1. Who we are
Ooba is a water delivery service operated by Ghoncha Online Services Company, Kabul, Afghanistan. When this policy says "we", "us" or "Ooba", it means that company. We are the party responsible for the personal information described here.
This policy applies to four products:
- the Ooba customer app for Android and iPhone;
- the Ooba Driver app for Android and iPhone;
- the Ooba Provider Portal at
ooba.delivery/portal, used by water supplier businesses; and - this website,
ooba.delivery.
Different parts of this policy apply to you depending on whether you are a customer, a delivery driver, or a member of staff at a water provider. Section 3 is split by role.
2. In short
The full policy below governs. This summary is here so you do not have to read all of it to understand the important parts.
- We do not sell your personal information, and we do not share it for advertising or profiling.
- There is no advertising, analytics or tracking software in any Ooba app. No Google Analytics, no Firebase Analytics, no Crashlytics, no Facebook SDK, no attribution or session-replay tools. We do not collect an advertising ID or a device fingerprint.
- We never see your card details. Card payments happen on the payment provider's own page. No card number reaches, or is stored on, any Ooba system.
- The customer app does not track you in the background. It reads your location only when you ask it to set an address or find nearby providers.
- The Driver app does track location continuously — but only while a driver is on shift. See section 7, which explains exactly when, how often, and for how long.
- This page loads nothing from anyone else. No third-party fonts, scripts, CDNs or trackers, and it sets no cookies.
3. What we collect
Choose your role to see what applies to you. All three are shown if you prefer to read everything.
If you order water from Ooba
- What
- Full name, phone number and its country code, email address, the language you chose, your country, and a password (stored only as a bcrypt hash — we cannot read it).
- Why
- To create your account, sign you in, and let a driver reach you about a delivery.
- Kept
- Until you delete your account.
- What
- For each address you save: a label, the full address text, city, district, country, the exact map coordinates, and — where you provide them — building, floor, apartment number, and free-text delivery notes.
- Why
- To deliver to the right door, to work out which providers cover you, and to calculate delivery fees.
- Seen by
- The driver assigned to your order, and staff at the provider fulfilling it.
- What
- A single position reading, taken at the moment you use it.
- When
- Only when you tap the location button while adding or editing an address, when you use the location control on the map picker, or when you open the home screen having already granted permission and not yet chosen a delivery location. The app never tracks you in the background and never records a trail of your movements.
- Why
- To fill in your address and to show providers who deliver to you.
- What
- What you ordered and how much of it, prices, delivery fee, tax, discounts, tips, payment method and status, the delivery address and its coordinates, the delivery window, any special instructions you typed, returnable container counts, and the times each stage of the order happened. For recurring plans: how often, which days or dates you picked, vacation holds and skipped deliveries.
- Why
- To fulfil, bill and support your orders, and to keep the business records we are required to keep.
- Kept
- Retained as a financial record after account deletion, with your identifying details removed (section 9).
- What
- The payment provider's name and transaction reference, the amount and currency, the status, and your Ooba wallet balance and its transaction ledger.
- What we never hold
- Card numbers, CVV codes, expiry dates, cardholder names, bank account or IBAN details. There is no field for any of these anywhere in our systems. When you pay by card, you enter those details on the payment provider's own page inside the app.
- What
- Bottles delivered and collected, recorded per address, with the reason for any shortfall and any note the driver added. Your points balance and points history. Your referral code and, if you were referred, who referred you.
- Why
- To track deposits you are owed and rewards you have earned.
- What
- Star ratings, review text, any photo you attach, and a separate rating you may give the driver. Messages you send in the app to a provider, a driver, or support — stored as ordinary text.
- Note
- Reviews are public by default. Chat messages are not encrypted end-to-end: our administrators can read support conversations, and we can technically access message content stored on our servers.
- What
- A push token identifying your device, your per-channel notification preferences, and a history of the notifications we sent you.
- Note
- When you allow notifications, your device registers with Apple's or Google's push service, and that company receives a device registration. Signing out clears the token so a device stops receiving the previous account's notifications.
- What
- If no provider serves your area and you ask to be notified, we record your coordinates, city, country, a phone number and any note you wrote.
- Why
- To tell you when we start delivering there, and to decide where to expand.
- What
- Our servers record, for every request, the connecting IP address, the device or browser identification string, the address requested, the response status and how long it took.
- Why
- To operate the service, investigate faults and detect abuse.
- Kept
- Web server access logs about 10 days; application logs up to about one month.
If you deliver for Ooba
Driver accounts are created for you by an Ooba administrator or by the water provider you work with — there is no driver self sign-up. In addition to the account details above, we collect the following.
- What
- Your position, speed and direction of travel, the order you are currently delivering (if any), and the time of each reading.
- How often
- Roughly every 8 seconds.
- When
- Whenever your status is online or delivering — including when you are online with no delivery assigned. It is not limited to active deliveries. If you were online when you last closed the app, it resumes automatically the next time you open it.
- When not
- It stops when you go offline, take a break, sign out, or withdraw location permission. Android shows a permanent notification while it is running; iPhone shows the system location indicator.
- Kept
- In short-term memory only. Going offline removes your last known position, and the accompanying detail expires after 10 minutes; if the app closes without going offline properly, that last position can remain until it is replaced. We do not store a history of your movements in our database.
- Seen by
- Ooba dispatch staff, and the customer of the order you are currently delivering — only for that order, and only while it is in progress.
- What
- An optional photo taken at the door, an optional signature drawn on screen, the name you type for the person who received the delivery, your notes, container counts, any shortfall reason, and cash collected.
- Why
- To prove delivery, resolve disputes and reconcile cash.
- Note
- Photos are stored on our servers. Please photograph the delivery, not people.
- What
- Vehicle type and number plate, your city and country, your status, your average customer rating, your delivery count, and whether your account is verified and active. Your earnings ledger, tips, and the cash you have collected and reconciled.
- What we do not collect
- We do not collect or store driving licences, national identity documents, passports, insurance papers or background checks. There is no upload for any of these in the Driver app.
- What
- For each of your assignments you can see the customer's name, phone number, address and delivery instructions, and you can call them from the app.
- Your obligation
- This information is given to you only to complete that delivery. Do not save it, share it, or contact the customer for any other reason. Misuse can end your access to the platform.
If you supply water through Ooba
A provider is a business. Its portal account is held by a named person at that business.
- What
- Business name and description, street address and map coordinates, contact phone, logo, service radius, and your service-area boundaries. Your water-quality panel: water source, pH, TDS, a link to a lab report, and certification records.
- What we do not collect
- We do not store bank account, IBAN, tax identification, trade licence or company registration details. Settlement figures are calculated from your orders when you ask for them; there is no stored payout or banking record.
- What
- Name, email address, phone number and a password (stored as a bcrypt hash), linked to the business you manage.
- Sessions
- The portal uses first-party session and security cookies. It signs you out after about 15 minutes of an expired session.
- Customers
- For orders your business is fulfilling: the customer's name, a partially masked phone number, the delivery address, order contents and instructions. Reviews of your products, with the reviewer's display name and any photo. Container pickup requests, which include contact and address details.
- Drivers
- For drivers attached to your business: name, phone number, email, vehicle and plate, status, rating and delivery count. You can create, verify and suspend your own drivers.
- What you cannot see
- Live driver GPS, driver earnings or payouts, cash reconciliation records, customer support conversations, customer–driver chat, and any customer or order belonging to another provider.
- Your obligation
- Use this information only to fulfil and support the orders your business receives.
4. Why we use your information
| Purpose | Information used |
|---|---|
| Creating and securing your account | Name, phone, email, password hash, one-time codes |
| Taking and delivering an order | Address and coordinates, order contents, instructions, phone number, driver location |
| Taking payment and running the wallet | Amounts, payment references, wallet ledger |
| Telling you what is happening with your order | Phone number, push token, notification preferences |
| Support and dispute resolution | Order and delivery records, proof of delivery, chat messages |
| Container deposits, loyalty and referrals | Bottle ledger, points ledger, referral code |
| Deciding where to start delivering | Coverage requests, order geography |
| Keeping the service safe and working | Technical logs, IP address, rate-limit counters |
| Meeting legal and accounting obligations | Order, payment and settlement records |
We do not use your information to build advertising profiles, and we do not make automated decisions that produce legal effects for you.
6. Who can see what about you
If you are a customer, this is who inside the Ooba system can see your details.
| Your driver | Your provider | Ooba staff | |
|---|---|---|---|
| Your name | Yes, for their delivery | Yes, for their orders | Yes |
| Your phone number | Yes, in full, to call you | Partly hidden | Yes, in full |
| Your delivery address | Yes, for their delivery | Yes, for their orders | Yes |
| Your order contents | Yes | Yes | Yes |
| Your chat with support | No | No | Yes |
| Your wallet and payments | No | No | Yes |
| Your password | No | No | No — stored only as an unreadable hash |
Ooba administrators are limited to the country they are responsible for. Privileged actions taken by staff and providers — such as refunds, wallet credits and account changes — are recorded in an internal log.
7. Location
Location is the most sensitive information we handle, so it gets its own section.
If you are a customer
The customer app reads your device location only at the moments listed in section 3: when you use the location button to set an address, when you use the map picker, or when you open the home screen having already granted permission and not yet chosen a delivery location. Each of those is a single reading. There is no background location collection and no movement history. The coordinates of addresses you save are stored with the address so we can deliver to it.
You can withdraw location permission at any time in your phone's settings. The app still works — you type your address instead.
If you are a driver
The Driver app collects your location continuously while you are on shift. Precisely:
- It sends your position, speed and heading approximately every 8 seconds.
- It runs whenever your status is online or delivering. It does not wait for an assignment — an online driver with no delivery is still sending position.
- It runs while the app is in the background. On Android a permanent notification is shown for as long as it runs; on iPhone the system location indicator is shown.
- It stops when you go offline, take a break, sign out, or remove location permission.
- If your status was still online when the app was last closed, it starts again by itself when you next open the app.
Separately from shift tracking, opening the Route screen takes a single position reading and sends it with your remaining stops so the app can order them efficiently. This happens whenever you open that screen, including while you are offline.
Your live position is held only in short-term memory to dispatch work and to show the customer where their delivery is. Going offline removes it, and the accompanying detail expires after 10 minutes. If the app is closed or loses connection without going offline properly, your last known position can remain until it is replaced or removed. We do not build or keep a history of a driver's movements.
In plain terms: being online means being tracked. Going offline stops it. There is no record kept of where you drove.
8. How long we keep information
| Information | Kept for |
|---|---|
| Account details | Until you delete your account |
| Orders, payments, wallet and container ledgers | Retained as business and accounting records after account deletion, with identifying details removed |
| Saved addresses, chat messages, review text and photos, notification history | Until you delete your account, at which point they are erased or emptied |
| Driver live position | Removed when the driver goes offline; supporting detail expires after 10 minutes |
| Proof-of-delivery photos and signatures | Kept with the delivery record |
| One-time sign-in codes | Valid for 5 minutes; the record is deleted when the account is deleted |
| Web server access logs | About 10 days |
| Application logs | Up to about one month |
| Database backups | 30 days, then automatically deleted |
| Internal records of privileged staff actions | Retained as an accountability record |
Where information is retained as a business record after deletion, it is no longer connected to a name, phone number or email address.
9. Deleting your account
You can delete your Ooba account yourself, in the app: open Profile and choose Delete account. It takes effect immediately. You can also ask us to do it by writing to privacy@ooba.delivery — we will act within 30 days.
What deletion removes
- Your name, email address and phone number.
- Your password, so the old credential can never be used again.
- Your profile photo, including the image file itself.
- Every saved address: the address text, the coordinates, the building, floor, apartment and any delivery notes.
- The text of the chat messages you sent.
- Your review text and any review photos.
- Your notification history and your push tokens.
- Any coverage request you submitted, and the free-text instructions on your past orders.
- Your referral code and your one-time sign-in code history.
What deletion keeps, and why
The record of your orders, payments, wallet movements and container deposits is kept, because a business must be able to account for the money it has taken and the goods it has delivered. These records stay linked only to an identifier that no longer names anyone: the name, phone number and email are gone, so the transaction history can no longer be traced back to you through our systems.
Your active sessions stop working within 15 minutes and cannot be renewed. Deleting your account frees your phone number and email address, so you can sign up again later if you want to.
Drivers and providers: the Driver app and the Provider Portal do not have a self-service delete button, because those accounts are tied to work records, earnings and cash reconciliation. Write to privacy@ooba.delivery and we will handle it.
10. Your choices
- See and correct your details. Your name, email and language are editable in the app under Profile. For anything else, ask us.
- Get a copy of your information. Write to privacy@ooba.delivery and we will send you what we hold about you.
- Delete your account. See section 9.
- Choose which messages you get. The customer app has separate switches for order updates, promotions and subscription reminders, each for push and SMS.
- Turn off location or notifications. Use your phone's own settings. The customer app works without location permission.
- Complain. If you think we have handled your information badly, write to privacy@ooba.delivery. Tell us what happened and we will investigate and reply.
11. How we protect it
- All traffic between your device and Ooba is encrypted with HTTPS. Plain unencrypted connections are refused.
- All four Ooba apps pin our certificate, so they refuse to talk to anything impersonating our servers — this defeats the usual interception attacks on public Wi-Fi.
- Passwords are stored only as bcrypt hashes. Nobody at Ooba can read your password.
- Sign-in codes are six digits, expire after 5 minutes, are limited to five per hour, and lock out after five wrong attempts.
- Sign-in sessions are short-lived and are refused for deactivated accounts.
- Session tokens are stored encrypted on your device — in the Android keystore, or in the iPhone keychain.
- Our databases and internal services are not exposed to the public internet; firewall rules restrict which connections can reach them.
- Access is restricted by role, and records are checked for ownership: you can only read your own orders, a driver only their own assignments, a provider only their own business.
- Requests are rate-limited to blunt automated attacks, and the portal is protected against cross-site request forgery.
- Databases are backed up nightly and backups are deleted after 30 days.
We do not claim that stored data is encrypted at rest; it is protected by network isolation, access control and operating system permissions instead. No system is perfectly secure, and we do not promise that ours is.
12. Where your information is stored
Ooba runs on servers rented from Contabo GmbH, a hosting company based in Munich, Germany, and your information is stored there. If you use Ooba in Afghanistan or anywhere else outside Germany, your personal information is transferred to and processed in Germany.
Some of the companies in section 5 may process the limited information they receive in other countries.
13. Children
Ooba is meant for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. We do not ask for your age or date of birth, so we cannot verify it — if you believe a child has given us personal information, write to privacy@ooba.delivery and we will delete it.
14. Cookies and this website
The Ooba apps do not use cookies.
This page uses none either. It loads no fonts, scripts, images or styles from any other company, and it sets no cookies. Nobody is told that you read it.
The Provider Portal uses a small number of strictly necessary first-party cookies: one holding your signed-in session, one protecting forms against cross-site request forgery, one remembering the country you are working in, and one carrying a status message for a few seconds. There are no advertising or analytics cookies.
Our main website at ooba.delivery loads a font from Google Fonts, which means Google receives the IP address of visitors to that page. It sets no cookies of its own.
15. Changes to this policy
If we change this policy we will update the effective date at the top and raise the version number. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.
16. Contact us
Ghoncha Online Services Company, Kabul, Afghanistan.