired, to recognise this device. This is a random value created by the app; it is not your phone's hardware ID, advertising ID, IMEI or MAC address.
The camera
The app uses your camera in two different ways, and they are not the same:
- Barcode scanning (Sales): the camera image is read on your device only, to decode the barcode number. No image, photo or video is uploaded or stored — only the decoded barcode number is used, to look up the product.
- Proof of delivery: photos you deliberately take are uploaded and stored (see above).
Android permissions
The app requests only the permissions it needs to do the job, and only at the point it needs them:
- Location (precise) — used to route you, to let customers track their delivery and to measure trip distance, only while a trip is active. With your agreement the app keeps collecting location during a trip while it is closed or not in use, through an Android foreground service with a visible notification. The app does not ask for the “Allow all the time” background-location permission, and it never collects location outside a trip.
- Notifications — used to show the “Trip in progress” notification while trip tracking runs with the app closed.
- Camera — used to scan product barcodes on-device (no image leaves the phone) and to take proof-of-delivery photos that you choose to capture.
You can revoke these permissions at any time in Android Settings; some features (delivery tracking, barcode scan, proof of delivery) will not work without them.
Payments
The app records only how a sale was paid — "cash", "card on delivery" or "wallet". It never collects card numbers, expiry dates, CVV codes or any payment credentials.
Automated assistant
Messages you send in the Chat tab are answered by an automated assistant. To generate replies, the content of those messages is sent to a third-party large-language-model provider used by Curry King. Please do not put personal information into chat that is not needed for the job.
Who sees your data
- Curry King — your dispatchers, supervisors and administrators.
- Customers — a delivery customer may see your first name, vehicle and live map position while their order is on the way.
- Google, as our infrastructure provider: Firebase (sign-in and data storage), Google Maps (map display), and the Google Roads API, which receives trip coordinates to align your position to the road network.
- A large-language-model provider, for chat messages only (see above).
We do not sell your data, and we do not share it for advertising. The app contains no advertising, no analytics SDK and no third-party tracking, and it does not use an advertising ID.
Security
All data is encrypted in transit (HTTPS/WSS) and access is restricted to authorised Curry King staff on a need-to-know basis. Your sign-in session is held only for the life of the app session and is cleared when you sign out.
Where your data is processed
Our infrastructure runs on Google Cloud / Firebase, so your data may be stored and processed on servers outside Sri Lanka. We rely on Google's security and data-protection safeguards for that processing.
Children
This is a workforce app for Curry King riders and staff. It is not directed to children and we do not knowingly collect data from anyone under 16. If you believe a minor has used the app, contact us and we will remove the account.
Your rights — account deletion
You can ask us to close your rider account and delete the personal data that identifies you. You can make that request in two ways:
- Use the "Request account deletion" form on this page; or
- Email regulatory@curryking.lk from the phone number or email on your rider account.
What happens when we action a request: we verify that the request comes from the account holder, then disable your rider account so you can no longer sign in, and we remove the identifying contact details we no longer need. We aim to action verified requests within 30 days.
What we keep, and why
Some records cannot be deleted even after your account is closed, because they are part of completed customer deliveries and our financial and tax records, and the law requires us to retain them:
- Delivery and trip records tied to orders you delivered — these belong to the customer's order history, not only to you.
- Cash settlement, wallet and payout records — we pay riders for their work, so these are retained for accounting and tax obligations.
- Proof-of-delivery records attached to a completed order.
Where these records are retained, information that directly identifies you is minimised where we can, and the records are kept only for the period required by law and our operational retention policy. Live position is stored as your latest known position rather than a permanent trail.
Changes to this policy
We may update this policy as the app changes or as the law requires. The current version is always published at policy.curryking.lk, with the effective date at the top. Material changes are announced in the app; continuing to use the app after an update means you accept the revised policy.
Contact
For any privacy question or an access / deletion request, contact:
Curry King (Private) Limited
55/2 Vauxhall Lane, Colombo 2, Sri Lanka
Email: regulatory@curryking.lk
Phone: +94 11 444 1300