Boolanga × HungerStation
RFP-AMB-001 · Volume B - Commercial · Revised May 10, 2026

Ambassadors Program
Commercial Proposal

Native iOS + Android. Full TSD scope. KSA-resident hosting. One fixed monthly fee.

Best & Final Offer
€7,500
PER MONTH
+ €7,500 one-time installation fee  ·  or amortised at €625/month over 12 months
Year 1 total: €97,500
Pricing Structure What's Covered KPI Engine KSA Hosting Terms
Two payment options - same total

Choose the structure that suits HungerStation's procurement.

Year 1 total is identical at €97,500. The structure can be a one-time installation fee at signature plus a flat €7,500/month, or zero upfront with the installation fee amortised across 12 monthly payments. Pick whichever works best operationally - both are open to us.

Option A
One-time setup + flat monthly
Installation fee (at contract signature)€7,500
Recurring fee€7,500/mo
Year 1 total€97,500
Effective monthly cost€7,500
Option B
Zero upfront - amortised
Installation fee (at contract signature)€0
Recurring fee (incl. €625/mo amortisation)€8,125/mo
Year 1 total€97,500
Effective monthly cost€8,125
★ Both options include everything below - no separate charges
Native iOS + Android development absorbed by Boolanga · External penetration test (mandatory per TSD §10) absorbed by Boolanga · KSA-resident hosting · All 5 modules · Three integrations · Training for all 62 users · Documentation package · Phase 2 city configuration · 4-hour critical / 24-hour standard support SLA · Dedicated account management.
Year 1 - €97,500 covers everything below

Every line item. Nothing charged separately.

No development charge, no per-check fee, no hidden infrastructure cost, no setup surprises. Native iOS + Android binaries delivered as part of the monthly fee.

BUILDPlatform development - absorbed by Boolanga, delivered to HungerStation28 items
✓Native iOS application - Swift / Objective-C, App Store distribution (.ipa), iOS 14+ compatible
✓Native Android application - Kotlin, Play Store distribution (.aab), Android 10+ compatible, 2GB RAM tested
✓All 5 TSD modules: Ambassador Mobile App, Incident Response, Field Intelligence, KPI Engine, Crystal Audit
✓8-step compliance check flow per TSD §3.1 - sequential, step-level validation, no skip permitted
✓Photo enforcement: live camera-only, EXIF 60s, Laplacian blur <100, MD5 dedup, anti-screenshot per TSD §3.2
✓GPS double-capture (photo + submit) with KSA bounding box, impossible movement detection
✓AES-256 encrypted offline storage - minimum 200 checks, auto-sync every 30s, immutable timestamps
✓RiderCare bidirectional integration (8001111717) - webhook + API, real-time event-driven dispatch
✓Live dispatch map, one-tap dispatch, 60s accept/decline, auto-reoffer, 15-min on-scene SLA timer
✓L1/L2/L3 incident workflows, full incident report forms, repeated incident tracking with last incident date
✓4 field intelligence forms: Voice of Rider, Vendor Issues, Street Reporting, Daily Operational Log
✓KPI scoring engine - automated 4-pillar monthly calculation per TSD §6.1, zero manual intervention
✓Deduction engine - SAR 4/missed, SAR 15/Crystal-confirmed invalid, vehicle incident logic, base salary protected, SAR 0 minimum
✓Incentive bracket auto-assignment - Platinum / Gold / Silver / Bronze for ambassadors and Team Leaders
✓Team Leader composite score - 60% / 25% / 15% formula, read-only, raw inputs hidden from TL
✓Crystal validation queue with batch operations, 48-hour SLA, all 5 fake-check detection rules
✓Coaching call auto-task per violation with outcome logging and 24-hour auto-escalation to TL
✓Ambassador, Team Leader, and HSS Management dashboards - each role-scoped with hard API + DB access enforcement
✓Data export to Excel (.xlsx) + Google Sheets API v4 - Admin and HSS Asst Manager only, ambassador returns 403
✓Full UI/UX design - optimised for field use on mid-range devices
✓Full Arabic RTL implementation - Boolanga provides translations and implements RTL across mobile app
✓5-role RBAC enforced at API and database level - cross-role access impossible at system level (P0 per TSD §2)
✓SSO with HungerStation IDP + 2FA mandatory for HSS Manager and Admin per TSD §10
✓AES-256 at rest, TLS 1.3 in transit, signed photo URLs 1-hour expiry
✓Immutable append-only audit logs - 2-year retention, all submissions/edits/exports/deductions/overrides
✓WMS, FMS, Google Sheets API integrations per TSD §9
✓Phase 2 city configuration - Mecca, Medina, Eastern Province, Abha, Al Ahsa, QP - config only, no re-engineering, no additional charge
✓Training for 60 ambassadors, 2 Team Leaders, HSS management - proficiency test before go-live
OPEXOngoing operations - included monthly
✓KSA-resident hosting - 100% inside KSA, PDPL + NDMO compliant, 99.5% uptime SLA 06:00-02:00 KSA daily, hosting certificate before contract signature
✓External penetration test - funded by Boolanga, all Critical/High findings resolved before go-live, report to HungerStation CISO per TSD §10
✓Platform maintenance - bug fixes, security patches, minor releases, OS-level compatibility updates (iOS / Android updates)
✓App Store + Play Store fees and submissions - Apple Developer Program, Google Play Console, all submission costs absorbed
✓Technical support - 4-hour response for critical (P0) issues · 24-hour for standard (P1/P2) issues, throughout the contract
✓SLA monitoring - uptime monitoring, alerting, incident response for the full contract duration
✓Account management - dedicated Boolanga contact for the full contract, regular cadence reviews
✓Documentation maintenance - system architecture, API reference, data dictionary, user manuals kept current with releases
DOCSDocumentation package - TSD §12.2 - delivered at go-live
✓System Architecture Document (infrastructure + data flow + integration map)
✓API Reference (all endpoints, schemas, error codes, OAuth + Bearer token guide)
✓Data Dictionary (all fields, types, validation rules, enums)
✓Admin User Manual (English)
✓Ambassador User Manual (Arabic + English)
✓Team Leader User Manual (Arabic + English)
✓UAT Sign-Off Report (all P0/P1 cases passed)
✓Penetration Test Report (Critical/High resolved, delivered to HungerStation CISO)
✓KSA Data Hosting Certificate (PDPL + NDMO compliance)
Module D - KPI scoring engine

Fully automated. Every formula exactly as TSD §6 specifies.

Monthly KPI calculation, deductions, and incentive bracket assignment run automatically at month-end after Crystal audits complete. Zero manual intervention. Manual overrides by HSS Asst Manager only - each generates an immutable audit log entry per TSD §10.

50
Checks Completed
(Actual checks ÷ 1,560) × 50
Proportional · capped at 50 pts
Target: 60 checks/day × 26 days
20
Report Quality
max(0, 20−((0.95−valid_rate)×200))
≥95% = 20 pts · below 85% = 0
15
Proactive Escalations
2+ HSS-validated = 15 pts
1 = 8 pts · 0 = 0 pts
15
Violation Detection
5+ = 15 pts · 3-4 = 10 pts
1-2 = 5 pts · 0 = 0 pts
Deduction engine - automatic at month-end after Crystal audits
Missed check: SAR 4/check (auto) Crystal-confirmed invalid: SAR 15/check (never on flag alone) Vehicle incident: 30% base + 50% incentive, max 3 months, HR + Fleet required Base salary: never affected · Minimum payout: SAR 0 enforced
Incentive brackets - ambassador
95-100 PTS
PLATINUM
SAR 1,200
85-94 PTS
GOLD
SAR 900
75-84 PTS
SILVER
SAR 650
65-74 PTS
BRONZE
SAR 400
< 65 PTS
NOT ELIGIBLE
HR review
Team Leader brackets: Platinum SAR 1,800 · Gold SAR 1,400 · Silver SAR 1,000 · Bronze SAR 600 · Below 65: not eligible.
Team Leader composite formula: (team_avg×0.6) + (eligible_pct×0.25) + (reports×0.15). Read-only display. Raw inputs hidden from TL view at API level.
KSA data residency - TSD §10

All data inside KSA. Certificate before signature.

All data - storage, processing, and backups - is physically hosted within the Kingdom of Saudi Arabia. PDPL and NDMO compliant. The Data Residency Attestation Letter is provided before contract signature, with no lead time required.

🇸🇦
Data location
100% inside KSA
All storage + processing
📋
Hosting certificate
Data Residency Attestation
Available pre-signature
✅
Compliance
PDPL compliant
NDMO compliant
⚡
Uptime SLA
99.5% availability
06:00-02:00 KSA daily
🔐
Encryption
AES-256 at rest
TLS 1.3 in transit
📸
Photo storage
Signed URLs 1-hr expiry
No predictable paths
💾
Backups
Daily automated
30-day retention, KSA only
🛡️
Pen test
External firm engagement
Funded by Boolanga
Contract terms

Proposed terms

Standard 12-month SaaS engagement. Recurring monthly fee starts from pilot go-live (Stage 2 - late June 2026). HungerStation pays nothing until the platform is live in pilot.

Duration
1 year (12 months)
Renewable annually
Currency
EUR
Invoiced monthly in advance
Recurring fee start
From pilot go-live
~Late June 2026
Setup fee
€7,500 lump sum
OR €625/mo amortised
Support SLA
4hr response - critical
24hr - standard
Change requests
Quoted within 5 business days
of written request
Platform IP
Owned by Boolanga / WYB
HS right of use during contract
Data ownership
HungerStation owns all data
PII deleted within 90 days of exit
Pen test
Funded by Boolanga
Report to HS CISO
App Store fees
Funded by Boolanga
Apple + Google
Governing law
United Arab Emirates
Wear Your Brand FZC, UAQ
Prior contract
Contract Legal 24 (expired Dec 2025)
does not govern this engagement