Last updated: May 11, 2026
Operator: Mind Fox Software Solutions Private Limited ("we", "us", "our")
Contact: support@mindfox.in
Fox Field Tracker ("the App") is a private workforce tool used by delivery representatives ("Reps") and supervisors of an organization that has licensed the App from Mind Fox Software Solutions Private Limited. The App is not offered to the general public. This Policy explains what information the App collects, why, and how it is handled.
1. Who controls your data
The organization that issues your login credentials (your employer or the entity that engaged you as a delivery rep) is the data controller of the information you provide. Mind Fox Software Solutions Private Limited operates the App and infrastructure as a data processor on that organization's behalf. Requests to access, correct, or delete personal data should go to your organization's administrator first.
2. Information we collect
2.1 Account information (provided by your organization's admin)
- Full name
- Phone number
- Role (rep, supervisor, admin)
- Account status (active / deactivated)
You do not self-register. An administrator creates your account.
2.2 Assignment data
- Delivery assignments allocated to you (recipient name, address, contact phone, parcel details, cash-on-delivery amount, scheduled date)
- Delivery status updates and timestamps you submit
- Delivery confirmation OTP entered at handover
2.3 Location information
- Precise location (GPS) is captured only at the moment you submit a delivery status update (e.g. "Delivered", "Attempted", "Returned"). This is used to attach an audit-trail location to that specific event.
- When you use the in-app location picker (e.g. to choose a delivery address), the map view fetches tiles from Google Maps; your IP address is visible to that service as part of normal HTTPS requests. Place-name searches are routed through our backend, which calls the Google Places API on your behalf so your IP is not directly visible to Google for searches.
2.4 Device and technical information
- A Firebase Cloud Messaging (FCM) registration token, used to deliver push notifications to your device about new assignments and status changes
- Device model and OS version (collected by Firebase Crashlytics and Firebase Performance Monitoring to diagnose crashes and slow operations)
- App version, Android API level
- Anonymous usage events (screen views, feature taps) via Firebase Analytics
2.5 Crash diagnostics
If the App crashes, Firebase Crashlytics records the stack trace, device model, OS version, and the in-App breadcrumb trail leading up to the crash. Crash reports do not include delivery recipient names, addresses, or COD amounts.
3. How we use this information
| Purpose | Data used |
|---|---|
| Authenticate you and authorize access to assignments | Phone number, role, account status |
| Show you the assignments allocated to you | Account ID, assignment records |
| Verify delivery completion at the doorstep | Delivery confirmation OTP, GPS at moment of status update |
| Send push notifications about new or updated assignments | FCM token |
| Diagnose crashes and performance issues | Crashlytics / Performance data |
| Generate organization-level reports for supervisors and admins | Aggregated assignment + delivery records |
We do not use your data for advertising. The App contains no ads and no third-party advertising SDKs.
4. Sharing and disclosure
We do not sell your information. We do not share it with third parties for marketing.
Data is shared with the following service providers, strictly for the purposes listed above:
| Provider | Purpose | Data they see |
|---|---|---|
| Google Firebase (Cloud Messaging, Crashlytics, Performance, Analytics, Realtime Database) | Push delivery, crash diagnostics, real-time data sync | FCM token, device model, crash reports, usage events |
| Google Maps (Maps JavaScript API + Maps SDK for Android/iOS) | Render the map in the location picker and delivery trace views | IP address, requested map tiles, approximate viewport |
| Google Places API (called via our backend) | Resolve place-name searches into coordinates for the picker | Search query text, session token (no direct user IP) |
| Hosting provider for the application backend | Run the server that stores assignments and accounts | All data listed in section 2 |
We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of users or the public.
5. Where data is stored and how it's protected
- The application backend and database are hosted on servers located in India, in compliance with applicable Indian data protection requirements.
- All traffic between the App and the backend is encrypted in transit using HTTPS / TLS.
- Authentication tokens are stored on your device using Android Keystore-backed secure storage.
- Access to administrative functions is restricted by role and protected by per-account credentials.
- Database backups are taken regularly and stored within India.
- Some technical metadata (push notification tokens, crash diagnostics, anonymous usage events) is processed by Google Firebase on Google's global infrastructure, which may include regions outside India.
No system is perfectly secure. We work to protect your data but cannot guarantee absolute security.
6. Data retention
All personal data and assignment records are deleted within 30 days of account deactivation, except for Firebase technical data (crash reports, analytics, performance metrics), which follows Google's default retention periods — currently up to 14 months for Analytics and approximately 90 days for Crashlytics.
While your account is active, your information is retained for as long as needed to operate the service. Your organization's administrator can request earlier deletion on your behalf at any time.
7. Permissions the App requests
| Permission | Why |
|---|---|
| Location (precise / approximate) | To stamp a GPS coordinate on delivery status updates you submit |
| Notifications | To deliver push notifications about assignments |
| Internet, network state | To communicate with the backend |
| Foreground service, wake lock | To briefly keep the App responsive while submitting an update with an attached location |
You can revoke any permission from your device's Settings. Revoking location will prevent you from completing status updates that require a verified location stamp.
8. Your rights
Through your organization's administrator, you can:
- Request a copy of the personal information held about you
- Request correction of inaccurate information
- Request deletion of your account and associated personal data, subject to retention requirements imposed on your organization (e.g. tax, labor, or audit law)
- Object to or restrict certain processing
Direct requests to your organization's administrator. If that route is unavailable, contact us at support@mindfox.in and we will route the request to the appropriate controller.
9. Children
The App is not directed to children under 18 and is not made available to them. Access requires an account created by an administrator, who is responsible for verifying that all reps are adults employed or engaged by the organization.
10. International users
The App is operated from India and all application data is stored on servers located within India. If you access the App from outside India, your information will be transferred to and processed in India. Some technical metadata is additionally processed by Google Firebase on Google's global infrastructure as described in Sections 4 and 5.
11. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via in-App notice or through your organization's administrator.
12. Contact
Mind Fox Software Solutions Private Limited
Email: support@mindfox.in