1. Introduction

UniDash is committed to protecting your privacy and ensuring transparency in our data practices. This Privacy Policy applies to all users of the UniDash platform, including customers and couriers.

By using UniDash, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account Information: Name, email address, phone number, campus affiliation
• Profile Information: Display name, profile preferences, delivery addresses
• Payment Information: Payment method details, billing information (processed securely by third-party payment providers)
• Order Information: Items ordered, delivery instructions, pickup and drop-off locations
• Communication Data: Messages sent through the app, customer support interactions, feedback and ratings

2.2 Information Collected Automatically

When you use UniDash, we automatically collect certain information:

• Location Data: Real-time location when using courier services, delivery addresses, campus locations
• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: App features used, time spent on different screens, order history, search queries
• Log Data: IP address, access times, app crashes, system activity

2.3 Information from Third Parties

• Payment processors for transaction verification
• Maps and location services for navigation
• Push notification services

3. How We Use Your Information

Purpose	Data Used
Provide delivery services	Account info, location data, order details
Process payments	Payment information, order details
Match customers with couriers	Location data, availability status
Send notifications	Device info, notification preferences, order status
Customer support	Account info, order history, communication data
Improve our service	Usage data, feedback, app performance metrics
Prevent fraud and abuse	All collected data as needed
Comply with legal obligations	All collected data as required by law

4. How We Share Your Information

4.1 With Other Users

• Customers see: Courier's first name, photo (if provided), real-time location during delivery, ratings
• Couriers see: Customer's first name, delivery address, order details, delivery instructions

4.2 With Service Providers

We share information with third-party service providers who help us operate our business:

• Payment processors (e.g., Paystack)
• Cloud hosting services (Firebase/Google Cloud)
• Analytics and monitoring services
• Customer support tools
• Push notification services (Expo Push Notifications)

4.3 For Legal Reasons

We may disclose your information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Government or regulatory requests
• Protection of our rights and property
• Safety concerns or emergencies
• Prevention of fraud or illegal activities

4.4 Business Transfers

If UniDash is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

5.1 Security Measures

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Firebase Authentication with secure password requirements
• Access Controls: Strict access controls and authorization rules in Firestore
• Secure Infrastructure: Hosted on Google Cloud Platform with enterprise-grade security
• Regular Updates: Security patches and updates applied regularly
• Monitoring: Continuous monitoring for security threats and vulnerabilities

5.2 Payment Security

• Payment information is processed by PCI-DSS compliant payment providers
• We do not store complete credit card numbers on our servers
• Payment tokens are encrypted and securely stored

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

Retention Periods:

• Account Information: Retained while your account is active and for 3 years after account closure
• Order History: Retained for 7 years for accounting and legal purposes
• Location Data: Real-time data retained for 30 days; historical data aggregated and anonymized
• Communication Data: Retained for 2 years
• Log Data: Retained for 90 days

7. Your Rights and Choices

7.1 Access and Update

You have the right to:

• Access your personal information in the app's Profile Settings
• Update or correct your information at any time
• Request a copy of your data by contacting support

7.2 Data Deletion

You can request deletion of your account and personal data:

• Delete your account from the in-app Account → Settings screen, or email unidashsupport@gmail.com with your deletion request
• We will process deletions within 30 days
• Some information may be retained for legal or security purposes
• Anonymized data may be retained for analytics

7.3 Location Services

• You can enable or disable location services in your device settings
• Disabling location may limit app functionality, especially for couriers
• Courier mode requires location access to function properly

7.4 Notifications

• You can manage push notification preferences in the app settings
• You can opt out of promotional notifications while keeping essential service notifications

7.5 Marketing Communications

• You can opt out of marketing emails by clicking "unsubscribe"
• You will still receive essential service-related communications

8. Children's Privacy

UniDash is not intended for use by children under 18 without parental consent. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

9. Location Data

Location data is essential for our service:

9.1 How We Use Location Data

• Match customers with nearby couriers
• Calculate delivery distances and fees
• Provide real-time tracking during deliveries
• Verify delivery completion
• Improve service efficiency

9.2 Location Permissions

• Customers: Location access during order placement and tracking
• Couriers: Continuous location access while active on duty
• You can revoke location permissions in device settings

10. Cookies and Tracking Technologies

We use various technologies to collect and store information:

• Local Storage: To store preferences and cache data
• Analytics: To understand app usage and improve performance
• Session Management: To maintain your login state
• Performance Monitoring: To identify and fix bugs

11. Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• Firebase/Google Cloud: Data hosting and authentication
• Paystack: Payment processing
• Google Maps: Location and mapping services
• Expo: Push notifications and app services

We encourage you to review the privacy policies of these third-party services.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the app
• Sending you an in-app or email notification
• Updating the "Last Updated" date at the top of this policy

Your continued use of UniDash after changes become effective constitutes acceptance of the updated Privacy Policy.