Privacy Policy

1. Information We Collect

Information You Provide

• Full name — collected at registration
• Phone number — used as your account identifier and for SMS notifications
• Password — stored as a salted cryptographic hash, never in plain text
• Receiver details — name and phone number of cargo recipients you register
• Cargo information — item descriptions, quantities, destinations

Information Collected Automatically

• GPS location — collected from driver devices during active trips to track cargo checkpoints. Location is only collected when a trip is active.
• Device identifiers — used internally for session management
• App usage data — actions logged locally for audit and dispute resolution

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process and track cargo shipments
• Send SMS notifications about your cargo status (loaded, in transit, delivered, ready for pickup)
• Send one-time passwords (OTPs) for account verification and secure cargo pickup
• Enable GPS checkpoint tracking during bus trips
• Provide customer support
• Prevent fraud and unauthorized cargo pickup
• Maintain audit records for dispute resolution

3. Information Sharing

We do not sell your personal information. We may share your information with:

Twilio

We use Twilio to send SMS notifications and one-time passwords (OTPs) for account verification and secure cargo pickup. Your phone number is shared with Twilio solely for the purpose of delivering SMS messages and verifying your identity. Twilio is bound by their own privacy policy.

Our Servers

Cargo and trip data is synced to our secure cloud infrastructure (Cloudflare and Supabase) to enable multi-device access and operational continuity. All data is encrypted in transit.

Legal Requirements

We may disclose your information where required by law or to protect the rights, property, or safety of UNEx Logistics, our users, or others.

4. Location Data

Location data is collected only from driver accounts and only during active trips. Location is used to:

• Record GPS checkpoints along bus routes
• Provide cargo tracking visibility to senders and administrators
• Generate trip records for operational purposes

Sender, receiver, desk officer, and station staff accounts do not have location tracked. Drivers can view their assigned GPS status in the app at all times.

5. Data Storage & Security

UNEx Logistics is an offline-first application. Data is stored locally on your device using Hive, a lightweight local database. When network connectivity is available, data syncs to our secure cloud infrastructure.

• Passwords are stored as salted SHA-256 hashes — never in plain text
• OTPs are stored as hashed values and expire after 10–12 hours
• All data transmission uses HTTPS encryption
• API access is protected by secure key authentication
• Local device data is protected by your device's own security (screen lock, device encryption where enabled)

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We encourage you to use a strong password and keep your phone secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained until you request deletion
• Cargo and trip records may be retained for legal, financial, and audit purposes even after account deletion
• OTP records are automatically deleted after use or expiry
• Audit logs are retained for dispute resolution purposes

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your account and associated personal data
• Objection — object to processing of your personal data in certain circumstances

To exercise any of these rights, contact us using the details in Section 11. Account deletion requests are processed within a reasonable period, subject to retention requirements outlined in Section 6.

You can also request account deletion directly at: unexlogisticsug.netlify.app/delete-account

8. Third-Party Services

The App uses the following third-party services:

• Twilio — SMS delivery and OTP verification service
• Cloudflare Workers — backend sync infrastructure
• Supabase — data storage and event sourcing

Each of these services has its own privacy policy governing the data they process. We are not responsible for the privacy practices of third-party services.

9. Children's Privacy

UNEx Logistics is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to remove such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the App or via SMS. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: