1. Introduction

UniDash is committed to protecting your privacy and ensuring transparency in our data practices. This Privacy Policy applies to all users of the UniDash platform, including customers and couriers.

By using UniDash, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account Information: Name, email address, phone number, alternate phone number, and home campus
• Residence: The hall or hostel you live in, including its name, campus and map location
• Profile Information: Your unique username, the avatar you choose from our preset images, profile preferences, and your most recent delivery addresses (up to five)
• Payment Information: Payment method details, billing information (processed securely by third-party payment providers)
• Order Information: Your order description, the items amount, pickup and drop-off locations, and delivery instructions
• Communication Data: Messages sent through the app, customer support interactions, feedback, ratings, and reports submitted by customers and couriers

2.2 Courier Verification Information

If you apply to be a courier, we also collect:

• A photo of your student ID card
• A live selfie, taken with your phone's front camera at the time you apply
• Your student ID number
• The mobile money or bank account details you use to receive payouts

The app uses your camera only when you take these photos.

2.3 Information Collected Automatically

When you use UniDash, we automatically collect certain information:

• Location Data: A one-time reading of your device location when you choose to use it, for example to set a delivery point or a courier status. See Section 9
• Device Information: Device type, operating system, unique device identifiers, push notification tokens, mobile network information
• Usage Data: App features used, time spent on different screens, order history, search queries
• Activity Counts: The number of orders you place and deliveries you complete each month, used for the Dashers leaderboard
• Log Data: IP address, access times, app crashes, system activity

2.4 Information from Third Parties

• Payment processors for transaction verification
• Maps and address autocomplete services for locations
• Push notification services

3. How We Use Your Information

Purpose	Data Used
Provide delivery services	Account info, location data, order details
Process payments and courier payouts	Payment information, payout details, order details
Match orders with nearby couriers	Pickup location, courier status location and radius
Verify courier identity	Student ID card photo, selfie, student ID number
Alert couriers who live near unanswered orders, and invite residents to become couriers	Residence, courier verification status, notification settings
Run the Dashers leaderboard	Name, avatar, campus, monthly order and delivery counts
Send notifications	Device info, notification preferences, order status
Customer support	Account info, order history, communication data
Investigate reports and resolve disputes	Order records, reports, ratings, verification information
Improve our service	Usage data, feedback, app performance metrics
Prevent fraud and abuse	All collected data as needed
Comply with legal obligations	All collected data as required by law

4. How We Share Your Information

4.1 With Other Users

• Before a courier offers on your order, customers see couriers in range only as anonymous pins at an approximate location (rounded to about 110 metres), with no name, photo or rating
• Once a courier offers, the customer sees that courier's name, avatar and rating
• Couriers see: The customer's name, pickup and delivery locations, order details and delivery instructions. During an active order, the courier can call the customer's phone number through the app
• Everyone on your campus can see your username, avatar and monthly activity on the Dashers leaderboard
• A report a courier files about a customer is not visible to that customer. Reports are reviewed only by the UniDash team

4.2 Courier Verification Information

Student ID card photos, selfies and student ID numbers are never shown to customers or other couriers. Only authorized UniDash administrators can view them, for verification and for investigating reports, fraud and abuse. A courier's student ID number is shown to that courier in their own profile settings.

4.3 With Service Providers

We share information with third-party service providers who help us operate our business:

• Payment processors (e.g., Paystack)
• Cloud hosting and storage services (Firebase/Google Cloud)
• Maps and address autocomplete services (Google Maps Platform)
• Analytics and monitoring services
• Customer support tools
• Push notification services (Expo Push Notifications)

4.4 For Legal Reasons

We may disclose your information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Government or regulatory requests
• Protection of our rights and property
• Safety concerns or emergencies
• Prevention of fraud or illegal activities, including reports to university authorities or the police

4.5 Business Transfers

If UniDash is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

5.1 Security Measures

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Firebase Authentication with secure password requirements
• Access Controls: Strict access controls and authorization rules on our database and file storage
• Secure Infrastructure: Hosted on Google Cloud Platform with enterprise-grade security
• Regular Updates: Security patches and updates applied regularly
• Monitoring: Continuous monitoring for security threats and vulnerabilities

5.2 Payment Security

• Payment information is processed by PCI-DSS compliant payment providers
• We do not store complete credit card numbers on our servers
• Payment tokens are encrypted and securely stored

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

Retention Periods:

• Account Information: Retained while your account is active and for 3 years after account closure
• Order History: Retained for 7 years for accounting and legal purposes
• Courier Status Location: Replaced each time you set a new status
• Residence and Recent Addresses: Kept until you change them or delete your account. Only your five most recent delivery addresses are kept
• Communication Data and Reports: Retained for 2 years, or until any related investigation is closed
• Log Data: Retained for 90 days

7. Your Rights and Choices

7.1 Access and Update

You have the right to:

• Access your personal information in the app's Profile Settings
• Update or correct your information at any time, including your residence, home campus and alternate phone number
• Request a copy of your data by contacting support

A courier's student ID number can only be changed by submitting verification again.

7.2 Data Deletion

You can request deletion of your account and personal data:

• Delete your account from the in-app Account → Settings screen, or email unidashsupport@gmail.com with your deletion request
• We will process deletions within 30 days
• Student ID card photos and verification selfies are not deleted (see Section 6)
• Some other information may be retained for legal or security purposes
• Anonymized data may be retained for analytics

7.3 Location Services

• You can enable or disable location services in your device settings
• Using your device location is optional. You can choose locations by searching for an address or moving a pin on the map instead

7.4 Notifications

• You can manage push notification preferences in the app settings
• You can turn off alerts about unanswered orders near your residence, and invitations to become a courier, under System Settings → Notifications
• You can opt out of promotional notifications while keeping essential service notifications

7.5 Marketing Communications

• You can opt out of marketing emails by clicking "unsubscribe"
• You will still receive essential service-related communications

8. Children's Privacy

UniDash is not intended for use by children under 18 without parental consent. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

9. Location Data

Location data is essential for our service:

9.1 How We Use Location Data

• Match orders with couriers whose chosen area covers the pickup point
• Calculate delivery distances and fees
• Find verified couriers who live near an order that has gone unanswered
• Show customers the approximate, anonymous positions of couriers in range
• Improve service efficiency

Deliveries are confirmed with a delivery PIN, not with location.

9.2 Location Permissions

• Customers: Your device location is read once, only when you choose to use it to set a pickup or delivery point
• Couriers: Your device location is read once, only when you choose to use it to set your status. We store the location you set (rounded to about 110 metres) and the radius you choose
• We do not track your location continuously or in the background, and we do not track couriers during deliveries
• You can revoke location permissions in device settings

10. Cookies and Tracking Technologies

We use various technologies to collect and store information:

• Local Storage: To store preferences and cache data
• Analytics: To understand app usage and improve performance
• Session Management: To maintain your login state
• Performance Monitoring: To identify and fix bugs

11. Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• Firebase/Google Cloud: Data hosting, file storage and authentication
• Paystack: Payment processing and courier payouts
• Google Maps Platform: Maps, address autocomplete and distance calculation
• Expo: Push notifications and app services

We encourage you to review the privacy policies of these third-party services.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the app
• Sending you an in-app or email notification
• Updating the "Last Updated" date at the top of this policy

Your continued use of UniDash after changes become effective constitutes acceptance of the updated Privacy Policy.