Logistic Safe · customer app
Privacy Policy — customer app
What the Logistic Safe app for sending shipments collects, why, who sees it and how you stay in control.
At a glance
- No ads, no selling of personal data, no tracking across other apps and websites.
- Location only when you tap “use my location” — never in the background.
- Cash on delivery only: we never handle card details.
- Delete your account in the app whenever you want.
Who we areLink to this section
Logistic Safe (لوجستك سيف) is an on-demand shipping and delivery platform in the Kingdom of Saudi Arabia, operated by Save Points (سيف بوينتس) — “we”, “us”. We decide how and why the personal data described here is processed, and are the controller of it under the Personal Data Protection Law (PDPL).
This policy covers Logistic Safe (لوجستك سيف), the customer app for people and businesses who send shipments (Android package com.logisticsafe.customer). It also covers people who never use the app but appear in an order — the recipient of a shipment, or a contact person at a pickup point — whose name and phone number a customer enters.
The data we handleLink to this section
Your account
- Name and email address, your mobile number if you add one, and your app language.
- How you sign in: a one-time code sent to your email (stored only as a scrambled hash and valid for 5 minutes).
- For a business account: the business name and VAT number, if you give them.
- Records of your sessions on each device (the device name and when the session was last used).
Orders and shipments
- Pickup and drop-off addresses and map points, building, floor, apartment and landmark details, and saved addresses.
- The name and phone number of the sender and of each recipient, and notes for the driver.
- What you send: its type, description, approximate weight and size, handling options (for example cold chain, fragile, confidential, signature required), declared value if you add insurance, and up to 6 photos.
- Price, coupon, payment method and status, the schedule, cancellation reasons, and the history of each status change.
- A pickup code and a delivery code for each order (six digits, shown only to you and our staff while the order is active), and the proof of delivery the driver records: photos, the recipient's name and signature where needed, and the time and place of each step.
Messages, support and ratings
- Order chat messages with your driver and our support team (text only).
- Support tickets and our replies (text only), optionally linked to an order.
- Ratings (1–5 stars) and comments you and your driver give each other.
- Notifications we send you, kept in your in-app inbox.
Technical data
- A push-notification token for your device, and the device platform (Android or iOS).
- Crash reports through Firebase Crashlytics. The app contains no analytics or advertising SDK and does not use the advertising ID.
- Our servers' logs, which record requests with the IP address and technical errors.
LocationLink to this section
The app uses your location only when you tap to use your current location while choosing a pickup or drop-off point, and only while the app is open. It is never collected in the background, and you can always type an address or move the pin instead. During an active order you see your driver's live position on a map; the app does not track you.
Camera and photosLink to this section
- You can add up to 6 photos of your shipment from the camera or your photo library. The app reads only the photos you pick.
- Photos are uploaded to our server and attached to the order. Please avoid photographing people or documents that are not part of the shipment.
PaymentsLink to this section
- Cash on delivery is the only way to pay for orders: you pay the driver in cash when your shipment is delivered. The app takes no card details and we use no payment processor.
App permissionsLink to this section
| Permission | When | Why |
|---|---|---|
| Location (approximate and precise, while using the app) | Only when you tap “use my location” | To fill in a pickup or drop-off address |
| Camera / photo library | Only when you add photos to a shipment | To attach photos of what you send |
| Notifications | Asked once; you can refuse | Order updates, chat messages and support replies |
| Internet | Always | To talk to our servers |
The app does not ask for background location, contacts, microphone or the advertising ID.
Why we use itLink to this section
- To provide the service you ask for (performing our agreement with you): your account and sign-in, pricing and dispatching orders, live tracking, handovers and proof of delivery, cash-on-delivery payments, chat and support.
- To keep the service safe (our legitimate interests): preventing fraud and misuse, confirming deliveries, resolving disputes and complaints, and fixing crashes.
- To meet legal obligations: tax invoices, financial records, and requests from authorities where the law requires.
- With your permission: location, camera and photos, notifications. You can withdraw these in your phone's settings at any time.
We do not use your data for advertising, do not sell it, and do not build marketing profiles from it.
Who can see itLink to this section
- Your driver: before accepting, a driver sees only the street, city and landmark of the pickup and drop-off points. After accepting, the driver sees your name and contact details, the full addresses, and the recipients' names and phone numbers, and can call them. These details stay in the driver's trip history.
- You, about the driver: once a driver is assigned you see their name, phone number, vehicle (plate, model, colour) and rating, and their live position while the order is active.
- The recipient: you can share the delivery code with the recipient by SMS from your phone.
- Our staff, as their role needs (operations, support, finance), and our support team in order chats.
- Service providers listed below, and authorities when the law requires it.
We never sell personal data or share it for advertising.
Service providersLink to this section
| Provider | What for | What it receives |
|---|---|---|
| Hostinger | Hosting our servers and database | The data described in this policy, stored on our servers |
| SMS provider | Confirming a new mobile number with a code, where offered | Your mobile number and the code |
| Email provider | Sending sign-in codes by email | Your email address and the code |
| Google Firebase Cloud Messaging, Apple Push Notification service | Delivering push notifications | Your device's push token and the notification's text |
| Firebase Crashlytics | Crash reports (release versions only) | Technical crash details, device model, operating system and app version, and an installation identifier — no name, phone, email or order details |
| Google Maps Platform | Maps and address search | The map area you view and the text you type in address search; the phone's own geocoding service (Google or Apple) turns a map point into an address |
Each provider processes data on our instructions or under its own privacy terms for the service it provides: Google Privacy Policy, Firebase privacy and Apple Privacy Policy.
NotificationsLink to this section
We send push notifications about your orders (for example when a driver is assigned — with the driver's first name — or when the order is delivered), new chat messages (with the first part of the message) and support replies. Unless your phone hides notification content, the text can appear on your lock screen. Turn them off at any time in your phone's settings.
On your phoneLink to this section
- Your sign-in token is kept in the phone's secure storage (Android Keystore, iOS Keychain) and removed when you sign out.
- Preferences such as language and theme, recent searches, and which chat messages you have read are kept in the app's own storage. Images are cached to load faster; on Android the app's data is excluded from device backups.
- Deleting the app removes all of this from your phone.
Where it is stored and how it is protectedLink to this section
- Our servers and database are provided by the hosting company Hostinger. Some of our providers (such as Google and Apple) process data on servers outside the Kingdom. Where personal data is transferred outside Saudi Arabia, we do so under the conditions the PDPL and its regulations set for such transfers.
- All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
- Access is limited by role: each staff member sees only what their job needs, staff sign in with one-time codes sent to their work email and their sessions end daily, and changes made by staff are recorded in an audit log.
- Sign-in codes and handover codes are short-lived and limited to a few attempts; repeated wrong codes block further tries for a while.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.
How long we keep itLink to this section
- Account details: while your account exists; removed straight away when you delete it.
- Orders, payments and invoices: kept as financial and tax records for as long as Saudi law requires, and as needed to handle disputes.
- Proof of delivery, status history, chat, ratings and support tickets: kept with the order records they belong to.
- In-app notifications: deleted after 90 days. Photos never attached to an order: deleted after 48 hours.
- Sign-in sessions: end after 90 days. Sign-in codes: expire after 5 minutes and are deleted within a day.
- Server logs: 14 days. Crash reports: 90 days at Firebase Crashlytics.
Deleting your accountLink to this section
- In the app, open Account → Security → Delete account. Deletion is possible when you have no order in progress; the app explains what to do otherwise.
- Your name, phone, email, saved addresses, sessions and notification tokens are removed straight away; orders stay as anonymised financial records. Details: the account deletion page.
Your rightsLink to this section
Under the Personal Data Protection Law you have the right to:
- be informed about how your data is processed — this policy;
- access your personal data and receive a copy of it;
- correct data that is inaccurate or incomplete — you can change your name and email yourself in the app;
- have it deleted when it is no longer needed;
- withdraw consent you have given, such as app permissions, at any time;
- complain to the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.
To use these rights, email support@savepoints.sa from the address on your account — or, if you can no longer use it, tell us that address and your name. We may need to confirm it is you. We reply within 30 days, and tell you if we need longer as the law allows.
ChildrenLink to this section
Logistic Safe is not directed to children. Accounts are for people aged 18 or over. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policyLink to this section
When the app or the law changes, we update this policy and its effective date. For significant changes we tell you in the app before they take effect. The platform privacy policy covers all our apps and this website together.
Contact usLink to this section
Questions about this policy or your data, or a request to use your rights:
Save Points, operator of Logistic Safe, Kingdom of Saudi Arabia.