Logistic Safe
Privacy Policy
What personal data Logistic Safe handles, why, who sees it, where it is kept and how you stay in control — in plain language, app by app.
At a glance
- No ads, no selling of personal data, no tracking across other apps and websites.
- Customers share location only when they choose to. Drivers share it while they are online.
- No card payments: you pay the driver in cash on delivery, so we never handle card details.
- Delete your account in the app whenever you want; see what is kept and why.
Who we areLink to this section
Logistic Safe (لوجستك سيف) is an on-demand shipping and delivery platform in the Kingdom of Saudi Arabia, operated by Save Points (سيف بوينتس) — “we”, “us”. We decide how and why the personal data described here is processed, and are the controller of it under the Personal Data Protection Law (PDPL).
This policy covers three apps and this website:
- Logistic Safe — the customer app, for people and businesses who send shipments;
- Logistic Safe Driver — the app drivers use to accept and deliver orders;
- Logistic Safe Admin — a private app for our own staff who run operations;
- this website, logistics-safe.savepoints.sa.
Each app also has its own policy page, with just what that app collects and the permissions it asks for: customer app, driver app and admin app.
It also covers people who never use the apps but appear in an order — the recipient of a shipment, or a contact person at a pickup point — whose name and phone number a customer enters.
The data we handleLink to this section
Your account (all apps)
- Name, email address and mobile number (optional for customers), and your app language.
- How you sign in: a one-time code sent to your email, or for drivers also by SMS (stored only as a scrambled hash and valid for 5 minutes).
- For a business account: the business name and VAT number, if you give them.
- Records of your sessions on each device (the device name and when the session was last used).
Orders and shipments (customer app)
- Pickup and drop-off addresses and map points, building, floor, apartment and landmark details, and saved addresses.
- The name and phone number of the sender and of each recipient, and notes for the driver.
- What you send: its type, description, approximate weight and size, handling options (for example cold chain, fragile, confidential, signature required), declared value if you add insurance, and up to 6 photos.
- Price, coupon, payment method and status, the schedule, cancellation reasons, and the history of each status change.
Handover and proof of delivery
- A pickup code and a delivery code for each order (six digits, shown only to the customer and our staff while the order is active).
- Proof recorded by the driver: photos at pickup, at each stop and at delivery; the recipient's name and signature where needed; notes; whether cash was collected; and the time and place of each step.
Messages, support and ratings
- Order chat messages between the customer, the driver and our support team (text only).
- Support tickets and our replies (text only), optionally linked to an order.
- Ratings (1–5 stars) and comments that customers and drivers give each other.
- Notifications we send you, kept in your in-app inbox.
Drivers (driver app)
- Identity and eligibility details entered by our staff when the driver is registered: national ID number, driving licence number and expiry, and the IBAN used for payouts.
- Vehicle details: plate number, model, year, colour, and registration and insurance expiry dates.
- Online status, location while online (see Location), offers received and accepted, trips, earnings, wallet and withdrawals, cash collected on delivery, rating and acceptance rate.
Staff (admin app)
- Work email, role and permissions. Staff sign in with a one-time code sent to that email (stored only as a scrambled hash and valid for 5 minutes); there is no staff password.
- An audit record of the changes staff make in the system, with the time and IP address.
Technical data
- A push-notification token for your device, and the device platform (Android or iOS).
- Crash reports through Firebase Crashlytics (see Service providers). The apps contain no analytics or advertising SDK.
- Our servers' logs, which record requests with the IP address and technical errors.
LocationLink to this section
| App | When location is used | Why |
|---|---|---|
| Customer | Only when you tap to use your current location while choosing a pickup or drop-off point, and only while the app is open. It is never collected in the background. | To fill in the address for you. You can always type an address or move the pin instead. |
| Driver | The whole time the driver is online — including when the app is in the background or the screen is off — until the driver goes offline or signs out. On Android a permanent notification (“You are online — sharing your location for active deliveries”) shows while this happens; on iPhone the system shows its location indicator. The app sends a precise position every few seconds (more often during a trip), with the order it relates to. | To offer nearby jobs, to show the customer where their order is, to confirm arrival and delivery at the right place, and for safety and dispute records. |
| Admin | Does not collect location. Authorised staff see drivers' positions on a live map. | To dispatch orders and follow up late ones. |
A driver's live position is shown to a customer only for that customer's order, and only while the order is active. The address search in the apps uses Google (see Service providers).
Camera, photos and signaturesLink to this section
- Customer app: you can add up to 6 photos of your shipment from the camera or your photo library. The app reads only the photos you pick.
- Driver app: proof photos are taken with the camera (the photo library is not used), and a recipient's signature is drawn on the screen. Photos and signatures are uploaded to our server and attached to the order.
- Photos are for the shipment and the handover. Please avoid photographing people or documents that are not part of the delivery.
PaymentsLink to this section
- Cash on delivery is the only way to pay for orders. The apps take no card details and we use no payment processor.
- Cash on delivery: we record the amount due and whether the driver collected it.
- Drivers: the wallet balance and a record of earnings, commissions and withdrawals, and the IBAN they are paid to.
Why we use itLink to this section
- To provide the service you ask for (performing our agreement with you): creating your account and signing you in, pricing and dispatching orders, live tracking, handovers and proof of delivery, cash-on-delivery payments and driver payouts, chat and support.
- To keep the service safe (our legitimate interests): preventing fraud and misuse, confirming that a delivery happened where and when it should, resolving disputes and complaints, and fixing crashes.
- To meet legal obligations: tax invoices, financial and accounting records, and requests from authorities where the law requires.
- With your permission: device location for the customer app, push notifications, camera and photo access. You can withdraw these permissions in your phone's settings at any time; some features then stop working (for example, a driver cannot go online without location).
We do not use your data for advertising, do not sell it, and do not build marketing profiles from it.
Who can see itLink to this section
- The customer, about the driver: once a driver is assigned, the customer sees the driver's name, phone number, vehicle details (plate, model, colour) and rating, and the driver's live position while the order is active.
- The driver, about the order: before accepting, a driver sees the street address, city and landmark of the pickup and drop-off points, but not the building, floor, apartment or anyone's name or phone number. After accepting, the driver sees the customer's name and contact details, the full addresses, and the recipients' names and phone numbers, and can call them. These details remain in the driver's trip history.
- The recipient: a customer can share the delivery code with the recipient by SMS from their phone.
- Ratings: the person you rate is told about the rating.
- Our staff: see what their role needs — for example operations and dispatch staff see orders, drivers and their live positions; support staff see tickets and customer details; finance staff see payments. Order chat is visible to our support team.
- Service providers who work for us, listed below.
- Authorities, when the law requires it or to protect someone's safety.
We never sell personal data or share it for advertising.
Service providersLink to this section
| Provider | What for | What it receives |
|---|---|---|
| Hostinger | Hosting our servers and database | All the data described in this policy, stored on our servers |
| SMS provider | Sending drivers' sign-in codes, and confirming a new mobile number | The mobile number and the code |
| Email provider | Sending sign-in codes by email | Your email address and the code |
| Google Firebase Cloud Messaging, Apple Push Notification service | Delivering push notifications | Your device's push token and the notification's text |
| Firebase Crashlytics | Crash reports (all three apps, release versions only) | Technical crash details, device model, operating system and app version, and an installation identifier — no name, phone, email or order details |
| Google Maps Platform | Maps and address search | The map area you view and the text you type in address search; the phone's own geocoding service (Google or Apple) turns a map point into an address |
Each provider processes data on our instructions or under its own privacy terms for the service it provides: Google Privacy Policy, Firebase privacy and Apple Privacy Policy.
NotificationsLink to this section
We send push notifications about your orders (for example when a driver is assigned — with the driver's first name — or when the order is delivered), new chat messages (with the first part of the message), support replies and, for drivers, new job offers. Unless your phone hides notification content, the text can appear on your lock screen.
Turn notifications off at any time in your phone's settings. Drivers need them on to receive job offers.
On your phoneLink to this section
- Your sign-in token is kept in the phone's secure storage (Android Keystore, iOS Keychain) and removed when you sign out.
- Preferences such as language and theme, recent searches, and which chat messages you have read are kept in the app's own storage. The driver app also keeps trip actions and their photos briefly on the phone when there is no connection, and sends them when the connection returns.
- Images are cached to load faster. On Android, the apps' data is excluded from device backups.
- Deleting the app removes all of this from your phone.
Where it is stored and how it is protectedLink to this section
- Our servers and database are provided by the hosting company Hostinger. Some of our providers (such as Google and Apple) process data on servers outside the Kingdom. Where personal data is transferred outside Saudi Arabia, we do so under the conditions the PDPL and its regulations set for such transfers.
- All traffic between the apps, this website and our servers is encrypted in transit (HTTPS/TLS).
- Access is limited by role: each staff member sees only what their job needs, staff sign in with one-time codes sent to their work email and their sessions end daily, and changes made by staff are recorded in an audit log.
- Sign-in codes and handover codes are short-lived and limited to a few attempts; a wrong handover code blocks further tries for a while.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.
How long we keep itLink to this section
- Account details: while your account exists. When you delete it, your name, phone, email, saved addresses, sessions and notification tokens are removed straight away (see Deleting your account).
- Orders, payments and invoices, and drivers' wallet transactions and withdrawals: kept as financial and tax records for as long as Saudi law requires, and as needed to handle disputes.
- Proof of delivery, status history, chat, ratings and support tickets: kept with the order records they belong to.
- Driver location history: deleted after 60 days.
- In-app notifications: deleted after 90 days.
- Photos uploaded but never attached to an order or ticket: deleted after 48 hours.
- Sign-in sessions: end after 90 days in the customer and driver apps, and after 24 hours for staff.
- Sign-in codes: expire after 5 minutes and are deleted within a day.
- Server logs: 14 days.
- Crash reports: kept by Firebase Crashlytics for 90 days.
When we no longer need data for these purposes we delete or anonymise it. You can ask us at any time to delete data we no longer need to keep.
Deleting your accountLink to this section
- Customers and drivers: in the app, open Account → Security → Delete account. Deletion is possible when you have no order in progress and, for drivers, when your wallet is empty and any cash collected on delivery has been settled; the app explains what to do otherwise.
- Staff: staff accounts are removed by an administrator.
- What is deleted, anonymised and kept is explained on the account deletion page.
Your rightsLink to this section
Under the Personal Data Protection Law you have the right to:
- be informed about how your data is processed — this policy;
- access your personal data and receive a copy of it;
- correct data that is inaccurate or incomplete — you can change your name and email yourself in the app;
- have it deleted when it is no longer needed — including by deleting your account;
- withdraw consent you have given, such as location, camera or notification permissions, at any time;
- complain to the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.
To use these rights, email support@savepoints.sa from the address on your account, or tell us the email or phone number you sign in with. We may need to confirm it is you. We reply within 30 days, and tell you if we need longer as the law allows.
ChildrenLink to this section
Logistic Safe is not directed to children. Accounts are for people aged 18 or over. If you believe a child has given us personal data, contact us and we will delete it.
This websiteLink to this section
This website sets no cookies, runs no analytics and loads nothing from other sites. Your theme and language choices are saved in your browser only. Like any web server, ours records requests (including the IP address) in its logs for security and troubleshooting.
Changes to this policyLink to this section
When our apps or the law change, we update this policy and its effective date. For significant changes we tell you in the app before they take effect.
Contact usLink to this section
Questions about this policy or your data, or a request to use your rights:
Save Points, operator of Logistic Safe, Kingdom of Saudi Arabia.