Privacy Policy

Saka Logistics ('Saka Logistics', 'we', 'us') operates a freight and cargo marketplace in Tanzania that connects customers who need to move goods with independent drivers and fleet managers who transport them. This policy applies to the Saka Logistics customer app, driver app, and saka-logistics.com.

• Saka Logistics is operated by UPSTAIRS TECHNOLOGY SOLUTIONS LIMITED, incorporation number 185834050, which operates from Mbezi Beach, Dar es Salaam, Tanzania.

Account and identity information

When you register, we store your name, email address, phone number, date of birth, and profile picture. If you change your email or phone number, we hold the pending value until you confirm it. Your password is stored in hashed form only.

Government identity numbers

To verify who is using the platform, we collect and store your Tanzania Revenue Authority Taxpayer Identification Number (TIN) and your National Identification Authority (NIDA) number.

Verification and business documents

Drivers provide a driving licence number and expiry date. Businesses and fleet managers provide a home or business address, business name, registration number, and uploaded certificates, documents, and a logo. For documents you upload for verification, we also record who reviewed them, when, and any review notes.

Shipment and delivery details

When you post or fulfil a shipment, we store the package type, name, images, dimensions, weight, whether it is marked fragile, a description, and the pickup and delivery addresses and coordinates.

Chat messages

Messages sent in the in-app chat between a customer and a transporter — including the message content, sender, and read status — are stored on our servers so both parties can retrieve their conversation history.

Offers, negotiation, and payments

We store the bids, counter-offers, and full negotiation thread for each shipment. When you pay through our checkout partner, we store the buyer name, email, and phone number, the mobile-money number (msisdn) used, the amount, and transaction, reference, and order identifiers.

We do not store your card number. Card payments are entered directly on our payment processor's hosted checkout page, not on Saka Logistics infrastructure.

Ratings, reviews, and support

We store the star ratings and comments customers and transporters leave for each other, and the title, description, and linked shipment for any support report you file.

Device and notification data

We store push-notification tokens, your device and app type, and your notification and channel preferences (push, email, SMS, transaction, reminder, dark mode). We request access to your camera and photo library so you can attach package images and documents, and permission to send you push notifications.

We use location data to power the marketplace: showing pickup and delivery points on a map, matching shipments to nearby transporters, and letting a customer track a shipment in progress.

Background location in the driver app

The driver app requests background location access (Android's ACCESS_BACKGROUND_LOCATION permission), which lets us keep recording location while the app is not in the foreground.

• It is active only while a driver has an accepted, in-progress shipment — from the moment an offer is accepted until the delivery is marked complete.
• While active, we record a timestamped GPS trail (latitude, longitude, and time) linked to the driver's account and that specific shipment, so the customer and Saka Logistics can see the shipment's real-time progress and route history.
• It is not used to track a driver outside of an active shipment.
• A driver can stop background tracking at any time by ending availability for new shipments in the driver app, or by revoking location permission in device settings — doing so may prevent accepting or continuing an active shipment.

We use personal data to operate the bidding marketplace and matching; verify identity and business documents; process payments through our payment processor; enable in-app chat between matched customers and transporters; provide shipment tracking; send transactional messages, push notifications, and one-time passcodes; respond to support reports; understand product usage through aggregated analytics; maintain ratings and prevent fraud or abuse; and meet our legal and financial recordkeeping obligations.

We process personal data under Tanzania's Personal Data Protection Act, 2022. We rely on your consent for optional features (such as Google Sign-In or push notifications), on the need to perform our contract with you (your account, matching, and payments), on our legitimate interest in operating a safe and working marketplace (fraud prevention, dispute handling, analytics), and on our legal obligations (such as financial recordkeeping).

If you ask us to email a legal document, we use the email address you provide only to send that document and to protect the form against misuse. We do not add that address to marketing communications from this request.

We do not claim compliance with the EU General Data Protection Regulation (GDPR) or the US California Consumer Privacy Act (CCPA). Tanzania's Personal Data Protection Act, 2022 is the law we operate under.

Between customers and transporters

A marketplace only works if both sides of a shipment can reach each other. Once a customer and a transporter (driver or fleet manager) are matched on a shipment, each of them can see the other's name, contact details, and location or route information for that shipment. This is a core, unavoidable part of arranging and completing a delivery.

Service providers we use

• Our payment processor — processes payments (M-Pesa, Airtel Money, card, and dynamic QR); receives the payment details needed to complete a transaction.
• Our product-analytics provider — receives product-usage analytics from our apps to help us understand how features are used.
• Our maps and places provider — powers maps, place search, and directions; receives the location queries needed to show and route a shipment.
• Federated sign-in — if you choose to sign in with a third-party account, that provider authenticates you and shares your basic profile with us.
• Our push-notification providers — deliver push notifications to your device.
• Our SMS provider — sends one-time passcodes and transactional SMS.
• Self-hosted object storage that we operate — stores the images and documents you upload. It is our own infrastructure, not a third party, and is listed here for completeness.

We do not sell personal data. We may disclose data if required by law, to protect the rights and safety of our users, or in connection with a business transfer.

We keep personal data for as long as your account is active and you use the service. Chat messages, offers, ratings, and shipment history remain available so both sides of a marketplace transaction have a record of what was agreed.

See 'Deleting your account and your data' below for what happens, and what is kept, when you close your account.

We use industry-standard measures such as encrypted connections and hashed passwords to protect your data, and we limit staff and system access to what is needed to operate the service. No online system is completely secure, and we cannot guarantee absolute security.

You can request deletion of your account and the personal data associated with it at any time.

How to request deletion

• In the app: go to Profile → Legal and support → Delete Account, which opens a deletion request to our support team.
• By email: contact us at the support address below, from the email or phone number on your account, and ask us to delete your account.

After receiving a valid deletion request, we may verify your identity and will delete or anonymize the applicable account information within 30 days. We may retain records required for payments, disputes, fraud prevention, tax, audit, or other legal obligations, and will explain any applicable exception.

What we erase

Once we confirm your request, we erase your profile details (name, date of birth, profile picture), government identity numbers (TIN and NIDA), verification and business documents, chat messages, push notification tokens, and notification preferences. Your live location history is also erased.

What we keep, and why

We keep transaction and payment records — amounts, references, and order and transaction identifiers — even after your account is deleted, because Tanzanian tax and financial recordkeeping obligations require it.

We may also keep information needed to resolve an open dispute, support report, or legal claim until it is resolved.

Saka Logistics is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the service changes. We will update the effective date above when we do, and we will highlight significant changes in the app or on this page.

Questions about this policy or your data can be sent to us.

• Business and contact address: UPSTAIRS TECHNOLOGY SOLUTIONS LIMITED, Mbezi Beach, Dar es Salaam, Tanzania.
• support@saka-logistics.com
• +255 762 222 200