Privacy Policy for Twese

What We Collect: Precise (GPS) and approximate location data (latitude, longitude, speed, heading, and accuracy).

How We Collect It:

• For Drivers: Location is collected continuously while on active duty or during a trip via an Android Foreground Service. Whenever location is running, a persistent, visible notification (CavGo Driver Location Active) appears in your status bar. Tracking automatically stops when the driver goes off-duty, ends the trip, or signs out.
• For Passengers: Location is accessed while the app is actively open to select pickup and drop-off points, calculate distance, and display nearby available rides.

Purpose: To match passengers with the nearest available drivers, provide turn-by-turn navigation, display live vehicle progress on the passenger's map, calculate accurate trip fares, and enhance user safety.

Account Data: We collect your full name, mobile phone number, and authentication tokens via our secure authentication provider (NexxAuth).

Purpose: Phone numbers are required to authenticate your account using One-Time Passwords (OTP), coordinate passenger pickups, deliver parcel status updates, and facilitate driver-passenger voice/SMS communication.

Optional Recipient Picker: When creating a parcel delivery in Twese, you may choose to select the recipient directly from your device's address book.

No Bulk Uploading: Twese never syncs, uploads, or harvests your entire contact list. The app accesses only the single contact you explicitly choose, strictly to populate the recipient's name and phone number on the delivery form.

Package Photos: Senders and drivers may take or upload photos of parcels when submitting a shipment or confirming delivery.

Purpose: Photos are stored securely as proof of package condition at pickup and confirmation of delivery to prevent disputes and lost items. We do not access other media on your device without explicit permission.

No Sale of Data: We do not sell, rent, or monetize your personal data or location with third-party advertisers.

Service Providers: We use trusted infrastructure partners to operate our platform:

• NexxAuth: Secure identity management and token-based authentication.
• MQTT Brokers (HiveMQ): High-performance, TLS-encrypted real-time location streaming for in-trip GPS coordinates.
• SMS Gateways: Delivering transactional authentication codes (OTP) and delivery updates.

Encryption: All data transmitted between the Twese app and our cloud servers is encrypted using modern Transport Layer Security (TLS/HTTPS).

In compliance with Google Play requirements and data protection regulations, you have full control over your personal data:

• Web Request: You can submit an account and data deletion request directly on our website at cavgofront/delete-account.
• Email Request: Send an email to support@gocavgo.com with the subject “Account Deletion Request” along with your registered phone number.

Upon receiving your verified request, we permanently delete or anonymize your profile, credentials, and location records within 30 days, retaining only records mandated by applicable Rwandan financial and tax laws.