Privacy Policy

Effective Date: May 16, 2026

Nimbusa ("we", "our", "us") operates the Mailbox mobile application ("App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App. Mailbox connects people who need a package delivered with independent drivers who bring it to a location you pin on the map.

1. Information We Collect

Account Information

• Email/Password: When you create an account, we collect your email address, display name, chosen role (client or driver), and a securely hashed password (handled by Firebase Authentication).

Location Data

• Clients: The map location (the "pin") you drop to indicate where a package should be delivered, and the address derived from it through reverse geocoding.
• Drivers: Your device location while you are online and available for jobs, and during an active delivery. With your permission, drivers' location may be collected in the background so clients can track an in-progress delivery and so we can match you to nearby jobs. You can revoke location access at any time in your device settings.

Delivery Information

• Package details you provide, including carrier, tracking number, and delivery notes or instructions; delivery status; and the history of deliveries associated with your account.

Driver Onboarding Documents

• If you sign up as a driver, we collect documents required to operate on the platform: driver's license, proof of vehicle insurance, vehicle registration, and a profile photo. These are stored in Firebase Storage.

Identity Verification

• Drivers complete identity verification through Stripe Identity. Stripe collects and processes identity documents and related information directly; we receive only the verification result (such as approved or pending) and do not store your identity-document images.

Communications

• Messages sent between clients and drivers within the App during a delivery, and any support correspondence with us.

Financial Information

• Payment history processed by Stripe, including delivery charges and subscription billing. We never see or store your full card number. Driver payouts are managed through Stripe Connect, and payout preferences are handled by Stripe.

Ratings & Reviews

• Ratings and written reviews that clients and drivers submit about each other after a delivery.

Device & Diagnostic Information

• Push notification tokens, device identifiers, and crash and diagnostic data used to operate the App and fix problems.

2. How We Use Your Information

• To create and maintain your account.
• To dispatch delivery requests to nearby available drivers.
• To show clients the live location of a driver during an active delivery.
• To process delivery payments, subscriptions, and driver payouts through Stripe.
• To verify driver identity and review driver onboarding documents.
• To enable in-app messaging between clients and drivers.
• To calculate and display ratings and reviews.
• To send push notifications about delivery offers and status updates.
• To improve the App, monitor reliability, and fix bugs.

3. Third-Party Services

We use the following third-party services, which may collect data as described in their own privacy policies:

• Firebase (Google): Authentication, database (Firestore), file storage, cloud functions, push notifications (Cloud Messaging), crash reporting (Crashlytics), and analytics. Firebase Privacy Policy
• Stripe: Payment processing, subscription billing, driver payouts (Stripe Connect), and identity verification (Stripe Identity). Stripe Privacy Policy
• Apple: Maps and location services (MapKit) and push notification delivery (APNs). Apple Privacy Policy

4. Data Storage and Security

Your data is stored on Google Firebase servers. We use Firebase Security Rules to restrict access so that users can only read and modify data they are permitted to access. All network communication uses HTTPS encryption. Passwords are hashed and never stored in plaintext. While we take reasonable steps to protect your data, no method of electronic storage is 100% secure.

5. Data Sharing

When a delivery is arranged, certain information is shared between the client and the assigned driver so the delivery can be completed — for example, the client's pinned location and delivery notes are shared with the driver, and the driver's name, rating, and live location are shared with the client. We do not sell or rent your personal information, and we do not share it with third parties for their own marketing purposes.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your profile and personal data are removed. Payment and transaction records are retained for up to 7 years to meet legal, tax, and accounting requirements. Past delivery records, anonymized reviews, and aggregated analytics may be retained so the other party to a delivery keeps an accurate history and so other users' records remain consistent.

7. Your Rights

• Access: You can view your data within the App (Profile section).
• Correction: You can update your profile information at any time.
• Deletion: You can request deletion of your account and data — see our Delete Account page.
• Location: You can disable location access at any time in your device settings.
• Camera & Photos: You can revoke camera or photo library access at any time in your device settings.
• Notifications: You can disable push notifications at any time in your device settings.

8. Children's Privacy

Mailbox is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or on our website. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Nimbusa
Email: nimbusadev@gmail.com