P.I.K.E.S Privacy Policy

Effective Date: 5 April 2026
Last Updated: 5 April 2026
Developer: Wordcroft Investments (Pvt) Ltd
Contact: ictsupport@wordcroft.co.zw

This Privacy Policy explains how Wordcroft Investments (Pvt) Ltd (“Wordcroft”, “we”, “us”) collects, uses, shares, and protects personal data through the P.I.K.E.S mobile application (“the App”). This policy applies to all users of the App, including drivers employed by or contracted to Wordcroft.

1. Data We Collect

2. How We Use Your Data

• Core Operations: Manage fleet logistics, assign orders, track deliveries in real time, verify proof of delivery, generate invoices, and ensure regulatory compliance.
• Safety & Compliance: Monitor driving speed, detect route deviations and unapproved stops, complete pre-trip and post-trip vehicle safety checklists.
• Customer Service: Provide delivery tracking to customers (via PIN-protected links), send arrival notifications, and resolve delivery disputes.
• Communication: Send push notifications about order assignments, checklist approvals, trip updates, and system alerts.
• App Improvement: Diagnose crashes, analyse usage patterns (aggregated), and improve the App experience.

3. Location Data

The App collects precise location data (GPS) to provide core functionality:

• Foreground: While the App is open and you are navigating or viewing maps.
• Background: During active trips, even when the App is minimised. This is required to provide continuous delivery tracking to dispatchers and customers. A persistent notification is displayed whenever background location is active.

Location data is collected at intervals of 15 seconds while moving and 60 seconds while stationary during active trips. Location collection stops when no trip is active. Location data older than 90 days is automatically purged.

4. Data Sharing

We do not sell your personal data. We share data only in these circumstances:

• Wordcroft Operations Team: Dispatchers, logistics managers, and administrators who manage fleet operations.
• Customers: Limited trip data (driver name, vehicle, estimated arrival, live location) is shared with delivery recipients via PIN-protected tracking links that expire on trip completion.
• Service Providers: Google Maps (for navigation and mapping), Firebase Cloud Messaging (for push notifications), and Sentry (for crash reporting). These providers process data under their own privacy policies.
• Legal Requirements: When required by law, court order, or regulatory authority.

5. Data Retention

6. Data Security

• All data is transmitted over HTTPS/TLS 1.2+ encryption.
• Authentication uses JWT tokens with short-lived access tokens (1 hour) and refresh tokens (7 days).
• Passwords are hashed using bcrypt with salt.
• Login is rate-limited (5 attempts per minute per IP) with account lockout after repeated failures.
• Files are stored in encrypted object storage with access-controlled presigned URLs.
• The App uses secure local storage for credentials on-device.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data. See Account & Data Deletion.
• Partial Deletion: Request deletion of specific data (e.g., location history, feedback) without deleting your account.
• Portability: Request your data in a machine-readable format.
• Withdraw Consent: Revoke permissions (e.g., location, notifications) at any time via device settings. Note: revoking location permission will prevent trip tracking functionality.

To exercise any of these rights, email ictsupport@wordcroft.co.zw with your request. We will respond within 30 days.

8. Account & Data Deletion

You may request complete deletion of your account and all associated data at any time. Visit our Account & Data Deletion page for details and to submit a request.

Upon account deletion, the following data is permanently removed within 30 days:

• Account profile and credentials
• Location history
• Push notification tokens and preferences
• Driver feedback

Certain data may be retained for up to 2 years after deletion for legal and regulatory compliance (trip records, invoices, POD documents). This retained data is anonymised where possible.

9. Children’s Privacy

The App is designed for professional use by employed or contracted drivers. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has provided data through the App, please contact us immediately.

10. Third-Party Services

• Google Maps Platform: Used for navigation, geocoding, and map rendering. Subject to Google Privacy Policy.
• Firebase Cloud Messaging: Used for push notifications. Subject to Firebase Privacy Policy.
• Sentry: Used for crash and error reporting. Subject to Sentry Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the App after changes constitutes acceptance of the revised policy. We will notify users of material changes via push notification or in-app notice.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: ictsupport@wordcroft.co.zw
• Company: Wordcroft Investments (Pvt) Ltd
• Address: No 7785 Longbridge Road, Nyakamete, P.O Box 559, Mutare, Zimbabwe