Home/Privacy Policy

Privacy Policy

What SHARPALY collects, why, who else sees it, and how to get it deleted. In plain words, because a policy nobody can read protects nobody.

Last updated: 16 October 2026

This policy covers the SHARPALY mobile app and this website, both operated by Sharpaly Logistics Ltd, No 1 Prof Mmaduabuchi Dukor Close, Zone 2, Satellite Town, Lagos, Nigeria.

SHARPALY is one app used by three kinds of people — customers who send parcels and order food, riders who carry them, and vendors who sell through it. What we hold depends on which of those you are, so each is listed separately below.

1. What we collect

Everyone with an account

  • Your name, phone number and email address.
  • A password, stored only as a one-way hash — we cannot read it, and neither can anyone who obtains a copy of our database.
  • A profile photo, if you add one.
  • A device token, so we can send you notifications about your delivery.
  • Records of your orders and payments.
  • Messages you send through the in-app chat about a delivery.

Customers

  • Pickup and delivery addresses, including the exact map point you choose, and any address you save for reuse.
  • Your device location, when you ask the app to find where you are or to show shops near you. Only while you are using the app.

Riders

  • Your location while you are online, sent every 45 seconds or so, and more often while you are carrying a delivery. It stops the moment you go offline. The app asks you before this starts.
  • Identity and licensing documents for verification: NIN, BVN, driver's licence number and expiry, rider's card number, your vehicle's plate number, and photographs of those documents and of yourself.
  • Photographs you take as proof of collecting and delivering a parcel.
  • Your vehicle type, ratings and delivery history.

Vendors

  • Your store name, address and map location, logo, banner and menu.
  • Your orders, payouts and wallet balance.

What we never collect

We do not store card numbers, CVVs or bank passwords. When you pay, our payment provider collects those directly and tells us only whether the payment succeeded, and for how much. We never see them.

2. Why we collect it

WhatWhy
Name, phone, emailTo create your account, and so the rider, vendor or customer at the other end of a delivery can reach you about it
Addresses and map pointsTo price the delivery by distance and to get the rider to the right door
Rider locationSo customers can see a rider is nearby before booking, and watch their own delivery arrive
Rider documentsTo confirm a rider is who they say they are and legally allowed to ride, before we let them carry your property
Proof photosTo settle disputes about what was handed over, and whether it arrived
Order and payment recordsTo run the service, pay riders and vendors correctly, and meet Nigerian tax and accounting obligations

3. Who else sees it

We do not sell your data. We do not share it for advertising. It goes to three kinds of recipient and no others:

  • The other person in your delivery. Your rider sees the delivery address and a contact number; you see your rider's first name, vehicle and plate. A rider shown as "nearby" on a customer's booking map is anonymous — a dot and a vehicle type, never a name or a plate.
  • Google Maps Platform, which turns addresses into map points, suggests addresses as you type, measures the distance between two places, and draws the maps.
  • Our payment provider, which collects and processes payments and payouts.

We may also disclose information where a Nigerian court or regulator lawfully requires it.

4. How long we keep it

Your account details are kept while your account exists. Records of completed deliveries and payments are kept for seven years, which is the retention period Nigerian tax and company law expects of a business keeping its books.

When you delete your account, your personal details are removed from those records. What remains says that a delivery happened, what it cost and who was paid — not who it was for. Rider location history and identity documents are destroyed outright, not anonymised.

5. Deleting your account

You can delete your SHARPALY account at any time, from inside the app or by writing to us. Full instructions, and exactly what is removed and what is kept, are on our account deletion page.

6. Your rights

Under the Nigeria Data Protection Act 2023 you may ask us to:

  • show you what we hold about you;
  • correct anything that is wrong;
  • delete your account and personal data, subject to the records we must keep;
  • stop using your data for a particular purpose.

Write to sharpalylogistics@gmail.com and we will respond within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.

7. How we protect it

  • All traffic between the app and our servers is encrypted in transit (HTTPS).
  • Passwords are stored as one-way hashes and are never readable, by us or anyone else.
  • Session tokens are stored as hashes, expire, and are revoked when you sign out or delete your account.
  • Access to the admin console is restricted and every change to pricing, commissions or an account is recorded against the administrator who made it.

No system is perfectly secure. If a breach ever affects your data, we will tell you and the Nigeria Data Protection Commission as the law requires.

8. Children

SHARPALY is not intended for anyone under 18, and we do not knowingly create accounts for children. If you believe a child has an account, tell us and we will remove it.

9. Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you in the app if the change is significant.

10. Contact us