Privacy policy
This policy covers the GENEY website and web workspaces, the GENEY app for Personal and Business customers, the GENEY Rider app, and the delivery services behind them.
Draft pending legal review. Effective date, controller details, and retention periods will be confirmed before publication.
Who we are
GENEY is a delivery service operated by Creobe, the controller of the personal data described here.
Contact: to be completed with Creobe's registered address and privacy contact.
What we collect in the GENEY app and web workspaces
| Data | Why we use it |
|---|---|
| Name, email address, password (stored as a salted hash) | Create and secure your account, verify your email, recover your password |
| Pickup and drop-off addresses, recipient name and phone number | Quote, dispatch, deliver, and confirm the deliveries you request |
| Delivery charges, credit state, and manual payment proof images | Charge for deliveries and reconcile manual payments |
| Business workspace membership, role, and branch scope | Show the right deliveries, finance, and staff controls to the right people |
| Session tokens in your browser or device secure storage | Keep you signed in safely |
| Server request logs (request ID, time, route, outcome) | Security, fraud prevention, and incident investigation |
The GENEY app does not request your device location. Map, address search, and route requests are sent to our map provider (see Service providers).
What we collect in the GENEY Rider app
| Data | Why we use it |
|---|---|
| Name, email address, password (stored as a salted hash) | Secure your approved rider account |
| Availability, vehicle, and accepted offers | Dispatch and manage staff delivery assignments |
| Precise location while a delivery is active, including in the background | Route you to pickup and drop-off; let operations and authorised recipients follow the delivery |
| Delivery proof photos and one-time delivery codes | Prove each delivery was completed |
Location sharing starts when you begin an active delivery and stops when the delivery ends or you go off duty. The app does not track you outside active deliveries.
Public delivery tracking
Recipients can follow a delivery from a link without an account. The link shows delivery status, the rider's live position during the delivery, and an estimated arrival. Tracking links expire and can be revoked.
Service providers
- Map provider (LostAgain): map tiles, address search, and directions. The provider receives the network address of the device and the coordinates or addresses being queried.
- Hosting and storage: our servers, database, and private object storage.
- Email delivery: verification and password-recovery emails.
We do not sell personal data. We do not use advertising or analytics SDKs in either app.
Retention
Retention periods are configured per deployment. Proof images and rider location history are kept for a limited period after each delivery; financial and audit records are kept as required by law. Exact periods will be stated here before publication.
Your rights and account deletion
Subject to applicable law you can ask us to access, correct, export, or delete your personal data. We verify the requester before acting. Some records, such as financial and audit evidence, are retained where the law requires it.
You can delete your GENEY account yourself from the Account screen in the app or on the web. See Delete your account for the steps and what is removed.
Security
Passwords are stored as Argon2id hashes. Session tokens live in your browser's httpOnly cookies or the device's secure storage and are rotated. Data in transit uses TLS. Proof images are stored privately and served only through short-lived signed paths.
Children
The apps are intended for adults and are not directed at children under 18.
Changes
We will publish changes on this page with the effective date.