Privacy Policy
Information we collect
To provide water delivery services, the system collects:
- Account and authentication information (email, phone, display name).
- Delivery location and directions (village and any instructions you provide).
- Water-request details, including number of people affected, vulnerable or critical circumstances, available storage capacity, and self-reported urgency.
- Driver and government operational records such as eligibility status, availability, and audit events.
- Proof-of-delivery or issue photos if the photo feature is enabled in the future.
How we use information
Information is used to process water delivery requests, assign and dispatch drivers, maintain audit records, and support government oversight of the service.
Who can access information
Access is limited by role. Residents can see their own requests and profile. Drivers can see the information needed for an assigned delivery. Dispatchers and administrators can see operational records needed to run the service. Viewers can see a read-only oversight view where configured.
Data storage and security
The application uses Firebase (Authentication, Firestore, and Storage) and is hosted on Vercel. Technical safeguards include server-side authorization, httpOnly session cookies, and deny-by-default Firestore Security Rules.
Third-party services
The service relies on a small number of providers to run:
- Firebase (Google Cloud) — sign-in and the database that stores requests, deliveries, and operational records.
- Vercel — hosts and runs the application, and keeps short-lived technical hosting logs.
- Resend — sends service emails such as account-setup invitations and delivery-confirmation messages, so it processes the recipient's email address.
- Sentry — technical error monitoring, described in the next section.
Authentication may be provided through Google or Facebook sign-in if enabled by the government. WhatsApp is currently used only as a support contact number; no WhatsApp integration or data sharing is active at this time.
Error monitoring
To keep the service reliable, unexpected application errors are reported automatically to Sentry, a technical error- monitoring service. When an unexpected error occurs, Sentry may receive limited technical diagnostic information — for example the type and message of the error after the application's own redaction, which part of the application was involved, the browser or device type, a request correlation identifier, and the version of the software that was running.
The application is configured to exclude personal and sensitive information from these reports — including names, email addresses, phone numbers, delivery addresses and directions, water-request contents, form contents, account identifiers, cookies, sign-in headers and tokens, request bodies, and secrets. Error reports pass through a privacy filter before they leave the application.
Error monitoring is used only for reliability and fault diagnosis — never for advertising, tracking, behavioral profiling, or product analytics.
Retention
Operational records are kept as long as required for service delivery, audit, and oversight purposes. Limited technical diagnostic records — such as error reports and hosting logs — are retained by the providers that hold them according to those providers' configured retention settings.
Your rights and contact
For questions, corrections, or concerns about your information, please contact the Water Delivery Office.
To request deletion of personal data associated with your account, see the Data Deletion page.
Updates
This policy may be updated from time to time. The latest version will always be available on this page.