Privacy policy
Draft for legal review. A lawyer must check this policy, and the highlighted details must be filled in, before it is published or linked from the App Store or Google Play.
Breexi connects people who need an item brought from another city ("senders") with travellers already making that trip ("travellers"). This policy explains what personal data we collect when you use the Breexi app for iOS and Android, the Breexi web app, and this website, why we collect it, and the choices you have.
1. Who we are
Breexi is operated by [company legal name], registered in [country] under company number [registration number], with its registered office at [registered address]. We are the data controller for the personal data described in this policy.
You can reach us about privacy at [privacy contact email]. [If a Data Protection Officer or EU/UK representative is appointed, add their contact details here.]
2. What we collect
Information you give us
- Account details: your name, email address, phone number, password, profile photo, language and saved addresses.
- Identity verification: a photo of your passport, driving licence or national ID, and a selfie or short video used to match your face to the document. A face match uses biometric data, which we process only with your explicit consent.
- Requests and trips: photos and descriptions of items, pickup and delivery addresses, routes, travel dates, sizes and weights, prices and offers, and the customs and liability declarations you accept.
- Messages: chats between senders and travellers, including automatic translations, and messages you send to our support team.
- Ratings and reviews you give and receive, and any replies.
- Disputes: the information and evidence you provide when something goes wrong.
- Waitlist: on this website, your email address, whether you want to send or earn, and the route you tell us about.
Information collected when you use Breexi
- Delivery evidence: pickup and delivery photos, QR code scans, backup codes and the time they were used.
- Location: see Location data.
- Payments: payment status, amounts, currencies, refunds, deposits and payouts. Your full card and bank details are collected and stored by our payment provider, Stripe, not by Breexi.
- Device and usage data: device type, operating system, app version, IP address, crash reports, notification settings and how you use features. Analytics data is collected only if you agree to it.
- Safety and fraud signals: risk checks on accounts, payments and requests, including screening of item photos and descriptions for prohibited items.
3. How we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, match requests with trips, enable chat, tracking, handoffs and ratings | Performance of our contract with you |
| Process payments, hold funds until delivery, pay travellers, handle refunds and deposits | Performance of contract; legal obligation (financial records) |
| Verify your identity with a document check | Legitimate interests in a safe marketplace; legal obligation where it applies |
| Match your face to your ID document | Your explicit consent |
| Screen for prohibited items, prevent fraud and keep users safe | Legitimate interests; legal obligation |
| Resolve disputes and answer support requests | Performance of contract; legitimate interests |
| Keep records of customs and liability declarations | Legal obligation; legitimate interests |
| Improve the app and measure how it is used | Your consent (analytics); legitimate interests (crash reports) |
| Send launch news to people on the waitlist, and marketing messages | Your consent, which you can withdraw at any time |
We do not sell your personal data. We do not use it for advertising by third parties.
Some decisions are made with automated help, such as suggested prices, matching, prohibited-item screening and fraud risk checks. Where an automated check blocks a request or an account, a person on our team reviews it, and you can ask us to look at it again.
4. Who we share it with
- Other Breexi users: when a delivery is agreed, the sender and the traveller see each other's first name, profile photo, verification badge, ratings and the details needed for the delivery. Your exact address is shared only with the person handling your delivery.
- Onfido, for identity document checks and face matching.
- Stripe, for payments, held funds, refunds and payouts. Stripe may run its own identity checks on travellers who receive payouts.
- Service providers that host our systems and help us run Breexi, such as [cloud hosting provider], [maps provider], [translation provider], [email and push notification providers] and [analytics provider]. They may use your data only to provide their service to us.
- Authorities, such as customs, police or regulators, when the law requires it or to protect someone's safety.
- A buyer or successor, if Breexi is sold or merged. Your data would stay protected by this policy.
5. Location data
With your permission, the app uses your device's location to suggest addresses, detect when a traveller arrives and show the progress of a delivery.
- During a delivery, the other person sees your location only roughly, to about 500 metres, and only within the delivery window.
- Exact GPS data is deleted once the delivery is complete. We keep only the delivery's start and end status and times.
- You can turn location access off at any time in your device settings. Some features, such as arrival detection, will then stop working.
6. International transfers
Breexi is used across borders, so your data may be processed outside your country, including outside the European Economic Area and the United Kingdom. When we transfer data, we use safeguards approved by the law, such as the European Commission's Standard Contractual Clauses, or rely on an adequacy decision. You can ask us for a copy of these safeguards.
7. How long we keep it
| Data | How long |
|---|---|
| Account and profile | While your account is open. Deleted within 30 days after you close it, except as below. |
| Exact GPS location | Deleted when the delivery is complete. |
| Identity verification images and face data | [retention period agreed with Onfido], then deleted. The result of the check is kept while your account is open. |
| Delivery photos, chat and declarations | [period] after the delivery, or longer if a dispute or legal claim is open. |
| Payment and tax records | [period required by law, often 6 to 10 years]. |
| Waitlist email | Until Breexi launches on your route, or until you unsubscribe. |
8. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct data that is wrong or incomplete;
- delete your data;
- receive your data in a portable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- restrict how we use your data;
- withdraw your consent at any time, without affecting what we did before;
- ask for a person to review an automated decision.
You can export or delete your data from the app's settings, or email [privacy contact email]. We answer within 30 days. You can also complain to your local data protection authority.
9. Deleting your account
You can delete your account in the app under Settings › Account › Delete account, or by emailing [privacy contact email] from the address linked to your account. We delete your personal data within 30 days. We keep only what the law requires, such as payment records, or what we need for an open dispute or claim.
10. Security
We encrypt data in transit and at rest, limit staff access to what each role needs, and offer two-step sign-in. No system is completely secure, so if we learn of a breach that puts you at risk, we will tell you and the authorities as the law requires.
11. Children
Breexi is not for anyone under [minimum age]. We do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.
12. This website and cookies
This website does not use cookies or tracking today. It loads its fonts and scripts from our own server. If we add analytics or marketing tools, we will ask for your consent first and keep them off until you agree.
13. Changes to this policy
We will update this policy when Breexi changes. If a change is significant, we will tell you in the app or by email before it takes effect. The effective date at the top shows when it last changed.
14. Contact us
[company legal name]
[registered address]
[privacy contact email]