Privacy Policy

Last updated: April 2026

Qwkroute ("we," "us," or "our") operates the Qwkroute platform, including the website at qwkroute.com and the Qwkroute mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the practices described in this Privacy Policy.

1Information We Collect

Personal Information You Provide

When you create an account or use the Service, we may collect the following personal information:

  • Name, email address, and phone number used for account registration
  • Payment and billing information processed through our third-party payment processors
  • Profile information including your city and work preferences
  • Gig platform account information (e.g., DoorDash, Uber, Lyft, Instacart, GrubHub) that you choose to connect
  • Earnings data and work history that you import from connected platforms

Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

  • Device information such as device type, operating system, and unique device identifiers
  • Location data (with your permission) to provide zone-based recommendations and demand heatmaps
  • Usage data including pages visited, features used, and interaction patterns
  • Log data including IP address, browser type, access times, and referring URLs

2How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve the Service, including our AI-powered shift planning, demand heatmaps, and earnings analytics
  • To generate personalized recommendations about when, where, and on which platform to work
  • To process transactions and send related information such as purchase confirmations and invoices
  • To send you technical notices, updates, security alerts, and support messages
  • To respond to your comments, questions, and customer service requests
  • To analyze usage trends and improve our recommendation engine and platform features
  • To detect, investigate, and prevent fraudulent transactions and other illegal activities
  • To comply with legal obligations and enforce our Terms of Service

3Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share information with third-party vendors who perform services on our behalf, such as payment processing, data hosting, email delivery, and analytics.
  • Aggregated Data: We may share aggregated, de-identified data that cannot reasonably be used to identify you. This data may be used to improve our demand forecasting models and provide market insights.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

4Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device that help us improve the Service and your experience.

Types of Cookies We Use

  • Essential Cookies: Required for the Service to function properly, including authentication and session management.
  • Analytics Cookies: Help us understand how users interact with the Service so we can improve functionality and performance.
  • Preference Cookies: Store your settings and preferences, such as your preferred city and platform selections.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

5Third-Party Services

The Service integrates with third-party gig platforms (such as DoorDash, Uber, Lyft, Instacart, and GrubHub) and may use third-party services for payment processing, analytics, and infrastructure. These third parties have their own privacy policies, and we encourage you to review them.

When you connect a gig platform account, we access only the data necessary to provide our optimization and analytics services. We do not store your gig platform login credentials; authentication is handled through secure OAuth flows or authorized API integrations where available.

Our third-party service providers include, but are not limited to, cloud hosting providers, payment processors, email service providers, and analytics platforms. Each provider is contractually obligated to handle your data in accordance with this Privacy Policy and applicable data protection laws.

6Data Security

We implement commercially reasonable technical and organizational security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request deletion of your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legitimate business purposes or legal compliance. Aggregated, de-identified data may be retained indefinitely.

8Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: You can request a copy of the personal information we hold about you.
  • Correction: You can request that we correct any inaccurate or incomplete personal information.
  • Deletion: You can request that we delete your personal information, subject to certain exceptions.
  • Data Portability: You can request a copy of your data in a structured, machine-readable format.
  • Opt-Out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your account settings.
  • Location Data: You can disable location services through your device settings at any time, though this may limit the functionality of certain features.

To exercise any of these rights, please contact us at qwkroute@gmail.com. We will respond to your request within 30 days.

9California Consumer Privacy Act (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) regarding your personal information. These rights include:

  • Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions permitted by law.
  • Right to Opt-Out of Sale: Qwkroute does not sell your personal information. We have not sold personal information in the preceding 12 months and have no plans to do so. As such, we do not offer an opt-out of the sale of personal information because no such sale occurs.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of service, or suggest that you may receive a different price or level of service for exercising your rights.

To exercise any of these rights, please contact us at qwkroute@gmail.com. We will verify your identity before processing your request and respond within 45 days as required by the CCPA.

10General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and applicable local data protection laws.

Lawful Basis for Processing

We process your personal data on the following lawful bases:

  • Consent: Where you have given explicit consent for us to process your personal data for a specific purpose.
  • Legitimate Interest: Where processing is necessary for our legitimate interests (such as improving the Service, fraud prevention, and analytics), provided these interests are not overridden by your rights and freedoms.
  • Contractual Necessity: Where processing is necessary to perform our contract with you (i.e., providing the Service).
  • Legal Obligation: Where processing is necessary to comply with a legal obligation.

Your GDPR Rights

  • Right to Erasure: You may request that we delete your personal data, subject to certain legal exceptions.
  • Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
  • Right to Restrict Processing: You may request that we restrict the processing of your personal data under certain circumstances.
  • Right to Object: You have the right to object to the processing of your personal data where we are relying on legitimate interest as our lawful basis for processing.

To exercise any of these rights, or for any questions regarding our data protection practices, please contact our Data Protection Officer at qwkroute@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.

11AI and Machine Learning Processing Disclosure

We use artificial intelligence (including third-party AI services such as xAI's Grok) to generate demand predictions and shift recommendations. Your anonymized, aggregated location and platform usage patterns may be used to improve prediction accuracy. Individual user data is never sent to third-party AI services — only metro-level aggregated data.

12Offer Capture & Notification Data

Qwkroute offers an optional feature that captures gig offer data from supported platforms (DoorDash, Uber, Lyft, Instacart, and GrubHub) to help you make smarter decisions about which offers to accept. This feature uses standard operating system capabilities and requires your explicit permission to enable.

What Data Is Captured

  • Android:When enabled, the app reads incoming push notifications from supported gig apps using Android's NotificationListenerService API. Only notification text from the specific gig apps you have selected is accessed — notifications from other apps are ignored entirely.
  • iOS:When enabled, the app captures on-screen content from supported gig apps using Apple's ReplayKit Broadcast Extension framework, combined with on-device optical character recognition (OCR) to extract offer details. Screen content is processed entirely on your device.

How Data Is Processed

All raw data processing — including notification text parsing and screen content OCR — happens entirely on your device. Raw notification text, screenshots, and screen recordings are never stored on your device beyond the moment of processing and are never transmitted to our servers or any third party.

What Is Sent to Our Servers

Only structured, extracted data points are transmitted to Qwkroute servers. This includes:

  • Platform name (e.g., DoorDash, Uber)
  • Offer amount
  • Estimated distance
  • Timestamp of the offer

No raw notification text, no screenshots, and no screen recordings are ever sent to our servers.

Encryption & Security

Offer amounts are encrypted at rest on our servers using Fernet symmetric encryption. All data transmitted between your device and our servers is encrypted in transit via TLS. Encryption keys are managed securely and rotated on a regular schedule.

Retention

Captured offer data is automatically deleted from our servers after 24 hours. This short retention window exists solely to provide you with real-time offer analytics and scoring. After deletion, only aggregated, de-identified statistics (such as average offer amounts per zone) may be retained to improve our recommendation engine.

Your Control

  • Offer capture is entirely optional and is disabled by default. You must explicitly grant permission to enable it.
  • On Android, you can revoke notification access at any time via your device's Settings > Apps > Special app access > Notification access.
  • On iOS, you can stop the Broadcast Extension at any time from the in-app controls or through Settings > Privacy & Security > Screen Recording.
  • You can delete all captured offer data at any time from the Qwkroute app settings. Deletion is immediate and irreversible.

Important Disclosures

This feature uses standard, publicly available operating system APIs (Android NotificationListenerService and Apple ReplayKit). It does not require rooting, jailbreaking, or any modification to your device or to third-party apps. Qwkroute does not interact with or modify any third-party gig app in any way — it only reads information that the operating system makes available through these standard permission-gated APIs.

13Payment Processing

Payment processing is handled by Stripe, Inc. We never store, process, or have access to your full credit card numbers. Stripe's privacy policy governs their handling of your payment data. We encourage you to review Stripe's privacy policy at stripe.com/privacy for more information about how they handle your payment information.

14Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. We will provide information about the nature of the breach, the types of data involved, the steps we are taking to address the breach, and recommendations for affected users to protect themselves.

15Biometric Data

We do not collect biometric data (fingerprints, face scans, voice prints, etc.). The Service does not use facial recognition, fingerprint scanning, or any other biometric identification technology.

16Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly.

17Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or through the Service. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

18Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: qwkroute@gmail.com

Website: qwkroute.com