Privacy Policy

Last updated October 14, 2026

Drop keeps the records a business needs to plan, make and prove its deliveries, and nothing else. We never sell personal information, never use it for advertising, use no third-party analytics, and never handle payments. Drivers' location is used only while a route is running.

This Privacy Policy explains how Illuminant Inc (“Illuminant”, “we”, “us”) handles personal information in Drop: the Drop app for iPhone, iPad, Mac and Apple Watch (listed in the App Store as Illuminant Drop), the tracking, proof and route pages it creates, and this website (together, “Drop”). It applies to everyone whose information Drop handles:

Members of a business that uses Drop: its owner, its dispatchers in the office, and its drivers. Members sign in with Apple.
Customers: the people a business delivers to. They don’t have an account.
Temporary drivers: someone who opens a route link a business shared with them, without an account.
Visitors to drop.illuminantinc.com.

For the information a business enters about its customers, the business decides what to record and why, and we process it on the business’s behalf as its processor or “service provider” (Data Processing Addendum). For members’ own account information, we are responsible. The notice to customers and the driver location notice explain this in plain terms.

What we collect

Information	Whose	Where it comes from	Why
Name and Apple account identifier; email address if you share it with Sign in with Apple; role (owner, dispatcher, driver); whether you drive; time zone	Members	Sign in with Apple, the app	To create your account, sign you in, and show who does what
Business details: name, address, depots, phone, reply-to email, brand colour and logo, time zone, customer-message settings, report settings (hourly cost, cost per mile), and the owner’s choice of a weekly report email	Members	The owner, in the app	To plan routes from the right place, send emails in the business’s name, and make reports
Customer name, delivery address and its map coordinates, phone number, email address, delivery instructions, and notes the business writes	Customers	The business: typed, pasted or imported	To plan and make deliveries, and to send the emails the business turns on
Orders and stops: order reference, item count, time window, service time, flags (signature required, photo required, fragile, cold chain, two-person, ID check), notes; arrival and departure times, the outcome (for example “left at front door” or “handed to customer”), a reason a delivery failed, and a “collected” mark for cash on delivery	Customers, drivers	The business; the driver’s app	To plan, make and keep a record of each delivery
Proof: photos and signatures exactly as captured, with a fingerprint (SHA-256) computed on the phone; the photo’s GPS position and time; a stamped copy with the time and address burned in, kept separately; the driver’s note	Customers, drivers	The driver’s iPhone	To document when, where and how a delivery was made
Driver location, only between “Start route” and “End route”: arrival and departure at each stop, the latest position while the route runs, the times the route starts and ends, and a simplified line of the day’s route	Drivers	The driver’s iPhone	To notice arrival at stops, show the office’s live map, show customers an approximate position if the business turns that on, and report miles
Emails Drop sends for the business, with their delivery status, bounces, spam complaints and whether they were opened; unsubscribes	Customers, members	Our servers; our email service	To deliver them, show the business what was sent, and honour unsubscribes
Device information: push notification and Live Activity tokens, app version	Members	Your devices	To send notifications and Live Activities; the Apple Watch pairs with the driver’s iPhone
Subscription records: product, dates, and Apple’s transaction identifiers (never card numbers)	Owners	Apple	To know which plan a business has
Service events (for example “route dispatched”), which never contain names or addresses; an audit log of sensitive actions (proof deletion, exports, staff support views)	Members	Our servers	To keep Drop reliable, and to keep a record of who did what

Payments. Drop never processes payments or holds money. Cash on delivery is only a note the driver marks. App subscriptions are bought through Apple, and we never see your card.

Driver location. Drop uses a driver’s location only while a route is running, with iOS’s location indicator showing, and never off-shift. We don’t keep the raw stream of positions. See the driver location notice.

Proof is never edited. Photos and signatures are stored exactly as captured. The business’s owner can delete proof, and every deletion is logged.

Sensitive information. Drop has no fields for health, payment card or ID numbers. For pharmacies, Drop stores no medication, condition or prescription information by design: businesses must not enter medication names, and order notes are never shown in customer emails or on customer pages. Drop isn’t designed to process protected health information, and we don’t offer business associate agreements.

Maps and addresses. The app finds addresses and drive times with Apple’s MapKit on the device, so an address is sent to Apple for that. The map picture on a tracking page is drawn by Apple Maps: our server sends Apple the map’s centre, the coordinates of the customer’s address and the driver’s approximate position, but no names.

Text messages. Drop doesn’t send text messages.

How we use it

We use personal information to:

keep each business’s records, plan its routes, and keep proof of its deliveries;
send customers the emails the business turns on, in the business’s name;
send members notifications, Live Activities, reports and notices about their account;
manage subscriptions;
keep Drop secure and working: preventing abuse, fixing problems and answering support requests;
meet legal obligations.

We do not sell personal information, use it for advertising, build profiles, use third-party analytics or SDKs in the app, sell to or buy from data brokers, or use customer data to train AI models.

Who can see what

The owner sees everything in the business, and is the only one who can delete proof or export everything.
Dispatchers see customers, orders, routes, the live map and proof, and can export customers and orders as CSV.
Drivers see the routes sent to them, including each stop’s customer name, address, phone number and instructions.
A route link shows anyone who opens it a read-only list of that day’s stops, with names, addresses, phone numbers and instructions. It works through the day after the route’s date, and the business can turn it off sooner.
A customer’s links show that customer their tracking page and proof page.
Illuminant staff don’t look at businesses in the ordinary course. Authorized staff can open a read-only support view of a business only to answer a request or investigate a problem. It requires a written reason, lasts an hour, and every view is logged.

The companies that help us run Drop

A few service providers process information only on our instructions and only to provide Drop: Apple (sign-in, notifications, subscriptions and maps), GoDaddy (our servers), Postmark (email) and Google Workspace (our support inbox). The subprocessors page lists what each one does and the data involved.

We may also disclose personal information:

when the law requires it, for example in response to a valid subpoena or court order. Where we can, we tell the business first;
to protect someone’s safety, when we believe in good faith that it is needed to prevent serious harm;
in a business transfer, if Illuminant is merged or sold. This policy would continue to apply, and we would tell you in advance.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as California law defines those terms. We have not done so in the past 12 months.

How long we keep it

Information	Kept for
Customers, orders, routes and the record of each stop (outcome, time, place)	As long as the business exists, unless the business deletes them sooner
Proof photos and signatures	Free plan: 30 days. Drop 3 and Drop 10: 2 years. Drop 25: no time limit. After that, proof moves to an archive that isn’t shown or exported, and is deleted 90 days later. The stop’s record stays as history
The day’s route lines	The same period as proof
The driver’s latest position	Replaced with each new position while the route runs
Tracking and proof links	They expire 30 days after the delivery; the business can issue a new proof link
A customer the business deletes	Hidden at once, and can be restored for 30 days; then erased, with their proof
Full exports	7 days after they’re ready
Service events	13 months; they never contain names or addresses
Audit log	3 years
Backups	30 days, then overwritten
Unsubscribes	Kept, so they keep working
Subscription records	As long as the law requires or allows, without customer data, even after a business is deleted

Exporting and deleting

Export. In Account › Privacy & data, the owner can download everything as a ZIP: customers and orders as CSV files, every proof original byte for byte, and a manifest listing each file’s SHA-256 fingerprint. Dispatchers can export customers and orders as CSV. Exports work on every plan, including Free.

Deletion.

A business: the owner can delete it in Account › Privacy & data. There is a 30-day grace period in case it was a mistake; then all its records and files are erased. Copies in our encrypted backups are overwritten within a further 30 days.
Your account: Account › Privacy & data › Delete my account. If you’re the owner, your business closes as above and its other members get an email. Your name, email and Apple identifier are removed, and your Sign in with Apple authorization is revoked.
A customer: a business can delete a customer. They’re hidden at once and, unless restored within 30 days, erased with their proof.

Requests from customers and drivers

A customer or driver who wants to see, correct or delete their information should ask the business first, because the business controls the records. You can also write to us at support@illuminantinc.com. We’ll pass the request to the business and help them answer it, and we’ll act on it directly where the law requires.

Every email Drop sends to a customer has an unsubscribe link, which stops that business’s delivery emails at once.

Security

Drop’s data is stored in the United States on a dedicated server hosted by GoDaddy. It is encrypted in transit (HTTPS), and nightly backups are encrypted with AES-256.
Proof files are served only through signed links that expire within minutes.
Tracking, proof and route links use long random codes that can’t be guessed, and they expire. The pages they open set no cookies, load nothing from other sites, aren’t indexed by search engines and send no referrer.
Staff access is limited to the few people who need it and is logged.
On the phone, proof waiting to upload is protected by iOS data protection.
No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Your choices and rights

Wherever you live, you can ask us to access, correct, export or delete your personal information. Much of it you can do yourself in the app, and for the rest you can write to support@illuminantinc.com. We answer within 30 days, verify requests by confirming them from the account’s Apple sign-in or its email address, and won’t treat you differently for making one.

California residents. Under the California Consumer Privacy Act as amended (CCPA), you have the right to know the categories and specific pieces of personal information we collect, the sources and purposes of that collection, and the categories of third parties we disclose it to. You also have the right to delete and to correct your personal information, and the right not to be discriminated against for exercising these rights.

The categories we collect are set out above: identifiers, personal records (names, addresses, phone numbers), commercial information (orders and deliveries), visual information (proof photos and signatures), internet and device activity, and sensitive personal information limited to Apple account identifiers and drivers’ precise location during a route.
We use sensitive personal information only to provide the service, so the right to limit its use adds nothing to what we already do.
We do not sell or share personal information, so there is nothing to opt out of.
You may use an authorized agent. We will ask the agent for proof of your permission and may ask you to confirm your identity.

Other US states. Residents of states with comprehensive privacy laws have similar rights to access, correct, delete and port their data and to opt out of sale, targeted advertising and profiling. We don’t sell data, target ads or profile people. If we decline a request, you can appeal by replying to our answer, and we will respond within the time the law requires.

Children

Drop is for adults. You need to be 18 or older to create an account. We do not knowingly collect information from children under 13.

This website

drop.illuminantinc.com uses no cookies, advertising trackers or third-party analytics, and loads no outside scripts or fonts. Like any web server, ours keeps standard access logs (IP address, browser type, the page requested) for a short time for security.

Changes to this policy

When we make a meaningful change, we will update the date at the top of this page and tell businesses in the app before the change takes effect.

Contact us

Illuminant Inc
2082 Michelson Dr.
Irvine, CA 92612
United States

Email: support@illuminantinc.com