Privacy Notice | MUGABO Company

Information we use

We collect your name, phone, email, delivery address, order details and payment status to take payment, prepare goods, deliver orders, resolve disputes and meet legal obligations.

Rider location

While online, riders share an idle position with HQ dispatch approximately once a minute. During an accepted delivery, positions update about every 12 seconds for HQ dispatch and the customer holding that delivery’s private link. Branch staff cannot see rider GPS. The link can be forwarded, includes the delivery address and status after pickup, and expires 12 hours after completion. It never reveals the handover code; that code requires the customer’s account. The completed view freezes the last position. GPS history is purged after seven days by the scheduled retention job.

Access and protection

Access is role-based and logged. Riders never see delivery codes, payment references or customer email addresses. Staff access is limited to their assigned shops and operational needs. Private sign-in codes are available only to enrolled customer devices and require the Android screen lock to open. Push notifications contain no verification codes. Customer sessions end after two hours of inactivity; Rider and Branch stay signed in until sign-out, revocation or authentication expiry.

How long we keep data

Completed order, payment and receipt records are retained for six years from order completion for accounting and dispute handling. These records include items, amounts, payment references and the minimum information needed to identify the transaction. Delivery-location history has a separate limit of seven days. A legal obligation or active dispute may require additional retention limited to the relevant records. HQ explains retained records when processing an account-deletion request and removes personal data no longer needed.

Les commandes terminées, paiements et reçus sont conservés pendant six ans à compter de la clôture de la commande pour la comptabilité et le traitement des litiges. L’historique des positions des livreurs est conservé au maximum sept jours. Une obligation légale ou un litige actif peut nécessiter une conservation supplémentaire limitée aux données concernées. Le siège explique les données conservées lors du traitement d’une demande de suppression et supprime les données personnelles devenues inutiles.

Who receives information

Authorized shop staff, your assigned rider, and the configured providers: AWS and Supabase for hosting and records, Firebase for app notifications, and the company email service for registration and receipts. Optional payment integrations receive transaction details when enabled. We do not sell account or location information.

Maps and routing

Maps use Leaflet with OpenStreetMap tiles. The tile provider receives your IP address and viewed map area. Routing uses OpenRouteService when configured, or a self-hosted OSRM service; it receives route coordinates, never customer names or phone numbers. If routing is unavailable, we show an estimated ETA. Riders can stop location sharing by going offline. Precise GPS is required while riders are online or progressing a delivery, including when the screen is locked. Location sharing uses a visible Android foreground notification and stops on logout, lost permission or disabled GPS. Customer GPS is a one-time location choice; customers can place their own map pin. Customer and Branch apps do not track location in the background.

Your choices

You may ask to access or correct your customer profile, ask questions about retention, or withdraw optional marketing consent. Legal order records cannot be deleted while legally required. You can request account deletion in each app’s Account/Profile screen or on our account-deletion page. HQ verifies the request, removes account/device access and explains any retained accounting or dispute records. / Vous pouvez demander la suppression depuis Compte/Profil ou par e-mail au siège.

Your information serves your order — nothing else.