This Privacy Policy describes how carrywith collects, uses, stores, shares, and otherwise processes personal information when you use the carrywith mobile app, web application, website, and related services (together, the “Platform”).

carrywith is a technology platform that connects people who want an item transported (“Shoppers”) with people who are already traveling and may agree to carry eligible items (“Travelers”). carrywith is not a carrier, courier, or freight operator.

This Privacy Policy should be read together with the carrywith Terms and Conditions. References to “we” and “us” mean the carrywith operating entity, which operates carrywith.

Depending on how you use carrywith, information may be used to:

• create and manage your account
• authenticate you and keep your account secure
• verify your phone number
• carry out traveler identity verification
• publish and manage Trips and Shipments
• match Shoppers with Travelers and show relevant listings
• create, negotiate and manage Deals
• provide chat and communication between Deal parties
• calculate and recommend delivery reward ranges
• process transactions, wallet balances, commissions and refunds
• facilitate Traveler payouts
• provide delivery confirmation, including QR handover verification
• manage cancellations and refunds
• investigate and resolve disputes
• send push notifications and in-app notifications
• provide customer support
• detect and prevent fraud and Platform abuse
• protect users and the security of the Platform
• enforce the Terms and other Platform policies
• comply with applicable legal obligations
• maintain, troubleshoot and improve carrywith

carrywith does not use personal information for third-party advertising or ad targeting.

carrywith uses automated processing in a small number of clearly defined places. These features run through an AI gateway service that carrywith calls from its servers, and they process the content described below rather than your identity documents or your chat history.

• Reward suggestion: Shipment details such as item type, weight, value and route are processed to suggest a delivery reward range. The amount is not binding — Shoppers and Travelers agree the final reward themselves.
• Product link import: when you paste a product link, the page content is fetched and processed to extract structured product information such as name, price, weight, currency and images, which are then pre-filled into your Shipment for you to review and edit.
• Item categorisation: item descriptions may be processed to suggest a category, which is used for customs-limit checks and matching.
• Matching support: Trip and Shipment attributes such as route, dates, weight and category are compared to surface relevant matches.

These features are assistive. carrywith does not make fully automated decisions that produce legal or similarly significant effects about you; verification approvals, dispute outcomes, and account restrictions are decided by people.

The providers actually used by the current carrywith implementation are those listed in section 5(B). Each processes information under its own privacy policy and terms. carrywith does not currently use any third-party identity-verification vendor, advertising network, or product-analytics tracking service.

carrywith uses reasonable technical and organisational measures designed to protect personal information. These include access controls at the database level so that users can generally reach only their own data and data shared with them, private storage for uploaded files (including verification media, chat attachments, tickets, and dispute evidence) rather than public links, hashed storage of one-time verification codes and handover tokens, restricted administrative access with audit logging of sensitive actions such as viewing verification media, and encryption of data in transit.

No method of transmission over the internet and no method of electronic storage is completely secure. carrywith cannot guarantee absolute security, and you are responsible for keeping your account credentials and device secure.

carrywith retains personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide and operate the Platform
• maintain your account
• complete and record transactions
• resolve disputes
• prevent and investigate fraud and abuse
• maintain the security and integrity of the Platform
• comply with legal, tax, accounting or regulatory obligations
• establish, exercise or defend legal claims

Different categories of information are kept for different periods. Short-lived records such as one-time verification challenges, QR handover sessions, chat presence signals and saved form drafts expire automatically. Transaction, dispute and audit records are kept longer because they may be needed for accounting, safety or legal reasons.

carrywith has not yet published fixed retention periods for each category. Rather than state periods that are not configured, this Policy describes the principles applied; defined periods will be published here once set.

You can request deletion of your carrywith account through support@carrywith.uk. On request, your account is deactivated and marked as deleted, your profile stops being visible to other users, and your listings are withdrawn from the Platform.

A self-service “Delete account” control is not yet available in the app. If carrywith is distributed on the Apple App Store, an in-app account-deletion path is required; this Policy will be updated when that control ships.

Deleting an account does not always require immediate deletion of every record. We may retain information where retention is reasonably necessary or legally required — for example transaction and payout records, fraud-prevention and security records, dispute records and related evidence, verification decision logs, and information needed to establish or defend legal claims. Retained information is kept only for as long as those purposes require.

Depending on where you live and on applicable law, you may have rights in relation to your personal information, including:

• access to the personal information we hold about you
• correction of inaccurate or incomplete information
• deletion of personal information in certain circumstances
• restriction of certain processing
• objection to certain processing
• portability of information you provided to us
• withdrawal of consent, where processing is based on your consent

These rights are not identical in every country and are subject to legal limitations and exceptions. Before acting on a request we may need to verify your identity, and we may decline or partially fulfil a request where the law allows or requires us to retain information. You can exercise these rights through support@carrywith.uk. Much of your profile and listing information can also be corrected directly in the app.

carrywith may send notifications about chat messages, Trips, Shipments, Deals, requests and offers, payments and wallet activity, delivery and handover steps, disputes, verification outcomes, and account or security activity.

In the native carrywith app, push notifications are delivered through OneSignal. Your account identifier is linked to your device so notifications reach the right person, and delivery outcomes are logged so we can troubleshoot failures. When you sign out, that link is removed so the next person to use the device does not receive your notifications.

You can control notification permissions at any time in your device’s operating system settings, and notification preferences are also stored on your carrywith profile. Turning off push notifications does not stop essential in-app notifications or service-related messages needed to operate a Deal.

carrywith does not use advertising cookies, tracking pixels, or third-party behavioural analytics.

The web application uses browser local storage on your device to keep you signed in (your authentication session), and to remember limited app state such as your in-app navigation context. Saved form drafts for creating a Shipment or posting a Trip are stored on your account so you can resume them on another device. Standard server-side request logging is performed by our hosting infrastructure.

carrywith is not intended for, and may not be used by, persons under 18 years of age. This matches the minimum age in the carrywith Terms and Conditions. We do not knowingly collect personal information from anyone under 18.

If we learn that personal information has been collected from a person who is not legally eligible to use the Platform, we may take appropriate steps, including restricting or closing the account and deleting the information where required by applicable law.

carrywith relies on service providers that operate internationally. As a result, your personal information may be stored or processed in a country other than the one you live in, and that country’s data protection laws may differ from your own.

Where required by applicable law, we will put appropriate safeguards in place for such transfers.

The specific transfer mechanisms and hosting regions have not been formally documented for this Policy and will be stated here once confirmed.

carrywith may update this Privacy Policy from time to time to reflect changes to the Platform, our practices, or legal requirements. The effective date at the top of this page always shows when the current version took effect.

For material changes, we will provide reasonable notice through the app or by other appropriate means where required by applicable law. Continuing to use carrywith after an update takes effect means the updated Policy applies to you.

For any question or request about this Privacy Policy or about how your personal information is handled, please use support@carrywith.uk.

A postal address for the data controller has not been confirmed for carrywith and is deliberately not stated here. It will be published in this section once confirmed.

The Platform is operated by the carrywith operating entity, which acts as the controller of the personal information described in this Policy.

The registered legal entity name, registered address, and governing jurisdiction have not been confirmed in the project and must be added before this Policy is relied on commercially. No Data Protection Officer has been appointed or designated in the product; none is claimed here.