Draft — not yet reviewed by a lawyer
Privacy policy
Last updated 19 October 2026
kkoggo handles information about people who are not its users — the recipient of a package never signed up for anything. That shapes most of what follows.
1. The principle
We collect what a delivery requires and we reveal it only for as long as that delivery is running. A phone number is visible to the people involved in an active delivery and to nobody else. A courier’s position is recorded while they are working and not while they are not.
We follow the data-protection law that applies where you use kkoggo, and we apply the practices the GDPR is built on — collecting the minimum, using it only for the purpose it was collected for, letting you see it, and deleting it when it is no longer needed.
2. What we collect
From a customer:
- Phone number, and a name if you give one
- Pickup and destination addresses for each delivery
- Package category and description
- Payment records for each delivery
From a recipient:
- Phone number and destination address, given to us by the sender
- Whether and when the delivery was handed over
From a courier:
- Phone number, name, and a photograph
- Identity document and its ID or passport number, portrait and residential address for courier review
- Position while on an active delivery
- Delivery history, earnings, and reliability record
3. Who can see what
Access is scoped to a live delivery rather than granted permanently. During a delivery, the customer sees the courier’s name, photograph and position; the courier sees the pickup and destination addresses and the contact number they need; and the recipient sees the courier’s name and the delivery’s progress.
When the delivery closes, that access ends. Phone numbers are not retained in anyone else’s address book, and a courier cannot look up a past customer.
4. Location
A courier’s position is recorded only while they are on an active delivery. It is not recorded when they are off duty, and it is not visible to anyone at those times.
The track of a completed delivery is kept for 90 days as evidence — it is what a dispute about whether a package arrived is decided against — and then deleted, unless a dispute is still open.
5. Delivery PINs
A delivery PIN is generated randomly and stored only as a salted hash. It cannot be read back by anyone at kkoggo, it is never shown to the courier, and it is never written to a log. The record is deleted 30 days after the delivery.
6. Payments
Cash is the currently supported delivery-payment method for eligible bookings. Digital checkout, including EcoCash, is not active. We record delivery and cash-payment events needed for billing, support and audit. We do not collect card details for a kkoggo delivery.
7. How long we keep it
| Data | Kept for | Then |
|---|---|---|
| Account details (name, phone, email, saved places, notifications) | Until you delete your account | Deleted at once |
| Delivery records | 7 years | Kept — required for tax and dispute purposes |
| Payment, commission and cancellation-charge records | 7 years | Kept without your name |
| Recipient and contact details on a delivery | 2 years after the delivery ends | Cleared |
| Money still owed to kkoggo | Until settled | Kept against the anonymised record |
| Courier location tracks | 90 days | Deleted, unless attached to an open dispute |
| Package photographs | 180 days | Deleted, unless attached to an open dispute |
| Courier identity documents | While the courier account is active, plus 2 years | Deleted |
| Audit records | 7 years | Kept |
| Chat messages | 1 year | Deleted |
| Delivery PIN records | 30 days after delivery | Row deleted |
8. Deleting your account
You can delete your account at any time: in the app under Account, Delete account, or on the web on our delete-account page. Deletion is permanent and takes effect at once. Your login is removed, and your name, phone number, email address, saved places and notifications are deleted.
Finish or cancel any delivery in progress first. Money you still owe kkoggo does not stop you deleting your account; that balance stays on the anonymised record until it is settled.
Delivery, payment and audit records are kept. We cannot delete a financial record without breaking the accounts it belongs to, and we cannot delete a chain of custody without destroying the evidence a past dispute was decided on. What we can do — and do — is remove your identity from them.
9. Your rights
You can ask us to:
- Show you the personal information we hold about you, as a file you can download
- Correct anything that is wrong
- Delete your personal information, subject to the records described above
Awaiting legal input
How to make a request, who handles it, and how long it takes.
10. Who we share it with
With the other people in your delivery, for as long as it is running. With service processors only where a current feature requires it. With law enforcement where we are legally required to, in which case we record that it happened.
We do not sell personal information, and we do not share it for advertising.
Awaiting legal input
The full list of processors, and whether any data leaves the country it was collected in.
11. Contact
Awaiting legal input
The legal entity, its registered address, and a privacy contact.