Privacy Policy
This policy explains how the Mashi platform (the Mashi app and getmashi.com) collects, uses and protects your data, whether you are a passenger, a cargo sender or a driver. By using the app you agree to this policy.
1. Data we collect
- Account data: phone number (required for verification), name, email (optional, or when you sign up by email), profile photo, preferred language, and gender or date of birth if you add them.
- Driver data: photos of your ID, driving licence, vehicle documents, vehicle photos and plate, used only for verification.
- Trips and cargo: pickup and drop-off points, times, seats, parcel descriptions and photos, delivery codes, ratings and reviews.
- Location: only during an active trip, for trip sharing and cargo tracking. We do not track you in the background outside a trip.
- Payments: payment method, amounts, transfer proofs you upload and your wallet balance. We do not store bank card numbers.
- Chat and notifications: in-app messages between the two parties of a transaction, and your notification history.
- Device data: device type, operating system, push token and technical logs used to diagnose problems.
2. Why we use it
- To create and verify your account with a code sent by SMS, WhatsApp or email.
- To match passengers and senders with drivers, and to manage bookings, shipments, payments and cancellations.
- Safety: driver verification, the SOS button, trip sharing with contacts you choose, and handling reports and disputes.
- To send notifications about your transactions, and marketing messages only if you opted in.
- To improve the service, prevent fraud and comply with the law.
3. Who we share it with
- The other party of a transaction: a driver sees your name, photo, phone number and trip points; a passenger or sender sees the driver's name, photo, rating and vehicle details. Nothing beyond what is needed to complete the transaction is shown.
- Service providers: SMS, WhatsApp (Meta), email and push notification (Firebase) providers, map providers, and money-transfer partners when you choose to pay through them.
- Authorities: when legally required or to protect the safety of users.
We never sell your personal data.
4. Retention
We keep your account data while your account is active. Chat messages are deleted a set period after a trip ends, and read notifications are purged periodically. When you delete your account we erase your identifying data immediately (or after a short grace period if you have transactions in progress) and keep only anonymised financial and audit records to the extent the law requires.
5. Your rights
- View and edit your data from the profile screen in the app.
- Delete your account inside the app (Profile → Settings → Delete account) or through the account deletion page.
- Turn off marketing notifications from the app settings at any time.
- Email privacy@getmashi.com for any privacy request.
6. Security
Data is transmitted encrypted (HTTPS), passwords are stored hashed, operations staff have restricted access and every admin action is logged. No system is perfectly secure, so never share your verification code with anyone.
7. Children
The service is for people aged 18 and over. We do not knowingly collect children's data and will delete any account found to belong to a minor.
8. Changes
We may update this policy and will notify you in the app of any material change. The date of the latest version is shown at the top of this page.
9. Contact
Mashi, Yemen. Email: privacy@getmashi.com · Support: support@getmashi.com