Privacy Policy

1. Scope

This Privacy Policy applies to the CABA Android and iOS applications, the CABA web application, cabapp.app, and related CABA services (together, the “Services”). CABA connects travelers, senders, sellers and buyers who coordinate trips, deliveries and product listings.

2. Information we handle

• Account information: email address, authentication provider, Firebase user identifier and account status. When you use Google sign-in, Google provides the account information required to authenticate you.
• Profile information: first and last name, profile photo, WhatsApp or telephone number, preferred language and profile update information.
• Listings and trip information: departure, destination, travel date, airline, transport method, available weight, price, country, product details, photos, descriptions and other information you choose to publish.
• Communications: chat messages, shared photos, voice messages, delivery context, read status and message timestamps.
• Trust and support information: ratings, reports, feedback, support requests, relevant reported content and administrative decisions.
• Device and usage information: notification token, app language, app version, device platform, basic diagnostic information, advertising identifiers where permitted, and security signals used to prevent abuse.
• Location and place information: locations you search for or select for routes and listings. Device location is accessed only when you use a feature that requests it and grant the required permission.
• Web information: browser storage, session information, service-worker data and similar technologies required for sign-in, preferences and web notifications.

3. How we use information

We use information to authenticate users; create and maintain profiles; publish and match listings; provide chat, images and voice messages; deliver push notifications; show relevant advertising; provide support; investigate reports; prevent fraud and abuse; enforce our rules; comply with law; and improve the reliability, safety and usability of CABA.

4. Public and shared content

Information you publish in a listing may be visible to signed-in CABA users. This can include your name, profile photo, WhatsApp number, route, listing details, prices, descriptions and uploaded photos. Chat content is shared with conversation participants. Authorized CABA administrators may access relevant records when necessary for support, safety reviews, abuse prevention or legal compliance.

Do not publish confidential information, payment credentials, identity documents or content you do not want other permitted users to see.

5. Service providers and disclosures

CABA uses service providers to operate the Services, including Google Firebase for authentication, databases, file storage, notifications, security and hosting; Google Places for place search; and Google AdMob or related Google services for advertising. These providers process information under their own terms and privacy policies.

We may disclose information when required by law, to protect users or the public, to investigate abuse, or as part of a business reorganization with appropriate safeguards. We do not sell personal information.

6. Retention and security

We keep information as needed to provide the Services. In the mobile app, Settings > Permanently delete account initiates removal of your login, profile, listings, conversations involving your account, uploaded photos and audio, and support records. Access closes immediately while retryable server cleanup completes. A technical deletion receipt, without your profile or message content, prevents old sessions from accessing the account. It expires 24 hours after cleanup completes and is removed by an hourly cleanup job, subject to service availability. Backup copies may remain until the backup retention period expires. Clearing chat history instead removes existing messages from your view only; it does not erase the other participant's records.

We use access controls, authenticated Firebase services, security rules and encryption in transit. No online service can guarantee absolute security, so users should protect their credentials and report suspicious activity promptly.

7. Your choices and rights

• You can update profile and listing information through CABA where editing is available.
• You can disable notifications through the app, browser or device settings.
• You can control location, camera, microphone and photo permissions through device settings.
• You may initiate permanent account deletion in the mobile app's Settings. A recent sign-in and explicit confirmation are required. For access, correction or other privacy requests, contact CABA using the address below. We may verify your identity before completing a request.
• Depending on your location, you may have additional rights to restrict or object to processing or receive a portable copy of certain information.

8. Children's privacy

CABA is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.

9. Changes to this policy

We may update this policy when CABA features, providers or legal requirements change. The effective date at the top of this page identifies the latest version. Material changes may also be announced in the app or through another appropriate channel.

10. Contact CABA