Privacy Policy

1. Who we are

NUTT is a campus delivery platform serving students at the University of Dar es Salaam (UDOM), operating primarily on the College of Informatics and Virtual Education (CIVE) campus in Dodoma, Tanzania. We are operated by a student-run project and can be reached at the contact details in Section 8.

2. Data we collect

When you use NUTT, we collect the following information:

• •Google account information: Your name, email address, and profile picture, provided by Google when you sign in via Google OAuth.
• •Order data: Pickup and drop-off locations, item descriptions, delivery timestamps, and order status updates.
• •Device and usage information: Browser type, operating system, IP address, and approximate location (if you grant permission) used to detect whether you are on campus.
• •Service logs: Request logs, error reports, and WebSocket session data generated during normal platform operation.
• •Communications: Messages exchanged through the in-app chat widget between users and riders.

3. How we use your data

• •Authentication: We use your Google account to identify you securely and maintain your session.
• •Delivery operations: Order data is used to assign riders, track deliveries, and display real-time status updates.
• •Service improvement: Aggregated usage data helps us identify issues, improve platform performance, and plan new features.
• •Safety and abuse prevention: Logs are reviewed to investigate disputes, fraud, or violations of our Terms of Service.

We do not use your data for advertising, and we do not sell your personal information to any third party.

4. Third parties

• •Google OAuth: Sign-in is handled by Google. Your use of Google authentication is subject to Google's Privacy Policy.
• •Hosting provider: NUTT is hosted on Netlify (frontend) and a cloud server (backend). These providers may process request data as part of normal hosting operations.
• •Mapping services: Delivery maps use OpenStreetMap-based APIs (Photon/Komoot, OSRM) and Mapbox for place search. Location queries are sent to these services to resolve addresses.

We do not integrate advertising networks or sell data to analytics brokers.

5. Data retention

We retain your account data for as long as your account is active. Order records are kept for 12 months after completion for operational and dispute-resolution purposes. Service logs are retained for up to 90 days. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or safety reasons.

6. Your rights

You have the right to:

• •Access your data: Request a copy of the personal data we hold about you.
• •Correct your data: Ask us to correct inaccurate information.
• •Delete your data: Request erasure of your personal data. We will honour this within 30 days unless legal obligations require otherwise.
• •Withdraw consent: You can stop using the service and request account deletion at any time.

7. Cookies and local storage

NUTT uses cookies and browser local storage solely to maintain your authentication session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Contact and data removal requests

To request access to, correction of, or deletion of your personal data, contact us via:

• •WhatsApp: +255 752 994 381 — message us with the subject "Data Request".

We will acknowledge your request within 3 business days and complete it within 30 days.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app. Continued use of NUTT after changes are posted constitutes acceptance of the updated policy.