LEGAL

Privacy Policy

GDPR-compliant data protection and privacy information

1. Data Controller

Responsible for data processing:

Priya Singh, Berlin, Germany

Email: [email protected]

2. Data We Collect

Account Information:

  • Email address (required for authentication)
  • Display name
  • Profile picture (optional)
  • Phone number (for verification)
  • Location information (city/country)

Platform Activity:

  • Travel plans and availability
  • Delivery requests and descriptions
  • Messages between users
  • Platform usage patterns
  • IP address and browser information

3. Legal Basis for Processing

We process your data based on:

  • Contractual necessity - To provide platform services and facilitate connections
  • Legitimate interest - To maintain platform security and prevent fraud
  • Consent - For optional features like marketing communications
  • Legal obligation - To comply with law enforcement requests

4. How We Use Your Data

Primary Purposes:

  • Facilitate connections between travelers and senders
  • Enable secure communication through messaging
  • Verify user identity and maintain platform security
  • Send important notifications about requests and messages

We DO NOT:

  • Sell your personal data to third parties
  • Use your data for advertising purposes
  • Share data with marketing companies
  • Process payments or financial information

5. Data Sharing

Information shared with other users:

  • Display name and profile picture
  • Travel plans (routes, dates, availability)
  • Package descriptions (for delivery requests)
  • General location information
  • Verification status (phone verified, government-ID verified)

Identity verification (Didit):

To post or accept deliveries, you complete a one-time government-ID verification run by Didit (didit.me), our identity-verification processor.

  • Your ID document, selfie, and liveness data are processed by Didit under their privacy terms and never stored on our servers.
  • We store only the outcome (verified or not), the provider name, and the date. Didit retains the underlying data under its own retention policy.

Travel Companion contact details:

If you post a Travel Companion request (to find a companion for a parent), the contact email and phone number you enter are shown to other logged-in members who offer to help, so they can reach you directly. This sharing is limited to the platform's logged-in community and is necessary to arrange a companion.

  • You explicitly consent to this sharing when posting; the form requires your acknowledgement.
  • Contact details are visible to logged-in members only, never to the public internet.
  • You can edit or delete your request (and its contact details) anytime from "My Listings".
  • Share only contact details you are comfortable disclosing to other members, and always verify anyone who contacts you.

Information shared with authorities (if legally required):

  • Account information for law enforcement investigations
  • Communication records if subpoenaed
  • User activity logs for legal proceedings

6. Your Rights (GDPR)

You have the right to:

  • Access - Request copies of your personal data
  • Rectification - Request correction of inaccurate data
  • Erasure - Request deletion of your data
  • Portability - Request data in a structured format
  • Restriction - Request limitation of processing
  • Objection - Object to data processing
  • Withdraw consent - For consent-based processing

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Data Storage & Security

Storage location: Data is stored on Firebase servers (Google Cloud) with servers in the EU.

Security measures:

  • Encrypted data transmission (HTTPS)
  • Secure database access controls
  • Regular security updates and monitoring
  • User authentication and session management

Data retention:

  • Active accounts: Data retained while account is active
  • Deleted accounts: Data removed within 30 days
  • Messages: Retained for 2 years for dispute resolution
  • Legal records: Retained as required by law

8. Contact & Complaints

Data Protection Contact:

Email: [email protected]

Subject: "Data Protection Request"

Right to complain: You can file complaints with your local data protection authority or the German Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Last updated: 10/28/2026

This privacy policy complies with GDPR (EU) 2016/679 and German BDSG requirements.