Privacy policy
How the Shiri app handles your information during the Harare pilot.
In short
- The pilot app has no Shiri servers. Your account, addresses, landing zones, cart, orders and payment methods are stored on your phone only.
- The only information that leaves your phone is the map area you look at (and your GPS position when you tap “Locate me”), which is sent to our map-imagery providers to draw the map.
- We do not use analytics, advertising or tracking SDKs, and we never sell data.
- Delete everything at any time with Settings → Delete account or by uninstalling the app.
1. Who we are
Shiri (“we”, “us”) operates the Shiri drone-delivery pilot in Harare, Zimbabwe, and publishes the Shiri app. For anything in this policy, write to hello@shiri.delivery.
2. Information stored on your phone
When you use the app it saves the following in its private storage on your device so that it is there the next time you open it. None of it is transmitted to us.
| Information | Why the app keeps it |
|---|---|
| Name, email address, mobile number and (optionally) date of birth | Your local account and profile; date of birth is only used to confirm eligibility for age-restricted items |
| Password, stored as a salted hash (never in clear) | Signing in on this phone |
| Saved addresses and landing zones (map coordinates, type of spot, delivery instructions) | Quoting and preparing deliveries to the places you chose |
| Cart, orders, receipts and order history | Checkout, tracking and “order again” |
| Payment methods: card brand, last four digits, expiry and holder name; EcoCash wallet number | Showing your saved methods. The full card number and CVV are never stored or sent anywhere |
| Preferences: language, theme, notification settings, favourites | Making the app yours |
| Notification history and the state of active orders | The ongoing delivery notification and the home-screen widget |
Verification codes shown during sign-up or password reset are generated and displayed on your phone; the pilot does not send SMS or email messages.
2a. Website launch notifications
If you use this website’s signup form, we send your email address and explicit launch-notification consent to Firebase. We store the email, consent text and version, signup and update timestamps, and a pseudonymous IP hash used to limit spam. This website signup record is separate from the app data described above and is used to notify you when Shiri delivery is ready.
You can withdraw consent and request removal of your signup record at any time by emailing contact@shiri.delivery.
3. Location
Choosing a safe landing zone is the heart of Shiri, so the app uses your device’s location in two ways:
- When you tap “Locate me” in the landing-zone picker, the app asks Android for your precise GPS position once, to centre the map on you. You can decline the permission and place the landing square by hand instead. The app never reads your location in the background.
- Map imagery. To draw the map and the satellite view, the app requests map tiles for the area on screen from Google Maps Platform and from Esri’s World Imagery service (and from Mapbox in builds where that source is enabled). Those providers receive the tile coordinates of the area you are viewing and your IP address, under their own privacy policies. They do not receive your name, contact details or order.
The landing zone you save is kept on your phone as described in section 2. When a delivery is dispatched during the pilot, the Shiri operations team receives the landing-zone position and your delivery instructions from you through the ordering process, and uses them only to fly and complete that delivery.
4. Notifications and the home-screen widget
If you allow notifications, the app shows a live delivery card (an Android foreground-service notification) while an order is active, one alert per delivery milestone, and a home-screen widget with the next arrival. These are created on your phone from your order timeline. On Android 12 and newer the app may ask for permission to schedule exact alarms so that the card updates on time; if you decline, it still works with approximate timing. You can switch every notification type off in Settings → Notifications or in Android settings.
5. Payments during the pilot
Payments in the pilot app are simulated: card details you enter are checked on the phone and reduced to brand and last four digits; nothing is charged by the app. Card and EcoCash payments are confirmed with you directly by the pilot team, and cash on delivery is paid to the team at hand-off. We never ask for your card’s CVV.
6. Third parties that receive traffic from the app
| Service | What it receives | Purpose |
|---|---|---|
| Google Maps Platform (Maps SDK for Android) | Map viewport, device and OS information, our API key | Base map on the landing-zone picker and tracking screens |
| Esri World Imagery | Tile coordinates of the viewed area, IP address | Sharper satellite view for placing the 5 m landing square |
| Mapbox (only in builds with a Mapbox token) | Tile coordinates, IP address | Optional satellite imagery source |
| Google Fonts | Font request, IP address | Downloads the app’s typefaces on first run |
| Merchants’ websites and image hosts | Image URL, IP address | Store and product photos |
| Google Play | Installation, crash and performance statistics you have agreed to share with Google | Distributing and improving the app |
We do not share, sell or rent your information to anyone else, and there are no advertising or analytics SDKs in the app.
7. Keeping and deleting your information
- Everything in section 2 stays on your phone until you remove it. Settings → Delete account erases all of it at once; uninstalling the app does the same. See how to delete your account.
- If you contact support, we keep the correspondence for up to 12 months so we can follow up, then delete it.
- Operational records of completed pilot deliveries (order contents, landing-zone position, time, payment confirmation) are kept by the pilot team for 12 months for safety investigation and accounting, then deleted or anonymised.
8. Security
All network traffic from the app uses HTTPS. Data on the phone is protected by Android’s per-app sandbox, and your password is stored only as a salted hash. Keep your phone locked and sign out on shared devices.
9. Children
Shiri is for adults. You must be 18 or older to create an account or receive a delivery, and we do not knowingly collect information from children.
10. Your rights
Under Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07] you may ask what information we hold about you, have it corrected or deleted, or object to its use. Because the pilot app stores your data on your own device, most of this is in your hands directly; for anything held by the pilot team, email hello@shiri.delivery and we will respond within 30 days.
11. Changes
We will update this page when the service changes — for example when a Shiri account service or online payments are introduced — and the app will point you to the new version. The effective date at the top tells you which version you are reading.
12. Contact
Shiri pilot team, Harare, Zimbabwe · hello@shiri.delivery · Support