Privacy Notice

Last updated April 2026.

What we collect

Identity — email, MagnusID sub, legal name (drivers only, for tax/1099).
Addresses — pickup, dropoff, your own default pickup. Coordinates at submission.
Tracking — driver GPS coordinates during an active delivery, retained 24 hours then pruned.
Proof of delivery — photo of package at pickup/dropoff, signature, age-verification photo (encrypted, regulation-specific retention).
Payment — payment method token held by QuikyPay; we never see card details.

Where it lives

In our own Postgres (not shared with a third party). Photos in our own object store. Events emitted to the Magnus central brain for ecosystem awareness — payload anonymized (no PII). Payment tokens at QuikyPay per their privacy policy.

Who sees what

Drivers see the pickup + dropoff addresses, recipient phone/email if provided, and any special instructions.
Recipients with the tracking slug see pickup/dropoff addresses and the driver's current location during transit.
Admins see the full KYC and incident queue when investigating.
The Magnus brain receives aggregate events only — "a delivery was created in NYC", not the recipient's name.

Retention

Delivery records: 7 years (tax). Tracking GPS pings: 24 hours. POD photos: 90 days standard, longer for regulated categories (Budlogic age-gated deliveries retain ID photos per state regulation, 1-5 years). Admin action logs: 3 years.

Your controls

Export your data — email privacy@quiky.app.
Delete your account — same address. Tax records stay per IRS requirements.
Opt out of marketing emails — every email has a one-click link.

Contact

Questions: privacy@quiky.app