Draft: this document is a placeholder pending review by US counsel and may change before launch.
Privacy Policy
Last updated: October 1, 2026 (draft)
1. Who we are
This Privacy Policy explains how Faltah US, Inc., a Delaware corporation ("Faltah") collects, uses and shares personal information when you use Faltah Express. It includes the disclosures required by the California Consumer Privacy Act as amended by the CPRA ("CCPA") and by other US state privacy laws.
2. What we collect
• Identifiers: name, email, phone number (optional), account ID, and the Apple or Google account you sign in with. • Shipment details: pickup and drop-off addresses, recipient name and phone, parcel description, weight and photos. • Precise location (sensitive): a Traveler's location while a delivery is in progress, to show tracking to the Sender. • Government ID (sensitive): for Travelers, driver's license number, a photo of the license and a selfie, for identity verification. • Payment information: handled by Stripe. We receive only limited details such as card brand and last four digits; we never receive full card or bank numbers. • Device and usage data: app version, crash reports (Firebase Crashlytics) and push notification tokens. • Messages you send in in-app chat and support conversations.
3. How we use it
To create and secure your account; match shipments with Travelers or courier partners; calculate prices; process payments, holds, refunds and payouts; show delivery tracking; verify Traveler identity and prevent fraud; provide support; send service notifications; and comply with law. We use sensitive information (government ID, precise location) only for these purposes and not to infer characteristics about you.
4. Who we share it with
The other party to your shipment, only as needed (for example, a Traveler sees pickup and drop-off details once they accept). Service providers acting on our behalf: Stripe (payments, payouts), Supabase (hosting and database), Google Firebase (notifications and crash reports), Apple and Google (sign-in), and mapping providers. Courier partners, when a shipment is rerouted to them. Authorities, when legally required. We do not sell personal information and do not share it for cross-context behavioral advertising.
5. How long we keep it
Account data: while your account is open. Shipment and payment records: 7 years, for tax and accounting. Identity-verification images: until verification is decided plus 90 days, unless needed for a fraud investigation. Chat messages: 1 year after the shipment ends. [TO CONFIRM retention periods.]
6. Your privacy rights
Depending on your state (including California, Virginia, Colorado, Connecticut, Utah and Texas), you may have the right to: know what personal information we hold and how we use it; get a copy; correct it; delete it; opt out of sale or sharing (we do neither); and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights. To make a request, use Settings → Delete account, or email support@faltahapp.com. We verify requests by confirming control of your account. You may use an authorized agent. We respond within 45 days. If we deny a request you may appeal by replying to our decision.
7. Security
Data is encrypted in transit and at rest, access is restricted by row-level security, identity documents are stored in private storage, and payment details stay with Stripe. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
8. Children
Faltah Express is not directed to children under 13 and requires users to be 18 or older. We do not knowingly collect information from children.
9. Changes and contact
We will post changes here and notify you of material changes. Questions: support@faltahapp.com.
Your Privacy Choices (California)
Notice at collection
We collect identifiers, shipment details, precise location during deliveries, government ID for Travelers, limited payment details and device data, for the purposes described in our Privacy Policy. We do not sell or share personal information. Retention periods are listed in the Privacy Policy.
Your rights
Right to know and access · Right to correct · Right to delete · Right to opt out of sale or sharing · Right to limit use of sensitive personal information · Right to non-discrimination.
How to exercise them
Delete your account and its data from Settings → Delete account. For access, correction or anything else, email support@faltahapp.com from the address on your account. We respond within 45 days.