Privacy Policy

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect through the Kooli application, how we use it, with whom we share it, and what rights you have in relation to your data. This Policy applies to all users of the Kooli platform and related services, regardless of location.

Last updated: June 10, 2026

01

Data Controller

The data controller responsible for your personal data is:

Diezze | Email: privacy@diezze.com

If you have any questions about how we process your data, or wish to exercise any of your rights, please contact us at the address above.

02

Data We Collect

We collect and process the following categories of personal data:

Account and Identity Data

  • Full name, email address, and password (hashed) provided at registration.
  • Profile information such as a profile photo (optional) and country of residence.
  • Account identifiers and reference numbers assigned by Kooli.
  • Identity verification documents, including selfie photos and government-issued ID card images, where voluntarily submitted.

Trip and Booking Data

  • Trip details: departure and arrival cities, dates and times, available weight, price per kg.
  • Booking details: package description, weight, and associated trip reference.
  • Trip and booking status history and timestamps.

Communication Data

  • Messages exchanged between users via the in-app chat feature.
  • Chat metadata: participants, timestamps, and chat status.

Device and Technical Data

  • Device identifiers and Firebase Cloud Messaging (FCM) tokens for push notifications.
  • App version, operating system, and platform (Android or iOS).
  • Log data including IP addresses, access times, and error reports.

Ratings and Reviews

  • Ratings and written feedback submitted by users following completed trips or bookings.

Usage Data

  • Information about how you interact with the Platform, including screens visited, features used, and session duration.

03

How We Use Your Data

We process your personal data for the following purposes:

Account and Platform Management

  • Creating and managing your Kooli account.
  • Facilitating Trip publication, discovery, and Booking management.
  • Enabling in-app messaging between Travelers and Senders.
  • Sending transactional notifications (booking status, trip status, cancellation alerts).

Trust and Safety

  • Reviewing identity verification submissions (selfie and ID card photos) to validate user identity and display verification status to other users.
  • Detecting and preventing fraud, abuse, and prohibited activity.
  • Maintaining and displaying user ratings to promote trust and safety within the community.

Platform Improvement

  • Analysing usage patterns and error logs to improve the reliability and performance of the Platform.
  • Delivering push notifications via FCM for time-sensitive booking and trip updates.

Legal and Compliance

  • Retaining records as required by applicable law.
  • Responding to lawful requests from law enforcement or regulatory authorities.

Marketing and Communications

  • Sending marketing or promotional communications, where you have opted in. You may withdraw your consent at any time.

04

Push Notifications and FCM Tokens

Kooli uses Firebase Cloud Messaging (FCM), a service provided by Google LLC, to deliver push notifications to your device. To do so, we store FCM tokens associated with your account.

We request permission to send push notifications contextually.

You may withdraw notification permission at any time through your device settings. Withdrawing permission does not affect your ability to use the Platform.

FCM tokens are stored securely in our database and are updated automatically when your device generates a new token. Old tokens are replaced to prevent stale delivery attempts.

05

Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following limited circumstances:

With Other Users

Your display name, profile photo, trip details, and ratings are visible to other users of the Platform as necessary to facilitate matchmaking.

With Service Providers

We share data with trusted third-party providers who assist in operating the Platform. These may include providers of the following services:

  • Push notification delivery (e.g. Google Firebase / FCM).
  • Hosting and data storage.
  • Transactional email delivery.
  • Analytics and error monitoring.

This list is not exhaustive and may evolve as the Platform grows. We only share data with service providers to the extent necessary for them to perform their services.

For Legal Reasons

We may disclose your data to law enforcement, regulatory bodies, or courts where required by applicable law or to protect the rights, property, or safety of Kooli, our users, or the public.

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you in advance of any such transfer.

06

International Data Transfers

As a global platform, Kooli serves users across multiple countries and regions. As a result, your personal data may be transferred to and processed in countries other than the one in which you reside, including countries where our service providers operate their infrastructure.

We take reasonable steps to ensure that any international transfer of your personal data is handled responsibly and that appropriate protections are in place, in accordance with applicable data protection laws in your country.

07

Data Retention

We retain your personal data for as long as your account is active, or as long as necessary to provide our services and comply with our legal obligations. Different categories of data may be retained for different periods depending on their nature and purpose.

When data is no longer needed, we securely delete or anonymize it. If you wish to request deletion of your data, please refer to the Your Rights section of this Policy.

08

Your Rights

You have the following rights in relation to your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Ask us to correct inaccurate or incomplete data.
  • Right to Erasure: Ask us to delete your personal data, subject to certain legal exceptions.
  • Right to Restriction: Ask us to restrict the processing of your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to the processing of your data for certain purposes.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@diezze.com. We will do our best to respond to your request in a timely manner. We may need to verify your identity before processing your request.

09

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include, but are not limited to:

  • Encrypted data transmission (TLS/HTTPS) between the app and our servers.
  • Hashed password storage — we never store passwords in plain text.
  • JWT-based authentication for all API and WebSocket connections.
  • Access controls limiting data access to authorized personnel only.

We continuously work to improve our security practices as the Platform evolves. However, no system is completely secure. In the event of a data breach that poses a risk to your personal data, we will notify you and relevant authorities as required by applicable law.

10

Cookies and Tracking

Kooli is available as a mobile application and a web platform. On the mobile app, we may use analytics tools to collect anonymised usage data for Platform improvement purposes. On the web platform, we may use cookies and similar tracking technologies to ensure the proper functioning of the Platform and to analyse usage patterns.

We only use such data in aggregated or anonymised form wherever possible. You may manage your cookie preferences through your browser settings at any time.

11

Children's Privacy

Kooli is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child under 18 without parental consent, we will delete it promptly.

If you believe a child has registered on our Platform, please contact us at privacy@diezze.com.

12

Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you via in-app notification or email at least 30 days before the changes take effect.

We encourage you to review this Policy periodically. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy.

13

Contact Us

For any privacy-related questions, data subject requests, or concerns, please contact us:

  • Email: privacy@diezze.com
  • Subject line: Privacy Request — [Your Name]

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate to your national data protection authority.

Privacy Contact

privacy@diezze.com