Quiqrun's Privacy Notice

Introduction

Quiqrun ("Quiqrun", "we", "us", "our") is committed to respecting our Users' ("you", "your") privacy and safeguarding your data. This Privacy Notice ("Policy") outlines Quiqrun's approach to handling your data and your rights with regards to our collection, use, storage and sharing of your personal data which may be collected by Quiqrun in the course of providing you with our services.

This Privacy Notice outlines the types of data we collect from you, how we utilize it and your choices related to the use of your personal information. By using our platform, you acknowledge our collection, use, disclosure, and retention of your personal information as described in the Policy. If you do not agree with the terms of this Policy, we reserve the right to restrict your access to our services.

Version Control

We may make changes to this Policy from time to time and when we do, we will update the "Last Updated" date given above. We may notify you through your registered email address on the Platform of the revisions made. However, you understand that this may not always be practicable and when that occurs, you agree to waive your right to notification.

It is your responsibility to review this Policy frequently and to stay informed of all changes which may be made to it. The current version of this Policy will supersede all earlier versions from time to time. By using our services after a revision has been made to this Policy, you consent to be bound by the changes we made.

Nature of Our Services

Quiqrun is a digital platform that enables users to request on-demand errands to be completed by vetted runners called "Quiqrunners". Customers place requests through the platform, track task progress, and make payments online.

Our service to you is primarily to provide you with a platform to connect with Quiqrunners who can complete your errands.

Personal Information

"Personal Information" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a person's name, health, finances, education, business, use or receipt of governmental services or other activities, addresses, telephone numbers, identification numbers, and any other identifiers.

Information We Collect

The Personal Information that Quiqrun processes will only be collected and used if we have obtained your prior consent or have a lawful and legitimate interest to do so. The following are data collected and processed by Quiqrun:

We collect personal information about you when you use our platform. This information includes:

• Your contact information and user profile information. This includes but is not limited to your name, telephone number, address, email address, date of birth, gender, and profile photo, some of which will depend on the features you use. Some of this information as indicated in your account settings is part of your public profile page and will be publicly visible.
• Your identity verification information, including your Bank Verification Number (BVN), National Identification Number (NIN), government-issued identification documents (National ID, NIN slip, International Passport, Driver's License, or Voter's Card), and a selfie/liveness photo, used to verify the identity of runners on our platform.
• Your financial information, including bank account details for withdrawals (account number, bank code, account name) and a record of your transactions on the platform. Card and payment-instrument details are collected and stored by our payment processor (Paystack) and not by Quiqrun directly.
• Your errand content, including pickup and delivery addresses, descriptions of tasks you post, attached photos, and the messages you exchange with runners through the in-app chat.
• Your information about your computer, tablet, or other devices you use to access Quiqrun's services. This includes your connection type and settings when you access, update, or use our services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, Firebase Cloud Messaging (FCM) push notification tokens, and crash data depending on the type and settings of the device you use to access the services.
• Your information from cookies and other tracking technologies to provide functionality and to recognize you across different services and devices.

We collect personal information about you from third party sources:

• To the extent permitted by applicable laws of the Federal Republic of Nigeria, we may obtain information about you and/or your background from legal authorities if the need arises. We may use your information, including your full name and date of birth, to obtain such reports.
• To the extent permitted by applicable laws of the Federal Republic of Nigeria, we may receive additional information about you, such as references, demographic data, or information to help detect fraud and safety issues from third party service providers and/or partners. We may receive these results or fraud warnings from identity verification service providers (currently Dojah) for use in our fraud prevention and risk assessment efforts.

Location Data

Location is one of the most sensitive categories of personal data we handle, so we describe it separately.

Precise (GPS) location of runners during active errands

When a runner accepts an errand booked by a client, the Quiqrun app starts a foreground service with type "location" and continuously sends the runner's precise GPS coordinates (latitude, longitude, heading, speed, and accuracy) to our servers while that specific errand is active. The client who booked the errand can see the runner's live position on a map within the Quiqrun app for the duration of the errand.

• Who shares location: Runners only — the people fulfilling errands. Diaspora clients do not share their device location through Quiqrun.
• When: Only while a specific errand is active. The runner sees a persistent system notification that location is being shared.
• Why: To enable trusted, trackable errand fulfillment so clients can monitor real-time progress of a job they paid for.
• How it stops: Automatically, the moment the errand is marked complete, cancelled, or expired. The foreground service ends and the notification disappears.
• Background access: We request the ACCESS_BACKGROUND_LOCATION Android permission because runners often switch to Google Maps for navigation, to phone calls, or to other apps during an errand. Without background location, tracking would die every time the runner switches apps, breaking the live-tracking promise of the platform.
• Who sees the location: Our servers (hosted on Microsoft Azure) and the specific client who booked the errand. Location data is NOT shared with advertisers, data brokers, or any third party other than the cloud infrastructure providers that store it on our behalf.
• Retention: Location points associated with an errand are retained alongside that errand record for dispute resolution, fraud investigation, and compliance with Nigerian record-keeping laws.

Approximate location from addresses

When a client posts an errand, they enter pickup and delivery addresses manually. We pass these address strings to the Google Maps API for geocoding (converting an address into latitude and longitude) and map display. We do not access the client's device location to do this.

Photos and Media

Quiqrun collects the following photos and media files:

• Profile photos (optional) to display on user profiles.
• Identity-verification selfies (liveness photos) used to confirm that a runner registering on the platform is a real human and matches their identification documents.
• Government-issued ID document photos (National ID, NIN slip, International Passport, Driver's License, or Voter's Card) for runner identity verification.
• Errand proof photos uploaded by runners as evidence of task completion.
• In-chat attachments that users send each other during an errand.

All such files are stored on Microsoft Azure Blob Storage, encrypted at rest, and accessed only via short-lived signed URLs.

Voice and Video Calls

Quiqrun includes in-app peer-to-peer voice and video calling between a client and the runner who accepted their errand. Call media (audio and video streams) is encrypted in transit and routed peer-to-peer using WebRTC. We use a TURN service (Metered.live) to relay traffic when a direct peer-to-peer connection is not possible.

Calls are not recorded. We do not store audio or video content from calls. We retain only call metadata (start time, end time, duration, participants) for dispute resolution.

Advertising ID

The Google Advertising ID (AAID) on your device is read by Firebase Analytics for user-attribution and audience analytics. Quiqrun does not display advertising within the app and does not share the advertising ID with advertising networks, data brokers, or third-party marketers. The advertising identifier is used solely for first-party product analytics — understanding which features users engage with and how the platform performs.

AI-Assisted Errand Descriptions

When a user requests AI assistance to refine an errand description, the title, description, category, and locations of the errand are sent to Anthropic (operator of the Claude AI service) for processing. No payment data, no identity documents, and no photos are sent to this AI service. This processing is invoked only when a user explicitly opts in by using the AI-assist feature.

What We Do With Your Data

We use your Personal Data for the following:

• To operate our services effectively and in compliance with our Terms, guidelines, and policies
• To monitor and secure our platform for security monitoring, auditing and other security purposes
• To understand how we can improve our service offerings and products, and for administrative and other business purposes
• To conduct payments and other financial obligations
• To comply with applicable laws, exercise legal rights, and meet compliance and regulatory requirements
• To perform or enter into contractual and other obligations

Who We Share Your Data With

We share your personal data with the following third-party service providers, strictly to operate the Quiqrun platform. The use by such third parties is governed by a written contract with Quiqrun to ensure your data is protected in accordance with the Nigeria Data Protection Act and other applicable laws.

• Paystack — payment processing (Nigeria-licensed). Shared: email, name, transaction amount, errand reference, runner payout details.
• Dojah — identity verification through government database lookup (BVN, NIN). Shared: BVN, NIN, full name, and date of birth, only during the KYC verification flow.
• Google Firebase Cloud Messaging — delivery of push notifications. Shared: FCM device token and notification payloads.
• Google Firebase Analytics — product analytics. Shared: user ID, screen views, event names, device model/OS, and the Google Advertising ID for analytics only (see "Advertising ID" section above).
• Resend — delivery of transactional emails (verification, password reset, support replies). Shared: email address and message content.
• Google Maps — geocoding addresses and displaying maps. Shared: address strings and latitude/longitude coordinates.
• Metered.live — WebRTC TURN relay for voice and video calls when direct peer-to-peer is not possible. Shared: encrypted call media in transit (we do not record calls; Metered.live does not store call content).
• Anthropic (Claude AI) — optional AI-assisted refinement of errand descriptions. Shared: only the errand title, description, category, and locations entered by the user; no identity documents, payment data, or photos are sent.
• Microsoft Azure — application hosting, database, and file (blob) storage for our backend services. Shared: all operational data, encrypted at rest.
• Regulatory Bodies and Law Enforcement: we may disclose your data to regulatory bodies and government authorities if required under applicable law or to meet law-enforcement requirements.

We do not sell your personal information. We do not share your data with advertisers. We do not use third-party analytics SDKs to track your behaviour across other apps.

Data Retention

All personal data shall be retained, stored and destroyed by Quiqrun in line with the relevant Legislative and Regulatory Guidelines of the Federal Republic of Nigeria.

• We shall regularly review the data retained to confirm the accuracy, purpose, validity and requirement to retain.
• We shall regularly audit the data retained to ensure that it is only stored in alignment with our retention policy.

The length of storage of Personal Data shall be determined by:

• The length that the data is needed for, the purpose for which it was obtained
• The statutory implication or a required retention period of the piece of data
• An express request for deletion by you for any reason
• Whether Quiqrun has a lawful basis for retaining your data beyond the period for which it is necessary to serve the original purpose

Pursuant to the NDPR, we shall be entitled to retain and process Personal Data for archiving, research or statistical purposes for public interest.

We will delete your Personal Data where such Personal Data is no longer required by Quiqrun or in line with our Retention Policy.

Data Protection

We will ensure that your personal data that we retain is protected in compliance with the NDPR, the Nigerian Data Protection Act requirements and other data protection laws, and data protection policies in Nigeria.

We will ensure that appropriate measures are employed against unauthorized access, accidental loss, damage and destruction to data. This includes the use of password-encrypted databases for digital storage.

We will ensure that Quiqrun undertakes the necessary Risk assessments to curb potential risks in our data processing operations.

Your Rights

• You may at any time request for access to your personal data held by Quiqrun or request that your personal data be made available to a third party. Where data is held electronically in a structured form, you have a right to receive that data in a common electronic format.
• You may request to update or modify your personal data with Quiqrun if the data held about you is inaccurate.
• You may elect to withdraw your consent for Quiqrun's collection and storage of your data at any time. Such withdrawal however would prevent us from providing services to you. Your right to withdraw consent extends to objecting or restricting the processing of your personal data by Quiqrun.
• You may request that your personal data be deleted. We may continue to retain such personal data as may be required for compliance with legal, regulatory or policy requirements.
• You have the right to obtain restrictions on the processing of your data.

Contact Us

For questions or complaints about this Privacy Notice please contact us at info@quiqrun.com