Privacy Policy
Effective 14 October 2026
Vuusha is a parcel and bus-cargo management service for transport companies, made by Fiqra Technologies (Tanzania). It is a web platform and two apps (iOS and Android) used by transport company staff. This page explains what personal data the service handles, why, and what choices you have.
Who is responsible
Each transport company that uses Vuusha (the "company") decides which parcels, customers and staff are entered, and is the controller of that data. Fiqra Technologies provides the software and processes the data on the company's behalf. For staff accounts, billing and the running of the service itself, Fiqra Technologies is the controller.
If you are a sender or receiver of a parcel and have a question about your parcel record, contact the transport company first. You can also contact us (see Contact).
What data we handle
| Data | Why | Who receives it |
|---|---|---|
| Staff accounts: name, email, role, branch, sign-in credentials (passwords are stored hashed by our authentication service) | Sign in, limit what each person can see, keep an audit trail of changes | The company; our hosting; our email provider (invites and password resets) |
| Parcel records: sender and receiver names and phone numbers, sender ID number where the company records it, route, parcel type and description, fare, payment status and method, receipt number, tracking number and status history | Book, track and deliver parcels, print receipts, produce reports for the company | The company; our hosting. Anyone who has a tracking number can see that parcel's public tracking page (status and route, not phone numbers) |
| Text messages: the receiver or sender phone number and the message text (for example "your parcel has arrived") | Notify customers about their parcel; honour opt-outs | The SMS provider (Beem, or Infobip, or a provider the company connects itself) |
| Subscription and top-up payments: the mobile-money number you enter, amount, purpose, the staff member's name and email, status | Take payment for the company's Vuusha subscription, invoices and SMS credit | Selcom (payment processor) and the mobile-money network. We keep only a masked version of the number |
| Proof of delivery and parcel photos: a photo of the parcel and the person collecting it, the collector name and an optional ID number, and optionally a photo of the waybill; receiver name | Prove a parcel was handed over correctly and settle disputes | The company; our hosting (private storage). Not shown publicly |
| Waybill photos sent for reading (see "Waybill photo reading") | Pre-fill the booking form from a paper waybill | Anthropic (AI provider), only when a staff member chooses to read a photo |
| Expenses entered by the company: description, amount, paid-to, receipt photo | Company bookkeeping | The company; our hosting |
| Technical data: IP address, app version and platform, request logs and rate-limit counters | Security, abuse prevention, supporting old app versions | Our hosting provider (Amazon Web Services). Where a deployment sits behind a network provider such as Cloudflare, that provider also handles the traffic |
How we use data
We use data only to run Vuusha for the company: bookings, tracking, notifications, payments, reports, security and support. We do not sell personal data and we do not use it for advertising.
The apps: camera, Bluetooth and storage on your device
- Camera: used to scan receipt QR codes and to photograph parcels, waybills, expense receipts and proof of delivery. Photos are uploaded to the company's account when you save them. The camera is never used in the background.
- Bluetooth: used only to find and talk to the company's 58 mm or 80 mm receipt printer. On Android 11 and older, the system requires location permission for Bluetooth scanning; the app does not read your location. No data is sent to anyone over Bluetooth except the receipt to the printer.
- Storage on the device: your sign-in token is kept in the platform secure store (iOS Keychain; Android encrypted preferences). Work you do offline (for example new bookings and status changes) is held in a local queue until it can be sent, then removed.
- We do not collect your precise location, contacts, or advertising ID, and the apps contain no analytics, advertising or tracking SDKs.
- Settings kept on the device: the workspace address, language, theme and cached settings are stored in the app's preferences (iOS UserDefaults; Android SharedPreferences) and removed when you sign out or uninstall the app.
Waybill photo reading
If your company has switched it on, a staff member can photograph a paper waybill and Vuusha sends that photo to an AI model provided by Anthropic to read the handwriting into booking fields (names, phone numbers, destination, fare). The photo is sent over an encrypted connection, is used only to produce the reading, and is not stored by Vuusha unless the company has chosen to keep waybill photos. We record that a reading took place (who, when, outcome) for usage limits and billing.
Payments
Customers' parcel fares are recorded in Vuusha as an amount, method and receipt number; Vuusha does not process them. When a company pays Fiqra Technologies from Billing, you enter a mobile-money number and Selcom sends a payment request to that phone. We send Selcom the number, amount, and the paying staff member's name and email. We never see or store your mobile-money PIN or card details.
Where data is kept and how it is protected
Data is stored in a PostgreSQL database and private file storage that we run ourselves on Amazon Web Services servers. The location depends on the deployment: the Vuusha platform runs in Cape Town, South Africa (af-south-1), and some existing deployments run in N. Virginia, USA (us-east-1). Some processors named above (SMS, payments, email, AI) process data in their own regions.
Connections use HTTPS. Access is limited by role and branch, and the database enforces company separation with row-level security. Third-party credentials that companies connect are encrypted at rest. Changes to payments, roles and approvals are written to an append-only audit log. No system is perfectly secure, and we cannot guarantee absolute security.
How long we keep data
We keep data for as long as the company's account is active and it needs the records, then until the company asks us to delete them. Short-lived technical records, such as rate-limit counters, are deleted automatically within about a day. The audit log is kept longer because it is evidence for payments and role changes. Public tracking pages only show the latest status and route.
Your choices, access and deletion
You can ask to see, correct or delete personal data we hold about you, and to stop text messages. Customers can ask the transport company; staff can ask their company administrator; anyone can write to us at the address below. Include your name, phone number or tracking number so we can find the record. We will reply within 30 days. Where a company must keep a record by law or for accounting, we will tell you what we keep and why.
To delete your account or workspace, see the Account and data deletion page (/account-deletion). Staff: ask your company administrator to deactivate or delete your account, or email emmanuelmtera8@gmail.com from the email address on the account with the subject "Delete my account". Company owners: email us to delete the whole workspace. We confirm by email and complete deletion within 30 days. We delete or anonymise the personal data we hold for the account. We keep records we must keep for accounting, payment evidence and the audit log (who changed roles and payments, and when) for as long as the law or the company requires, and we tell you what we keep. Customers named on parcels should contact the transport company or us.
Analytics and advertising
There are none. Vuusha does not use advertising, analytics or cross-site tracking, and shows no ads. It sets only the cookies and device storage needed to keep you signed in and to remember your language.
Children
Vuusha is a business tool for adults and is not directed at children. We do not knowingly collect data from children. Parcel records can name any sender or receiver, which is entered by the company, not by the child.
Changes to this policy
If we change this policy in a way that matters, we will update the date above and, for material changes, tell company administrators in the app or by email.
Contact
Fiqra Technologies, Tanzania. Email: emmanuelmtera8@gmail.com. Website: https://vuusha.com. Support: /support