01 Introduction
Carrify ("we", "our", "us") is a peer-to-peer package delivery platform operated by Carrify (carrify.org). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Android application.
By using Carrify, you agree to the collection and use of information in accordance with this policy. We are committed to being transparent about what we collect and why.
02 Information We Collect
We collect the following categories of personal information:
- Account Information: Full name, email address, phone number, and encrypted password.
- Profile Photo: Uploaded by you and stored securely via Cloudinary.
- Location Data: Pickup and delivery addresses you enter when posting packages or trips. We do not collect background location without your explicit permission.
- Device Information: Device type (Android), OS version, and Expo push notification token.
- Usage Data: Trips posted, packages sent, bookings made, messages exchanged, and ratings given.
- Payment Information: Payment processing is handled entirely by Razorpay. We do not store card or bank account details on our servers.
03 How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your Carrify account.
- To match senders with travelers based on route and location.
- To send OTP verification via SMS (powered by Fast2SMS).
- To send email notifications and account verification (powered by Resend).
- To send push notifications about bookings, requests, and confirmations.
- To enable in-app messaging between senders and travelers.
- To display your public profile (name, photo, rating) to users you interact with for deliveries.
- To detect and prevent fraudulent or abusive activity on the platform.
04 Information Sharing
We do not sell your personal data. We share limited information only in the following cases:
- With other users: Your first name, profile photo, and rating are visible to users you connect with for deliveries.
- With service providers: Cloudinary (photo storage), Fast2SMS (SMS delivery), Resend (email delivery), Expo (push notifications), Razorpay (payments), and Railway (cloud hosting) โ each bound by their own privacy policies.
- When required by law: If compelled by court order, legal process, or government authority under applicable Indian law.
05 Data Storage & Security
Your data is stored in a secured PostgreSQL database hosted on Railway infrastructure. We implement the following security measures:
- Passwords are hashed using bcrypt (12 salt rounds) and are never stored in plain text.
- Authentication uses JWT tokens with defined expiry periods.
- All API communication is encrypted using HTTPS/TLS.
- Profile photos are stored with access controls via Cloudinary.
While we take security seriously and implement industry-standard practices, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to protect your account credentials.
06 Data Retention
We retain your account data for as long as your account is active and you continue to use the Carrify platform. If you delete your account, we will delete your personal data within 30 days of the deletion request, except where retention is required by applicable law (e.g., financial transaction records).
07 Your Rights
You have the following rights with respect to your personal data:
- Access and update your profile information at any time from within the app.
- Request a copy of your personal data by emailing privacy@carrify.org.
- Request deletion of your account and all associated data by contacting privacy@carrify.org.
- Opt out of push notifications at any time from your Android device settings.
- Opt out of marketing emails by contacting us โ transactional emails related to your deliveries will continue.
08 Children's Privacy
Carrify is intended for users 18 years of age and older. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will delete it immediately upon becoming aware.
If you believe a child under 18 has provided us with personal information, please contact us at privacy@carrify.org and we will take prompt action.
09 Third-Party Services
Our app integrates with the following third-party services. Each operates under its own privacy policy, which we encourage you to review:
- Google Play Services โ Android app distribution and device services.
- Razorpay โ Payment processing (UPI, cards, wallets).
- Cloudinary โ Profile photo and media storage.
- Fast2SMS โ OTP delivery via SMS.
- Resend โ Transactional email delivery.
- Expo โ Push notification infrastructure for Android.
- Railway โ Cloud hosting for our backend API and database.
10 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify users of significant changes via in-app notification or email. The "Last updated" date at the top of this page reflects the most recent revision.
Continued use of the app after changes have been posted constitutes your acceptance of the updated Privacy Policy.
11 Contact Us
For any privacy-related questions, requests, or concerns, please reach out to us: