This policy explains what Msafiri collects, why it is used, and the choices available to account holders and trip users.
Account and profile data
We collect account details such as your name, email address, phone number, WhatsApp number, role, and home location so you can sign in, manage your profile, book trips, and communicate about trips.
Drivers may upload vehicle photos, profile photos, driver licence files, permit files, and related verification records so passengers can evaluate trips and so Msafiri can support driver compliance checks.
Trip and communication data
We process trip routes, pickup points, booking details, passenger names, phone numbers, parcel notes, messages, chat attachments, notifications, and public booking link activity to provide booking, messaging, and trip-management features.
We store push notification tokens and device platform details so we can send trip, booking, wallet, and message notifications.
Payment data
Msafiri does not process payments in the app. Fares are arranged and paid directly between passenger and driver in cash.
We do not collect or store card numbers, bank details, or wallet balances.
Diagnostics
We collect app diagnostics, crash reports, logs, performance data, and limited session replay data through Sentry to find and fix reliability issues.
Diagnostic events may include device, app, network, interaction, and error context. They are used to operate and improve the app.
How we use and share data
We use the data above to create and secure accounts, show trips, process bookings, enable driver setup, deliver notifications, process payments, prevent abuse, troubleshoot errors, and comply with applicable obligations.
We share data with service providers that run core app infrastructure, including Supabase, Cloudflare R2, Expo, Sentry, Resend, and hosting or caching providers.
Your choices
You can update profile details in the app. You can delete your account from Profile > Account deletion. Account deletion removes your Msafiri account and associated app data, subject to records we may need to retain for security, dispute, fraud-prevention, tax, payment, or legal reasons.
If you cannot access the app, use our web-based account deletion request page linked from our Google Play data deletion section and support resources.
Security and retention
We use authentication, row-level database access controls, signed uploads, rate limits, and service-provider security controls to protect account and trip data.
No system is perfect, so only upload documents and messages that are needed for using Msafiri.