1. Who is responsible for your data
Fady Hachani, operating as Déligo, Tunisia.
Privacy contact: privacy@wearedeligo.com
Fady Hachani is the data controller for the personal data described below. Elsewhere in this policy “we” and “us” refer to Déligo.
2. Data we collect
2.1 Account and identity
| Data | When | Why |
|---|---|---|
| Phone number | Registration (all users) | Your account identifier; verified by one-time SMS code |
| Full name | Registration | Shown to the other party in a delivery so you can identify each other |
| Email address | Optional | Account-deletion confirmation codes, data exports, support |
| Profile photo | Optional | Shown to the other party during a delivery |
| Google account details | If you use Google Sign-In | Authentication only — we receive your name, email and profile picture |
| Consent record | Registration | Which version of these terms you accepted, and when — legally required evidence |
2.2 Driver-only data
If you register as a driver, we additionally collect:
- Vehicle details — type, load capacity, and licence plate number.
- Identity and licence documents that you upload for verification. These are reviewed by our operations staff and are not shown to clients.
- Availability status and your approximate service area.
2.3 Location data
This is the most sensitive category we handle, so we are specific about it:
- Precise GPS location (drivers) is collected while the app is in use and you are online or on an active delivery. It is used to match you with nearby requests, to show the client where their delivery is, and to power in-app turn-by-turn navigation. We stop collecting it when you go offline.
- Pickup and drop-off addresses (clients) that you enter or select on the map.
- Trip history — the route points recorded during a delivery, kept as evidence in case of a dispute about what was delivered, where, and when.
We do not track your location in the background when you are offline, and we never sell location data or use it for advertising.
2.4 Microphone and calls
The app can place in-app voice calls between the client and the driver of an active delivery. Your microphone is accessed only for the duration of a call you or the other party initiates. Call audio is transmitted peer-to-peer and is not recorded or stored by us.
2.5 Content you provide
- Photos of items attached to a transport request.
- Chat messages exchanged with the other party about a delivery. These are stored so both sides keep a record and so we can investigate reports.
- Ratings and reviews you leave after a delivery.
- Reports and support messages you send us.
2.6 Technical data
- Push notification token — required to notify you of new offers, bookings and messages.
- Device and app diagnostics — app version, operating system, and crash information, used to fix bugs.
- Security logs — sign-in events and sensitive account changes, retained to detect fraud and abuse.
3. What we do not do
- We do not sell or rent your personal data to anyone.
- We do not use your data for third-party advertising or ad profiling.
- We do not record voice calls.
- We do not access your contacts, SMS messages, call log, or files outside the photos and documents you deliberately upload.
4. Who we share data with
We share the minimum necessary, and only with:
| Recipient | What they receive | Purpose |
|---|---|---|
| The other party in your delivery | First name, profile photo, rating, and — during an active delivery — the driver's live position | So the delivery can actually happen |
| Google (Firebase Cloud Messaging) | Push token and notification content | Delivering notifications |
| Google (Sign-In & Play Services) | Authentication data | Optional Google sign-in |
| Expo | Push token | Notification routing |
| OpenStreetMap Nominatim | Coordinates you look up | Converting coordinates to street addresses |
| OSRM routing service | Pickup and drop-off coordinates | Calculating driving routes and ETAs |
| LiveKit / WebRTC infrastructure | Real-time call audio stream | Carrying in-app voice calls |
| Cloudflare | Network traffic metadata | Securing and routing traffic to our servers |
| Law enforcement | Only what is legally compelled | Where we are required by law |
5. How long we keep it
- Account data — while your account is open.
- Delivery and trip history — retained after completion for dispute resolution, safety and accounting obligations, then anonymised.
- Chat messages — retained for the lifetime of the related booking record.
- Driver verification documents — retained while you are an active driver and for the period required by transport regulations afterwards.
- Deleted accounts — see section 6.
6. Your rights and how to use them
Download your data
In the app: Profile → Privacy & data → Download my data. You receive a machine-readable export of your account, bookings and messages.
Delete your account
In the app: Profile → Privacy & data → Delete account. We email a confirmation code, then:
- Your profile, photos, chat history and GPS history are permanently erased.
- Completed bookings are kept in anonymised form — stripped of anything that identifies you — because the other party has a legitimate record of the transaction and we have accounting obligations.
- You are removed from encrypted backups within 30 days.
- Your phone number is freed immediately for a new registration.
You cannot delete your account while a delivery is in progress; complete or cancel it first.
If you can no longer access the app, email privacy@wearedeligo.com from your registered address and we will process the deletion manually. Full details, including exactly what is kept and for how long, are on the Delete your account page.
Other rights
You may ask us to correct inaccurate data, restrict or object to certain processing, or withdraw consent for optional processing. Write to privacy@wearedeligo.com; we respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
Permissions you can revoke at any time
Location and microphone access can be revoked in your device's system settings. Revoking location will prevent drivers from going online and clients from tracking a delivery; revoking microphone will disable in-app calls. The rest of the app continues to work.
7. Security
Traffic between the app and our servers is encrypted in transit with HTTPS/TLS. Access to production data is restricted to authorised personnel, and sensitive account actions are logged. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
8. Children
Déligo is not directed at children. You must be at least 18 years old to register as a driver and at least 16 to register as a client. We do not knowingly collect data from children below these ages; if we learn that we have, we delete it.
9. International transfers
Some of the service providers listed in section 4 operate servers outside your country. Where data is transferred internationally, we rely on the providers' standard contractual safeguards.
10. Changes to this policy
We will update this page when our practices change and revise the "Last updated" date. If a change materially affects your rights, we will ask you to accept the new version in the app before you continue using it.
11. Contact
Questions about this policy or your data:
privacy@wearedeligo.com
See also our Terms of Service, Delete your account and Help & support.