- We collect what we need to approve riders, run deliveries, keep people safe and pay you.
- Your location is used only while you are online or on an active job.
- Your ID documents and photos are private: only you and authorised MAALSO staff can open them.
- Fingerprint and Face ID never leave your phone.
- We do not sell personal data and we do not show advertising.
- You can see, correct or delete your data — see “Your rights”.
Who we are
MAALSO Logistics is the delivery service of MAALSO (“MAALSO”, “we”, “us”), based in Mogadishu, Somalia. This policy explains how we handle personal data in the MAALSO Logistics rider app, this website and the systems behind them. MAALSO is responsible (the “controller”) for that data.
The MAALSO Marketplace and its customers are covered by the MAALSO privacy policy.
What we collect
| Category | Examples | When |
|---|---|---|
| Account | Full name, phone number (verified by SMS code), email (optional), password (stored only as a one-way hash). If you use Google sign-in: your Google account ID, name and email. | When you sign up or sign in |
| Rider application | Date of birth, gender, national ID number, city, district and address, emergency contact name and phone. | When you complete your application |
| Vehicle | Vehicle type, plate number, make, model, colour, year, whether you own it. | Application and profile |
| Documents and photos | National ID (front and back), selfie, driving licence, vehicle registration, vehicle photo, insurance — photos or PDFs you upload. | Application, and when we ask you to fix a document |
| Payout details | Mobile money provider (EVC Plus, ZAAD, Sahal, eDahab, Premier Wallet) or bank, account number and account name. | Application and profile |
| Location | Precise GPS location of your phone with time. | Only while you are online or on an active job |
| Delivery activity | Jobs offered, accepted and declined, status updates and times, labels scanned, proof-of-delivery photos, recipient name, delivery codes checked, cash collected and handed in, earnings, payouts and ratings. | While you work |
| Support | Help tickets, messages, photos you attach, and SOS alerts including your location. | When you contact support |
| Device and security | Device model and operating system, app version, sign-in sessions, IP address, and security logs. | When you use the app |
Biometrics
Fingerprint and Face ID sign-in are handled entirely by your phone. MAALSO never receives your fingerprint or face data; we only store a sign-in token that works on that one device.
Camera and photos
The camera is used to scan parcel labels and to take photos you choose to submit (documents, proof of delivery, help tickets). We do not access your photo library except for the photos you pick.
People you deliver to
To complete deliveries we receive the names, phone numbers, addresses and notes of senders and recipients from MAALSO Marketplace and businesses that use MAALSO Logistics. You may only use these details to complete that delivery.
How we use it
- Run your account — sign-in, phone verification, password reset, and keeping your account secure. (Contract)
- Review your application — check your identity, documents and vehicle before approving you as a rider. (Contract; legal obligation)
- Dispatch and deliveries — offer jobs near you, show the route, share delivery progress with the sender and recipient, and confirm delivery. (Contract)
- Money — track cash on delivery, calculate earnings and pay you. (Contract; legal obligation for financial records)
- Safety and support — respond to help tickets and SOS alerts, investigate incidents and disputes. (Legitimate interests; vital interests in emergencies)
- Prevent fraud and misuse — detect fake accounts, document fraud, cash shortages and abuse. (Legitimate interests)
- Improve the service — measure delivery times and app reliability using aggregated data. (Legitimate interests)
- Messages — send SMS and in-app messages about your application, jobs, payouts and security. We do not send marketing without your consent.
Who we share it with
We do not sell personal data and we do not use it for advertising. We share it only as follows:
- MAALSO staff — logistics, operations, finance and support staff who need it for their role. Access to rider documents is limited by permission and recorded.
- Senders and recipients — during an active delivery they can see your first name, vehicle type, delivery status and, where shown, your live location on the way to them.
- Service providers working for us under contract: cloud hosting (Amazon Web Services), SMS delivery, Google (only if you choose Google sign-in), Expo (app delivery and updates) and payment providers that send your payouts.
- Authorities — when the law requires it, to protect someone's safety, or to establish or defend legal claims.
- Business changes — if MAALSO's logistics business is reorganised or transferred, under the same protections.
Where your data is stored
Our servers are run by Amazon Web Services and may be located outside Somalia (for example in the United States). We use providers with strong security and contractual protections, and we transfer only what is needed.
How we protect it
- All connections to the app and our servers are encrypted (HTTPS).
- Passwords are stored only as one-way hashes; SMS codes are short-lived and limited in attempts.
- Rider documents and photos are stored privately and can only be opened by you and authorised MAALSO staff.
- Staff access is based on role and permission, and every review and account change is logged.
- Resetting your password with an SMS code signs you out on every device, including fingerprint and Face ID sign-in.
No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the relevant authority as required by law.
How long we keep it
| Data | How long |
|---|---|
| Account and profile | While your account is open, then up to 12 months after it is closed |
| Application documents and photos | While you are a rider, then up to 24 months after your account is closed (or rejected), for safety and fraud checks |
| Location trail | 12 months |
| Deliveries, cash, earnings and payouts | 7 years, for financial and tax records |
| Support tickets and SOS records | 24 months after the ticket is closed |
| Security logs | 12 months |
We keep data longer only when the law requires it or when it is needed for an open dispute or investigation. Otherwise it is deleted or anonymised.
Your rights
Subject to the law that applies to you, including the data protection law of the Federal Republic of Somalia, you can ask us to:
- Access the personal data we hold about you and get a copy.
- Correct data that is wrong or incomplete — most details can be edited in the app.
- Delete your data — see Delete your account.
- Object to or restrict some uses, and withdraw consent where we rely on it.
Contact us in the app (Help → New Request) or at help@maalso.com. We reply within 30 days and may need to confirm your identity first. You can also complain to the data protection authority in Somalia.
You can turn off location and camera access in your phone settings at any time, but you will not be able to go online or complete deliveries without them.
Deleting your account
You can ask us to delete your rider account at any time. See how to delete your account for the steps and what we keep for legal reasons.
Age limit
MAALSO Logistics is only for people aged 18 or over. We do not knowingly collect data from children; if we learn that we have, we delete it.
Changes to this policy
We may update this policy. If the changes are important, we will tell you in the app before they take effect. The date at the top shows the latest version.