Privacy

Data controller: Kapeje Solutions Inc. Registration: 1182775438.

Contact for your data: privacy@kolis.delivery.

• Account: first name, last name if needed, phone number, email, language, country.
• Delivery: pickup and drop-off addresses, parcel description and size, declared value, instructions, delivery code, delivery status.
• Recipient: first name and phone number given by the customer, to notify them and hand over the parcel. The recipient does not need an account.
• Courier: identity, supporting documents in their file, vehicle, payout details, online status, ratings.
• Courier GPS position during a delivery, and approximate location that you choose to share (for example to fill in an address).
• Payment: amounts, wallet balance and movements, payment references. We do not keep your card or mobile account numbers: they stay with the payment provider.
• Support: your messages, photos and evidence sent for a dispute or question.
• Reviews: ratings and comments about a delivery.
• Technical: security logs, IP address, device type, errors.

We do not ask for sensitive data. Please do not write any in free-text fields.

• Carry out the delivery, track it and keep you informed: performance of the contract.
• Payment, wallet, courier payouts, accounting: performance of the contract and legal obligation.
• Check couriers, prevent fraud, keep the service safe: legitimate interest and legal obligation.
• Support, disputes and reviews: performance of the contract and legitimate interest.
• Sharing the courier's position: needed for tracking; you keep control of the settings described below.
• Service messages (SMS, WhatsApp, email) about your delivery: performance of the contract.
• Promotional messages: only with your consent, which you can withdraw at any time.
• Optional AI assistant: only if the option is turned on (see the AI section).

We do not sell your data.

The customer, recipient and courier see only what is needed for the delivery.

• They see the other person's first name, never their last name.
• They never see the other person's phone number: messages and calls go through Kolis.
• The courier sees the address needed for the current step, not every party's full address in advance.
• The customer and recipient see the courier's position during the delivery only, and not their home address.
• The courier sees the customer's average rating if the app provides it, never private comments.

The courier's position is used to show the delivery on the map, estimate arrival and settle a dispute.

By default, keeping a history of positions for tracking is turned off: the position is shown live and is not stored.

When the administration turns retention on, the default duration is 30 days after delivery, after which positions are deleted or anonymised. This duration is adjustable.

You can refuse location sharing on your device. Some features (precise tracking, address auto-fill) may then be limited.

A map is displayed using OpenStreetMap data.

These are the default periods. They are adjustable and may be shorter. After these periods we delete the data or anonymise it.

• Account: while it is active, then 30 days after closure.
• Deliveries (addresses, description, recipient): 12 months, then personal data is anonymised.
• Financial transactions and accounting records: 10 years.
• GPS positions: off by default; 30 days if turned on.
• Support and disputes: 24 months after the case is closed.
• Reviews and ratings: while the account exists; then anonymised.
• Courier file (identity, documents): during activity, then 12 months after the relationship ends.
• Security logs: 12 months.

We use providers that process data for us, on our instructions and with security safeguards:

• Hosting and database: Supabase. Application hosting: Vercel.
• Email: Resend and/or Brevo. SMS and WhatsApp: Twilio and/or Brevo.
• Maps: see the GPS position section.
• Payment: payment and mobile money providers, when they become available.

We do not give your data to third parties for advertising. We may disclose it to the authorities if the law requires.

The AI assistant is turned off by default. It works only if the administration turns it on with its own access key.

We send no personal data to the AI: no name, phone number, address, parcel contents or courier identity.

AI answers are aids. A support person makes the important decisions.

Some providers are located outside your country. Your data may therefore be processed elsewhere.

We frame these transfers with safeguards (contracts, security measures) and, where the law requires, with an authorisation from the authority.

We protect your data: encrypted connections, role-based access, separation of data between customers, secret keys, access logs.

No system is perfectly safe. Keep your access and delivery codes to yourself.

If an incident affects your data, we notify the people concerned and the competent authority as the law requires.

You can ask for:

• access to your data and a copy;
• correction of inaccurate data;
• deletion of your data, except what the law requires us to keep;
• to object to a processing, in particular promotional messages, or to withdraw your consent;
• restriction of a processing, and portability where the law provides it.

Write to privacy@kolis.delivery. If needed, we verify your identity without asking for more information than necessary. We reply within a reasonable time: 30 days.

A recipient without an account can exercise their rights using their delivery code.

You can also complain to the data protection authority of your country. In Cameroon: the Personal Data Protection Authority created by Law No. 2024/017 (art. 53).

We do not knowingly collect their data. If you think a minor gave us data, write to privacy@kolis.delivery: we will delete it.

Depending on your country, we refer in particular to Cameroon Law No. 2024/017 of 23 December 2024 on personal data protection, Law No. 2010/012 of 21 December 2010 on cybersecurity and cybercrime, and the GDPR as a best-practice reference.

If the operator is established in Quebec or Canada, the Act respecting the protection of personal information in the private sector (Law 25) or PIPEDA may also apply.

We may update this policy. The update date is at the top of the page. For an important change, we will tell you.

Questions: privacy@kolis.delivery. Other topics: support@kolis.delivery. Legal questions: legal@kolis.delivery.