Company name to be completed, publisher of the DistriZen application, a digital copilot for delivery drivers and transport/distribution companies.
Contact: contact@distrizen.fr
DistriZen is a professional application, intended for use by employees of client companies (drivers, dispatchers, executives) as part of their work. It is not intended for the general public or for minors.
| Category | Examples | Origin |
|---|---|---|
| User account | Login, password (hashed), display name, role | Entered at account creation |
| Route data | Name, address, city, schedule, packages/pallets, weight | File, photo, or manual entry |
| Field knowledge | Actual schedules, access details, notes, photos of locations | Entered by drivers |
| Geolocation | GPS position during an active route | Collected live, with authorization |
| Activity history | Completed routes, unexpected events, statistics | Generated automatically |
We do not collect any payment data, health data, or biometric data.
Authentication (account, password) is hosted on Supabase, a cloud service, with strict isolation between client companies. Other data (routes, field knowledge, history) currently remains, in this version, stored locally on the user's device — not on a central server.
Practical consequences: this local data is only accessible from the device the user signed in on; deleting it (uninstalling, clearing browser data, losing the device) is permanent and cannot be recovered by the publisher. This architecture is expected to evolve (see point 10).
| Service | Data transmitted | Purpose |
|---|---|---|
| Supabase | Login, password (hashed) | Authentication, per-company isolation |
| Nominatim (OpenStreetMap) | Client addresses | Geocoding (address → coordinates) |
| OSRM | GPS coordinates of stops | Road route calculation |
| OpenStreetMap | No personal data | Map background display |
| Google Fonts | No personal data | Typefaces |
| Google ML Kit (Android) | Photo of a route sheet | OCR, processed locally on the device |
| Tesseract.js (web) | Photo of a route sheet | OCR, processed locally in the browser |
We do not sell, rent, or share any data for commercial or advertising purposes. DistriZen displays no advertising and includes no advertising-tracking tools.
Data is retained as long as the user does not delete it and the application remains installed. This version does not yet have an automated feature to export or fully delete data — an identified improvement not yet implemented.
Processing is based on the performance of the employment/service contract between the user and the client company deploying DistriZen, as well as that company's legitimate interest in optimizing its delivery operations.
Under GDPR: right of access, rectification, objection and, under certain conditions, erasure of your data. These rights are currently exercised manually (by contacting us), as the application does not yet offer a self-service tool to automatically export or delete data.
To exercise your rights: contact@distrizen.fr
Passwords are hashed server-side (never stored in plain text). Communications with third-party services use HTTPS encryption. Since some data remains stored locally, its security also depends on the device's protection measures (lock screen, disk encryption), which are the responsibility of the user and the client company.
This policy describes a development version. A move toward a fully hosted architecture is planned for the next phase of the project, which will require a substantial update to this policy. Users will be informed of any significant change.
The DistriZen application: uses no tracking cookies or audience-analytics tools.
This showcase website: uses Google Tag Manager to deploy audience-measurement tools (pages viewed, visitor origin), only after your explicit consent via the banner shown when you arrive on the site. Until you click "Accept," no Tag Manager container or measurement cookie is loaded. You can change your choice at any time by clearing this site's data in your browser.
For any question: contact@distrizen.fr. You have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.