Privacy Policy

Peleka collects information needed to create accounts, create and deliver shipments, process payments, provide tracking, and secure the service.

• Account data: full name, email address and/or phone number, password credentials, account ID, and account status.
• Profile data: profile image when provided, default address, and saved location coordinates.
• Shipment data: sender and recipient names and phone numbers, pickup and delivery addresses and coordinates, notes, parcel description/category, dimensions, weight, declared value, scheduling information, tracking number, status, and delivery history.
• Payment data: payment amount, currency, payment status, payment provider reference, payment phone number, and transaction records. Peleka does not receive or store your Mobile Money PIN.
• Location data: device location when you choose the current-location feature, and precise pickup/delivery coordinates selected for shipments.
• User-generated data: shipment notes, ratings/comments, and complaint information where those features are used.
• Security and technical logs: IP address and user-agent information associated with authenticated actions, security events, and audit records.

• Create and authenticate your Peleka account and maintain sessions.
• Calculate quotes and process shipments.
• Assign and coordinate delivery personnel.
• Provide shipment tracking and delivery status updates.
• Process Mobile Money payments and maintain payment records.
• Show pickup/delivery proof and shipment history.
• Provide customer support, handle complaints, and resolve delivery issues.
• Protect the platform, prevent fraud and abuse, and maintain audit records.
• Comply with applicable legal obligations.

Peleka can use your device's location when you choose the current-location feature. You can also search for and manually select pickup and delivery locations. Shipment locations are stored as addresses and latitude/longitude coordinates because they are required to provide delivery services. The app does not continuously collect your device location in the background.

We do not sell personal information. Information is shared only as needed to operate Peleka, complete a transaction, or meet legal requirements.

• Delivery personnel: shipment information needed to collect and deliver a parcel, including relevant names, phone numbers, addresses, and locations.
• Paypack: payment requests use the customer's payment phone number and transaction amount. Paypack processes the Mobile Money transaction on Peleka's behalf.
• OpenStreetMap Nominatim: when Peleka cannot satisfy a location search from its own location database, the backend sends the search text and, when supplied, nearby coordinates to Nominatim to obtain geocoding results.
• Cloud and infrastructure providers: providers such as hosting, database, and object-storage services process information on Peleka's behalf.
• Authorities: information may be disclosed when legally required or necessary to protect users, the public, or the service.

The reviewed customer app does not use advertising or analytics SDKs and does not collect contacts, microphone recordings, camera photos for shipment creation, SMS contents, call history, health information, or installed-app lists. The Android project contains an SMS permission declaration that is not used by the current customer-app code; this permission should be removed before the Play Store release unless a future feature genuinely requires it.

Production API communication is configured to use HTTPS. Authentication tokens are stored using the app's secure storage mechanism, and the backend stores passwords as password hashes rather than plaintext passwords. Access to shipment and contact information is controlled by account role and shipment ownership.

Peleka retains account, shipment, payment, audit, and related records for as long as reasonably necessary to operate the service, resolve disputes, prevent fraud and abuse, maintain transaction records, and meet legal obligations. Some records may therefore remain after a shipment is completed.

The current reviewed customer app and backend do not yet expose a completed account-deletion workflow. This is a release-readiness gap: because Peleka allows account creation, Google Play requires an in-app deletion path and a working web resource through which users can request deletion of their account and associated data. Peleka must implement and verify this workflow before Play Store submission.

Peleka is a general courier service and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.

We may update this Privacy Policy when Peleka's features, data practices, or legal obligations change. The effective date shown below will be updated when material changes are made.

For privacy questions or requests, use the customer support/contact mechanism provided by Peleka. A dedicated public privacy contact should be added to this page before the Play Store submission so users have a clear way to submit privacy enquiries and deletion requests.