Privacy Policy

Last updated 31 August 2026

Qaf Xpress is a last-mile delivery company based in Kuwait. This policy explains what personal information we collect, why, and what we do with it. It covers our website at qafxpress.com, our customer and merchant portals, and the Qaf Xpress Courier Android application used by our delivery couriers.

If anything here is unclear, or you want a copy of what we hold about you, write to hello@qafxpress.com.

1. The Qaf Xpress Courier app

This section describes the Android app used by our couriers. It is not a consumer app — it is issued to people who deliver for us, and access requires a courier code and PIN that we issue.

What the app collects

• Courier identity. Your name, mobile number, the courier code we issue you, and your PIN. The PIN is stored only in a hashed form — we cannot read it and neither can anyone with access to our database.
• Device registration. An identifier for the handset you sign in from, so a lost or stolen phone can be revoked without disturbing anyone else. We do not read your contacts, messages, photo library, call log or any other app's data.
• Precise location — only at the moment you mark a parcel. When you record a delivery, a failed attempt, or a contact attempt with a customer, the app takes a single position reading and stores it against that record. The app does not track you. There is no background location, no continuous trail, no location capture while you are off shift or while the app is closed. Location is used to evidence where a delivery was recorded, and nothing else.
• Camera. Used to scan parcel barcodes. Images from barcode scanning are processed on the device and are not uploaded or retained.
• Work records. The parcels assigned to you, what you did with each one, the cash you collected and handed over, and your earnings.
• Documents you choose to upload. Uploading identity or vehicle documents is optional. If you upload them, we store them privately and only office staff can view them.
• Customer information you work with. Recipient names, addresses and phone numbers appear in the app because you need them to deliver. That information belongs to the merchant and the recipient, not to you or to us, and it is only visible to the courier a parcel is assigned to.
• Offline queue. When you have no signal, outcomes are held on the phone and sent when signal returns. That local copy is cleared once it is delivered to our servers.

What the app does not do

• It does not track your location in the background or when you are not working.
• It does not read your contacts, photos, messages or call history.
• It contains no advertising and no third-party analytics or tracking software.
• We do not sell any data, ever, to anyone.

Permissions and how to withdraw them

Android will ask your permission before the app uses the camera or your location. You can refuse, and you can withdraw permission at any time in Android Settings → Apps → Qaf Xpress Courier → Permissions. The app keeps working without them: barcodes can be typed by hand, and a delivery recorded without a position is still a valid delivery.

2. Customers and recipients

If a parcel is being delivered to you, we hold your name, delivery address, phone number, the order reference given to us by the merchant, and the amount to collect if the order is cash on delivery. We use it to deliver your parcel and to contact you about that delivery. We receive this information from the merchant you bought from.

3. Merchants

For business customers we hold company and contact details, the orders you send us, and the billing and settlement records that follow from them.

4. Website visitors

Our website uses analytics to understand how pages are used. These load only after you consent through the cookie banner, and you can decline. If you send us an enquiry we keep what you tell us so we can answer it.

5. Who we share information with

We share personal information only where it is needed to run the service:

• The merchant whose parcel is being delivered, so they know the outcome.
• Service providers who operate parts of our platform on our behalf — our database and hosting provider, our messaging provider for WhatsApp notifications, and our payment provider where a payment link is used. They act on our instructions and may not use the information for their own purposes.
• Authorities, where we are legally required to.

We do not sell personal information, and we do not share it for advertising.

6. Keeping information secure

Information is encrypted in transit. Access to our systems is restricted by role, so a courier sees only their own work, a merchant sees only their own orders, and identity documents are visible only to office staff. PINs are stored hashed and cannot be recovered or read by us.

7. How long we keep it

Delivery and settlement records are kept for as long as we need them for accounting, tax and dispute purposes. Courier accounts and any documents uploaded are removed when a courier leaves and the retention period for their records has passed. Local data held on a courier's phone is cleared when they sign out.

8. Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Couriers can also ask for their account to be closed and their device registration revoked. Write to hello@qafxpress.com and we will respond.

9. Children

Our services are not directed at children. The Qaf Xpress Courier app is issued only to adults working as couriers, and we do not knowingly collect information from anyone under 18.

10. Changes to this policy

If we change how we handle personal information we will update this page and change the date at the top. Material changes affecting couriers will also be communicated in the app.

11. Contact

Qaf Xpress — Kuwait
hello@qafxpress.com