DRAFT FOR LEGAL REVIEW — NOT FOR PUBLICATION. This page must not be used as the Privacy Policy URL in App Store Connect until Legal has reviewed it and every [LEGAL] block is resolved or removed.
First question for Legal. Amazon already publishes per-country
Employee Privacy Notices on atoz.amazon.work, covering "all Amazon
employees and contingent workers", which is GeoScout's population. That host requires
corporate sign-in, and Apple requires a privacy URL reachable without authentication.
Amazon Flex resolved the same tension by publishing a public notice — and that notice
states it does not cover Amazon employees, so it cannot be reused here. Does Amazon
publish this app-specific notice, point Apple at a different existing public notice, or
publish a short public notice that defers to the internal employee notice?
About this notice
Amazon GeoScout is an application used by Amazon personnel in the course of their work. Field Quality Associates use it to visit addresses where Amazon deliveries have been unsuccessful, record what is actually at those addresses, and correct Amazon's address, map and delivery-location records.
This notice describes how Amazon collects and uses personal information in connection with the use of that application. It is published without a sign-in requirement so that it is available from the application's App Store listing.
This notice covers the application only. It does not cover the broader handling of employment information, which is addressed by the Amazon Employee Privacy Notice for the country in which you work, nor does it cover your personal Amazon shopping account.
[LEGAL] Confirm the three paragraphs above, in particular: the correct Amazon entity to name; whether to say "personnel", "employees", or to cover contingent workers explicitly; and whether the deferral to the Employee Privacy Notice is the right construction, given that notice is not publicly reachable. Flex's equivalent opening names the contracting relationship ("As referenced in connection with Amazon's contract with you or your Transportation Company"), which has no analogue for employees.
What personal information about me does Amazon collect?
Amazon collects personal information in connection with the application from the following sources. Specific examples are listed in Examples of Information Collected at the end of this notice.
- Information you give us. The observations you record on the survey form at an address, and the photographs you take or select as evidence for a survey.
- Information automatically collected by the application. Information gathered by the application as you use it, including your device's precise location, identifiers derived from your device, which features of the application you use, and technical diagnostic information such as crash reports, performance measurements and application logs.
- Information provided by Amazon systems when you sign in. Your Amazon employee alias, and the work assigned to you — the addresses on your route, the station you are working from, and the delivery history that explains why each address needs a survey.
Summary of information collected
The table below is the complete account of what the application transmits off your device. It matches the privacy manifest shipped inside the application and the disclosures made to Apple.
| Information | What it is, and when it is collected | Purpose |
|---|---|---|
| Precise location | Your device's latitude, longitude and accuracy. Used to guide you to each address, to confirm you have arrived, and attached to the survey you submit. Collected while the application is in use and, during navigation, while it is in the background. | Operating the application |
| Photographs | Photographs of a property, taken with your device's camera or chosen from its photo library, submitted as evidence for a survey. | Operating the application |
| Survey content | The observations you record about a property on the survey form — for example where an entrance is, or an obstruction affecting delivery. | Operating the application |
| User identifier | Your Amazon employee alias. Identifies who is signed in, who submitted a given survey, and which user a diagnostic report or log entry belongs to. | Operating the application |
| Device identifiers | Identifiers derived from your device, used to apply feature configuration consistently to the same device and to group crash and performance reports. | Operating the application |
| Application activity | Which features of the application you use, and when. | Analytics |
| Crash reports | Diagnostic information recorded when the application crashes or handles an error, including the state of the application at that moment. | Operating the application |
| Performance data | Measurements of how the application performs, such as how long it takes to start. | Operating the application |
| Application logs | Technical log output from the application, used to diagnose reported problems. Logs carry your alias so that a problem you report can be traced to your session. | Operating the application |
All of the above is associated with the signed-in user. The application contains no advertising, does not track users as the Apple App Store defines tracking, and uses no third-party analytics service: the information is sent to systems operated by Amazon.
The application does not collect your contacts, calendar entries, messages, health or fitness information, payment information, or your browsing history from outside the application. It does not use facial recognition, and it records no audio or video.
For what purposes does Amazon use my personal information?
- Confirming who you are and that you may use the application. Your sign in establishes your identity, and the application checks that you are set up to be assigned survey work before it will show any.
- Giving you your work and guiding you to it. Showing the addresses assigned to you and providing turn-by-turn navigation to each one.
- Recording the surveys you carry out. Capturing your observations, attaching an accurate coordinate and your photographs, and submitting the result.
- Correcting Amazon's address and map records. The purpose of the work the application supports: improving the accuracy of Amazon's delivery-location data so that later deliveries to those addresses succeed.
- Checking the quality of submitted data. A submitted survey is attributed to the person who made it, so that questions about a correction can be answered and systematic errors identified.
- Operating, diagnosing and improving the application. Investigating crashes and reported faults, measuring performance, and understanding which features are used.
- Complying with legal obligations and protecting Amazon and others.
[LEGAL] Purposes 1–6 describe what the code does and engineering can evidence each. Purpose 7 is included because Flex's notice carries an equivalent, but engineering has no basis for it and cannot say what it should cover — confirm or remove.
[LEGAL] Purpose 5 needs attention. Surveys are attributed to their author, and that attribution is available to Amazon teams. Engineering can see the attribution exists and that it is used for data quality; it cannot see whether the data is also used in performance management. If it is, that likely needs disclosing here and may engage works-council or local-law requirements in some territories.
[LEGAL] Confirm whether the legal basis for each purpose must be stated for the territories in scope, and add it if so.
Does Amazon share my personal information?
- Amazon teams and affiliates. The teams that maintain Amazon's geospatial data and this application have access to the surveys submitted, the photographs attached, and the diagnostic information the application reports. Access is restricted to personnel with a business need.
- Third-party service providers. The application uses crash and performance reporting software licensed from a third party. That software reports to endpoints operated by Amazon rather than to the supplier, so the supplier does not receive your information through this application.
- Legal and protective disclosures. Information may be disclosed where required by law, or to protect the rights, property or safety of Amazon, its personnel or others.
[LEGAL] Flex's notice additionally covers "business transfers" (data moving in a sale or purchase of business assets) and sharing with shippers, customers and delivery recipients. Neither appears to apply here — GeoScout shares nothing with customers or recipients — but confirm, and add a business-transfers paragraph if Amazon's standard construction requires one.
[LEGAL] Engineering can supply, on request, the specific Amazon systems that receive each category of information, the AWS account and region each sits in, and the access controls on each, if that level of detail is needed to support this section.
Does Amazon transfer my personal information outside of the country in which I work?
[LEGAL] Proposed wording, mirroring Flex's section, for Legal to confirm or replace: "Information collected through the application may be stored and processed in a country other than the one in which you work, including where Amazon or a service provider operates equipment or personnel elsewhere. Where that happens, the information may be subject to the laws of that country."
Engineering's input: the systems that receive this information today are in the United States. Engineering can confirm the specific regions on request, but cannot state what safeguards apply or how they should be described.
How secure is information about me?
Information is encrypted while being transmitted from your device. Access to the systems that receive it is restricted to authorised Amazon personnel.
You also play a part in keeping information secure. Protect the credentials you use to sign in, keep a passcode on your device, and sign out of the application if you stop using it for this work.
[LEGAL] Flex's equivalent section also mentions physical, electronic and procedural safeguards, and occasional identity checks before disclosing information. Confirm whether the same statements should appear here.
How long does Amazon keep my personal information?
[LEGAL] Proposed wording, mirroring Flex, which gives no specific periods: "Amazon keeps information collected through the application for as long as needed for the purposes described in this notice, or for longer where required by law or to manage a claim."
Engineering has deliberately not stated periods, because retention is configured per store and is a policy decision rather than a property of the code. Engineering can supply the currently configured retention for application logs, crash and performance reporting, and the geospatial stores, which Legal can then confirm, correct, or decide not to publish.
What rights and choices do I have about my personal information?
The application cannot be used without access to your precise location. It exists to record what is present at a given address, and a survey without an accurate coordinate is not usable. You can withdraw location access at any time in your device's Settings, which will prevent the application being used for its purpose. You can likewise withdraw access to the camera and photo library, which will prevent photographs being attached to a survey.
[LEGAL] Add the rights available and how to exercise them. Flex's construction is brief — access and deletion where required by law, requests to a named mailbox — but GeoScout's users are employees rather than contractors, so the applicable rights and the route to exercise them are likely those in the Employee Privacy Notice rather than a separate app-specific process. Confirm which, and name the route.
Additional state-specific and country-specific disclosures
[LEGAL] Flex publishes a separate "Additional State-Specific Privacy Disclosures" section covering California Privacy Rights Act requirements, including a notice at collection, the categories collected and disclosed, rights with an appeal process, and statements on sale, sharing and retention. Advise whether an equivalent is required here and, if so, supply it. GeoScout launches in the United States only; the Q1 2027 worldwide expansion will require this section to be revisited.
Contact, notices and revisions
[LEGAL] Name the privacy contact for this notice. Flex directs privacy questions and requests to a dedicated transportation-privacy mailbox; the equivalent here needs naming, and should not be the engineering support address used below for application faults.
If this notice changes, the revised version will be published at this address and the "last updated" date above will change. Amazon will not materially reduce the protections applying to information already collected without consent.
For help with the application itself rather than a privacy question, see the support page.
Examples of information collected
Information you give us
- The content of a property survey: the attributes you record about an address, such as the position of an entrance, access arrangements, or an obstruction affecting delivery.
- Photographs you take with your device's camera, or select from its photo library, and attach to a survey as evidence.
Information automatically collected by the application
- Location. Your device's latitude, longitude and accuracy, while the application is in use and, during turn-by-turn navigation, while it is in the background. The coordinate at the time of a survey is submitted with that survey.
- Application activity. Which screens and features you open, and when, including counts of particular actions.
- Crash and error reports. Where in the application a crash or handled error occurred, the sequence of actions leading to it, your alias, your device model and operating system version, and the application version.
- Performance measurements. Timings such as how long the application takes to start and how long particular operations take.
- Application logs. Technical log output written by the application, which includes your alias so a reported problem can be traced to your session, together with the application version and the identifier of your current session.
- Device identifiers. Identifiers derived from your device, used to apply feature configuration consistently to the same device, and attached to crash and performance reports so reports from one device can be grouped.
Information provided by Amazon systems
- Your Amazon employee alias, established when you sign in.
- The work assigned to you: the addresses on your route, the station you are working from, and the ordering of your stops.
- For each address, the delivery history that explains why it needs a survey — for example the number of recent unsuccessful deliveries and the reasons recorded for them.
[LEGAL] One point engineering wants explicitly on your radar, because it is not about the app's own users. To do the work, the application displays addresses and their delivery history, which is information about Amazon's customers rather than about the person using the app. A privacy notice addressed to app users is arguably not the place to cover it, and Flex's notice does not — but the handling of that data is a real consideration and should be confirmed as covered elsewhere rather than assumed.