Legal

Privacy Policy

Effective Date: August 10, 2026

Pinned Flow ("the App") is developed, owned, and operated by Giga Cypher Systems Ltd ("we," "our," or "us"), doing business in association with Pinned Apex Ltd. This Privacy Policy applies to the Pinned Flow mobile application listed on the Google Play Store and the web portal available at ke-org-tst.pinnedflow.app.

This policy explains how Giga Cypher Systems Ltd collects, uses, and handles your data when you use our Android mobile application or web portal to send, transport, or collect packages across Nairobi.

1. Developer & Application Identification

To align with Google Play Store developer listing disclosures, below are the official identifiers associated with this application:

2. Information We Collect

We process information required to run the logistics network reliably:

  • Account details: Full name, phone number, email address, and authentication profiles (such as Google Single Sign-On).
  • Logistics data: Package tracking references, dimensions, pickup/drop-off Pod locations, door access commands, and one-time PIN codes.
  • Payments: M-Pesa transaction reference numbers and payment verification timestamps. We do not process or store sensitive payment PINs or cards.
  • Technical logs: IP addresses, device identifiers, crash reports, and system connection logs.

3. Android App Permissions

To handle physical smart locker unlocks, QR code scans, and runner navigation, the Pinned Flow Android mobile app asks for permission to use specific hardware features:

  • Camera (CAMERA): Used to scan QR codes on Pod smart locker displays and allow delivery runners to capture proof-of-delivery photos.
  • Storage Access (READ_EXTERNAL_STORAGE): On Android 12 and below, allows users to upload profile photos or delivery documentation from local storage.
  • Location Services (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Used to locate nearby Pod lockers, verify proximity before unlocking a compartment door, and calculate courier dispatch routes.
  • Foreground Services (FOREGROUND_SERVICE, FOREGROUND_SERVICE_LOCATION): Allows active courier runners to transmit continuous delivery updates while a delivery is in progress.
  • Notifications (POST_NOTIFICATIONS): Delivers order alerts, locker access PINs, and drop-off confirmations.
  • Wake Lock (WAKE_LOCK): Prevents your device processor from entering sleep mode while transmitting Bluetooth or network unlock triggers to smart lockers.

4. Location Data Usage

Location telemetry is strictly used to power physical deliveries. It verifies proximity to Pod lockers before unlocking compartments and tracks active courier routes. Location data is never sold, rented, or shared with third-party advertising networks.

5. Third-Party Sharing & Google Data

If you log in using Google OAuth, we only access basic identity data (email, profile, openid) to create your account. We strictly adhere to the Google API Services User Data Policy, meaning user data is never used for serving advertisements or transferred to data brokers.

We only share relevant package details with assigned runners, hosting infrastructure providers, and payment processors (M-Pesa API) to fulfill active orders.

6. Data Deletion Requests

You can request the complete deletion of your account and related transaction history at any time.

Email your deletion request to gigacyphersystems@gmail.com or pinnedapexltd@gmail.com from the email address linked to your account. Requests are processed within 30 days.

7. Contact Details