Privacy Policy

Last updated: 17 September 2026

This policy explains what data we collect when you use the app or the website, why we collect it, who can see it, and how long we keep it. It is written in plain language on purpose, and it describes what the system actually does.

What we collect

We collect what we need to deliver your order, issue its invoice and collect what is due:

• Your phone number, or your email if you choose to sign in with it: for one-time-code sign-in and for contacting you about the order.
• Your name, account type, country and language. For a company account also the legal name, tax ID, commercial registration and billing address — these are printed on the tax invoice.
• Each delivery site (the pinned coordinates, the address and your notes for the crew) and the sites you save so you do not retype them.
• Order and invoice details, the transfer receipts you upload with their reference numbers, and your rating and comment on an order if you leave one.
• A device identifier for notifications: so we can send you order and invoice updates.
• Technical data: your network address (IP) and device type alongside sign-in sessions and system logs, and simple usage events (app opened, order placed, banner tapped).
• If you send an enquiry or a deletion request from the website: your name, phone number, email and message.

What we don't collect

We never ask for or store card details. Payment is made by bank transfer, InstaPay or cheque, where we review the receipt — or online by card on the page of our licensed payment processor (Paymob): the card is entered with them, not with us, and they tell us only the outcome of the payment, its reference, the card brand and its last four digits.

We do not track your location in the background. The device location is read only when you tap “locate me” on the map, and you can place the pin by hand without it.

There are no advertising or third-party tracking tools inside the app.

How we use your data

We use your data to fulfil the order, issue the invoice, review payment, remind you of the pour and of invoices falling due, and contact you about your orders.

Order and invoice notifications go to every registered customer. Promotional notifications can be switched off from the Account screen in the app without affecting order notifications, or you can switch all notifications off in your device settings.

Usage events are analysed on our own servers to learn what works in the app. They are linked to your account when you are signed in, and are deleted after 30 days.

Who sees your data

Our operations and collections team sees your order details in order to fulfil it and review its payment. The driver sees only the site location and a contact number, and you see the driver's name and number at delivery time.

We do not sell your data or share it with advertisers. It reaches third parties acting on our behalf in these cases only: the SMS provider (your phone number and sign-in code), the email provider (your email address and our messages to you, including the invoice), and the push notification service (your device identifier and the notification text).

When we send you a payment link for an invoice, the link opens that invoice without signing in for 14 days — so do not share it with anyone who should not see the invoice.

We may disclose data if legally required to by a formal order.

The map

The map library ships inside the app, but the map images themselves load from OpenStreetMap. Those requests reach their servers with your network address, as with any website you open. The pinned coordinates themselves go to no one but us.

The website

The website (not the app) may use measurement tools such as Google Tag Manager, Microsoft Clarity or advertising pixels when we enable them; they read your browsing of the site under those companies' own policies. The legal pages and the account-deletion page carry none of these tools.

Photos, videos and documents

When you upload a transfer receipt or a cheque photo, or document a delivery you reject (photo, video or file), the file is kept in private storage and seen only by our collection or operations team to review your request. The app asks for camera or photo access only when you choose to upload.

Security and retention

All traffic is encrypted over HTTPS, and our team's passwords are stored irreversibly hashed. One-time sign-in codes are stored as hashes and expire within 5 minutes; sign-in sessions expire within 30 days.

Transfer receipts and delivery-rejection files live in private storage that is never publicly reachable — they open only through the app or the team's dashboard after an access check.

We keep orders, invoices, payment receipts and dispute files for as long as the tax and commercial laws of the country of service require. Usage events are deleted after 30 days. We take a daily backup of the data and keep it for 14 days.

Your rights and account deletion

You can correct your data from the Account screen, request a copy of your data by contacting us, and delete your account at any time.

Account deletion happens immediately from the Account screen in the app, or by request from the deletion page on the website (https://khlata.com/en/account/delete), where we call you to confirm it is your account and complete it within 30 days at most.

Deletion erases your name, phone, email, company details, saved sites, notifications, device identifier and ratings, and closes every session. What stays, for legal and accounting reasons only: issued invoices with the billing details printed on them, order records (including the delivery site), payment receipts and delivery-rejection files — no longer linked to a name or a number.

For any request about your data: [email protected].

Children

The service is intended for commercial and professional use, is not directed at anyone under 18, and we do not knowingly collect data from them.

Changes to this policy

If we change anything substantive, we will update the date above and announce the change on the website and in the app. Continuing to use the service after an update counts as accepting the new version.