Privacy policy

01What we collect

• Account: your name and email address from Sign in with Google or Sign in with Apple. If you use Apple's "Hide My Email", we only get a private relay address.
• Phone number: required to use the app, so our team and the driver can reach you about orders and delivery. We do not send SMS codes.
• Delivery addresses: city, address, the recipient's name and phone number.
• Orders: the product links you send, the items, sizes, colours and notes, the photos you attach, prices, coupons and the history of each order.
• Messages: your chats with our team, including photos you send.
• Device and usage: a push notification token, the app version, your language, and technical records of sign-ins (time, IP address, device type) to keep accounts secure.

We do not collect your device location, contacts, payment card details or any health or biometric data. If you turn on Face ID or fingerprint unlock in the app, it is handled by your phone and never reaches us.

02How we use it

• To price, buy, ship and deliver your orders, and to collect payment on delivery.
• To contact you about your orders, by phone, in the app chat or by notification.
• To answer your questions and help when something goes wrong.
• To keep the service and your account secure and to prevent fraud.
• To send offers only if you turned them on in the app; you can turn them off at any time.
• To keep the records the law requires.

03Who sees it

Your data is seen by our own team and only as their work needs it: drivers see the name, phone number and address of the orders they deliver. We also use a few companies that process data for us under contract:

• Amazon Web Services, which hosts our servers and files in Frankfurt, Germany.
• Apple and Google, to sign you in and to deliver push notifications (through Expo).

When we buy an item for you, the store only gets what it needs to fulfil the order. We do not sell or rent your personal data, and we do not share it for advertising. We may disclose data if the law requires it.

04How long we keep it

We keep your data while you have an account. When you delete your account, we delete your sign-in links, addresses, messages, photos, notifications and notification tokens, and remove your name, phone number and address from your past orders. What is left of those orders (the items, prices and dates) is kept as archived business records, as accounting and legal rules require, and is no longer shown in any app.

05Your choices and rights

• See and correct your name, phone number and email in the app: Account → Profile.
• Turn notifications and offers on or off in the app or in your phone's settings.
• Delete your account in the app: Account → Delete account. If an order is still open, or money is still owed by you or to you, the deletion waits until that is settled, and the app tells you why.
• Ask us for a copy of your data, or anything else about your privacy, at support@yama-shipping.com.

06Security

All traffic between the app and our servers is encrypted (HTTPS). Sign-in tokens on your phone are kept in its secure storage. Our team accounts need a second sign-in step, and access is limited to what each role needs.

07Children

Yama is not meant for children under 13, and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

08Changes

If we change this policy, we will update the date at the top and, for important changes, tell you in the app.

09Contact

HESTA Company for Information Technology Ltd. Email: support@yama-shipping.com.