Privacy Policy

Last updated: November 4, 2026

Barbaman ("Barbaman", "we", "us") runs a mobile app that connects travelers who have spare luggage space with people who want something carried to another city or country. This policy explains what personal information we collect, why, who we share it with, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

• Account information. When you sign in with Google or Apple, we receive your name and email address (or an Apple private relay address).
• Profile details. Before you post or make a deal, we ask for your first and family name, phone number, email address and home address.
• Identity verification. To keep everyone safe, we verify identities before people post or make deals. You take photos of a government ID (passport, national ID card or driver's licence) and a live selfie. When automatic verification is used, these are processed by our identity verification provider, which checks that the document is genuine and compares your face with the ID photo (biometric face matching); we receive the result of the check. When manual verification is used, your ID photos and selfie are stored privately by us and reviewed by a Barbaman administrator.
• Posts and deals. Trip details (cities, dates, luggage space, price), package details (description, weight, deadline, budget, declared value), the name and phone number of the person receiving a package, offers and prices, messages, pickup and delivery photos, and the status of each deal.
• Payments. Payments and payouts are handled by our payment provider (Stripe). We do not see or store your full card number or bank details; we receive limited information such as payment status and amounts.
• Technical information. Basic logs needed to run and secure the service, such as the time of requests and error reports.

2. How we use it

• To provide the app: show posts, match travelers and senders, process offers and deals.
• To verify identities and prevent fraud, theft and misuse, including reviewing posts before they are published.
• To hold payments until delivery, collect our fees and pay travelers.
• To handle problem reports and disputes, and to cooperate with law enforcement when required by law.
• To contact you about your account, deals and important changes.

We do not sell your personal information, and we do not use it for third-party advertising.

3. What other users see

• Other users see your first name and the first letter of your family name (for example "Mehdi S.") on your posts and deals, along with the details of your posts.
• Your phone number, email, home address and ID are never shown to other users.
• When a sender has paid for a deal, the traveler sees the recipient's name and phone number so they can deliver the package. The delivery code is only shown to the sender.
• Both people in a deal can see its pickup and delivery photos.

4. Who we share it with

We share personal information only with service providers who help us run Barbaman, under agreements that require them to protect it:

• Supabase — database, file storage and sign-in (servers in Canada).
• Our identity verification provider (Didit) — ID document and selfie checks.
• Stripe — payments and payouts.
• Google and Apple — sign-in.
• Cloudflare — website, domain and email forwarding.

Some providers may process information outside Canada (for example in the United States or the European Union), where it may be subject to the laws of those countries. We may also disclose information when required by law, to protect the safety of users or the public, or in connection with a sale or reorganization of our business.

5. How long we keep it

We keep your information while your account is active and as long as needed for the purposes above, including resolving disputes, preventing fraud and meeting legal, tax and accounting obligations. Identity verification images are kept only as long as needed to verify you and to investigate fraud. When information is no longer needed, we delete or anonymize it.

6. Security

We protect your information with access controls, encryption in transit, private storage for ID documents and photos, and strict rules so that each person can only see what they need. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach as required by law.

7. Your choices and rights

• You can view and update your profile details in the app at any time.
• You can ask us for a copy of your personal information, ask us to correct it, or ask us to delete your account and information (subject to what we must keep by law).
• You can withdraw your consent at any time, but you may then be unable to post or make deals.

To make a request, email support@barbaman.ca. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

8. Age

Barbaman is only for people aged 18 and over. We do not knowingly collect information from anyone younger.

9. Changes

We may update this policy. If we make important changes, we'll tell you in the app or by email before they take effect.

10. Contact

Questions about privacy? Email support@barbaman.ca.