Privacy Policy

LegXus ("we", "our", or "us") operates an on-campus delivery platform connecting customers with student runners. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you use the LegXus mobile app or website (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

a) Information you provide directly

• Full name and contact details (email address, phone number)
• Profile photo (optional)
• Delivery address and pickup location
• Payment information (processed securely via Paystack — we do not store card details)
• Institution and hall/residence information
• Identity documents for runner verification

b) Information collected automatically

• Location data — with your permission we collect real-time GPS location while the app is in use (runners) or while an active delivery is in progress (customers). Background location is only requested for runners with an active delivery assignment.
• Device type, operating system version, and app version
• IP address and approximate location
• Usage data: pages visited, features used, timestamps
• Push notification tokens
• Crash reports and performance diagnostics

c) Information from third parties

• Authentication data from Google Sign-In (name, email, profile photo)
• Payment status confirmations from Paystack

2. How We Use Your Information

• Create and manage your account
• Match customers with available runners and dispatch deliveries
• Display real-time order tracking maps
• Process payments and issue refunds
• Send order status updates and push notifications
• Verify runner identity and eligibility
• Provide customer support and resolve disputes
• Analyse usage trends to improve the Service
• Detect and prevent fraud, abuse, or safety incidents
• Comply with legal obligations

3. Location Data

Location permissions are requested only when needed:

• Foreground location — used by both customers and runners while the app is open, to show the map and enable delivery tracking.
• Background location — requested only from runners who accept a delivery, so the customer can track progress even when the runner switches apps. This is clearly explained at the time of the permission prompt.

You can revoke location permission at any time in your device settings. Revoking background location will limit live-tracking features while on active deliveries.

4. Sharing of Information

We do not sell your personal data. We share information only in these situations:

• Between users — a customer's first name and approximate pickup location are shared with the assigned runner, and the runner's first name and live location are shared with the customer, solely to complete the delivery.
• Service providers — trusted third parties who help operate the Service (Paystack for payments, Cloudinary for image storage, Firebase for push notifications, mapping tile providers). They are bound by confidentiality agreements.
• Legal requirements — if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — in the event of a merger or acquisition, user data may be transferred as a business asset with prior notice to users.

5. Data Retention

We retain your personal data for as long as your account is active, or as needed to provide the Service and comply with legal obligations. Order history is kept for up to 2 years for dispute resolution and auditing purposes. You may request deletion of your account and associated data at any time (see Section 7).

6. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

7. Your Rights and Choices

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete information via the in-app settings page.
• Deletion — request deletion of your account and personal data.
• Opt-out of notifications — disable push notifications in your device settings or in-app notification preferences.
• Withdraw location consent — revoke location permissions in your device settings at any time.

To exercise any of these rights, contact us at privacy@legxus.com. We will respond within 30 days.

8. Children's Privacy

The Service is intended for users who are enrolled students at a tertiary institution and are at least 16 years old. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently done so, we will delete that information promptly.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify you via email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: