Privacy Policy

PackIt ("PackIt", "we", "us") is a peer-to-peer platform that helps connect people who want to send items ("Senders") with verified travelers who can carry items ("Carriers"). This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have.

If you have any questions, contact us at support@itspackit.com.

1) Who we are

PackIt is the controller of your personal data for the purposes described in this policy, unless otherwise stated. We operate internationally and users may be located in multiple countries.

2) What data we collect

We collect information to run the app safely and to reduce fraud. The exact data depends on what you do in the app.

A. Information you provide

• Account details: email address, password (stored by our authentication provider in a secure hashed form), and account settings.
• Profile information: first name, last name, phone number, optional Instagram handle.
• Identity verification information (required): date of birth, passport/ID number, and uploaded images (passport/ID photo and portrait/selfie).
• Address details: street/address line, city, postcode, country.
• Trip and shipment data: route (from/to), dates, available weight, item description, declared value, notes, photos you upload for shipments.
• Support requests: messages you send to support and any information you include.

B. Information generated through use of the app

• Matching and activity data: matches, status changes (e.g., pending/approved/rejected), timestamps.
• Ratings and trust signals: ratings/feedback after transactions, basic integrity checks.
• Device/app data: basic diagnostic events (e.g., crashes, errors), app version, and device identifiers where needed for security and abuse prevention.

C. Information from third parties

• Authentication and email delivery: our auth provider may process email delivery and account security events (e.g., verification emails, password resets).
• Payment providers (if/when enabled): if we introduce payments, payment providers process card/bank data directly. We would receive limited payment status information (e.g., success/failure).

3) Why we collect data (purpose) and legal basis (GDPR)

If you are in the UK/EU (or similar jurisdictions), we rely on these legal bases:

• To provide the service (Contract): creating your account, enabling trips/shipments, matching, showing your profile information inside the app, and providing customer support.
• To comply with legal obligations (Legal obligation): identity checks, fraud prevention requirements, regulatory requests, and tax/accounting obligations (if applicable).
• To keep PackIt safe (Legitimate interests): preventing fraud, enforcing our rules, investigating suspicious activity, securing accounts, and protecting users.
• With your consent (Consent): where required for optional features. You can withdraw consent at any time, but some features may no longer work.

4) How we use your data

We use your data to:

• Create and manage your account.
• Verify identity and reduce fraud (passport/ID checks and profile verification).
• Enable core features (posting trips/shipments, matching, tracking status).
• Communicate with you (verification emails, password reset emails, support responses, important service updates).
• Improve reliability and safety (bug fixes, abuse prevention, monitoring system integrity).

We do not sell your personal data.

5) What other users can see

PackIt is built to protect sensitive information.

• Visible to matched users: limited profile data needed to coordinate delivery, depending on your app settings and features (for example, name, rating, and limited contact details if contact sharing is enabled).
• Not public: passport/ID number, passport/ID image, portrait image, address details, and other sensitive data are not shown publicly in the app.

6) Identity verification and approvals

To protect the platform, new users may be placed into a pending approval status after completing their profile and uploading identity documents. During this time, your account may be restricted until a review is completed. If a profile is rejected, we may store the reason and related audit logs for security and compliance.

7) Data storage and security

We use reasonable technical and organizational security measures designed to protect your data, such as:

• encrypted connections (HTTPS/TLS),
• access controls and least-privilege permissions,
• secure authentication flows,
• storage rules designed to prevent unauthorized access.

No system is 100% secure. If we become aware of a security incident affecting your data, we will take appropriate steps and notify users as required by law.

8) Where your data is stored and international transfers

Your data may be stored and processed in countries different from where you live, depending on our service providers and infrastructure. Where required, we use appropriate safeguards for international data transfers.

9) How long we keep your data

We keep data only as long as needed for the purposes above:

• Account and profile data: while your account is active.
• Identity verification data: as long as necessary for verification, fraud prevention, and compliance.
• Support messages: as needed to resolve issues and maintain records.
• Legal/financial records (if applicable): retained as required by law.

We may retain some information for a limited period after account deletion for fraud prevention, dispute resolution, and legal compliance.

10) Your rights (GDPR and similar laws)

Depending on your location, you may have the right to:

• access your data,
• correct your data,
• delete your data,
• restrict or object to processing,
• receive a copy of your data (portability),
• withdraw consent (where applicable),
• lodge a complaint with a data protection authority.

11) How to delete your account

You can delete your PackIt account directly from within the app settings.

Once an account deletion request is submitted:

• your account is immediately disabled and inaccessible,
• your information is retained for 30 days in case of fraud prevention, dispute handling, security review, or if you request restoration of the account,
• after 30 days, your personal data is permanently deleted or anonymized where legally required retention applies.

Some limited information may be retained for legal, regulatory, fraud prevention, or security purposes. Any retained data is anonymized and cannot reasonably be linked back to an identifiable individual.

12) Cookies and tracking

PackIt is primarily a mobile app. If we use analytics or crash reporting, we aim to keep it minimal and focused on reliability and security. If we add marketing cookies/tracking later, we will update this policy and provide choices where required.

13) Children

PackIt is not intended for children under 13 years old.

You must be at least 13 years old to use the app. If you are under the age of majority in your country, you may only use PackIt with the permission of a parent or legal guardian.

14) Changes to this policy

We may update this policy from time to time. If changes are material, we will provide notice in the app or by email. Continued use of PackIt after an update means you accept the updated policy.

15) Contact us

For privacy questions or requests, contact: support@itspackit.com