AkiAki Privacy Policy
This Privacy Policy explains how AkiAki LLC ("AkiAki," "we," "us") collects, uses, shares, and protects personal information when you use the AkiAki website (akiaki.io), the AkiAki app (app.akiaki.io and app-store versions), and related services (together, the "Platform"). It is part of our Terms of Use.
The short version. AkiAki connects people who need something with neighbors who are already nearby. To do that we need to know who you are, where you are, and how to pay you or charge you. We collect what the Platform needs to work, we do not sell your personal information, and we do not use it for cross-context behavioral advertising. AKiers see a Customer's name, delivery location, and messages only for the order they accepted. Customers see an AKier's first name, photo, rating, and live location only while that AKier is checked in nearby or working their order.
1. Information we collect
Information you give us
- Account: name, mobile number, email address, profile photo, password or sign-in provider (via Auth0, including Google or Facebook sign-in if you choose it).
- AKier onboarding: date of birth, government-issued ID image, vehicle information, bank account details (collected directly by Stripe), tax information where required.
- Requests and orders: what you ask for, the store, the delivery address or meeting point, notes, substitutions, tips, and cancellation reasons.
- Photos: receipt photos and drop-off photos uploaded by AKiers; profile photos.
- Messages: chat between Customer and AKier inside an order; messages to support.
- Ratings and reviews.
- Payment method: your card details are entered directly into Stripe's secure fields. AkiAki receives only a token, the card brand, and the last four digits.
Information collected automatically
- Precise location. Customers: when you open the app, to show nearby AKiers and set your delivery point. AKiers: repeatedly (about every five seconds) while you are checked in or roaming and the app is open, so Customers can see who is nearby and track their order. We do not track location in the background when the app is closed. Location history for an order is retained with the order record.
- Device and usage: device type, operating system, browser, IP address, app version, pages and screens viewed, taps, errors, and timing, collected through Microsoft Azure Application Insights and Google Analytics.
- Cookies and similar technology: on the website and app for sign-in, security, preferences, and analytics. See Section 7.
- Push notification tokens if you enable notifications.
Information from others
- Stripe: identity-verification status, payout status, and fraud signals for AKiers; payment success or failure for Customers.
- Auth0 and sign-in providers: the name, email, and profile picture from the account you sign in with.
- Google Places and Azure Maps: business names, addresses, and photos for stores you choose (this is information about places, not about you).
We do not collect Social Security numbers except where Stripe requires them for AKier tax reporting, and then only Stripe collects and stores them.
2. How we use information
We use personal information to:
- create and secure your account and verify your phone number and identity;
- match requests with nearby AKiers, show live locations during an order, and enable chat;
- process authorizations, charges, reimbursements, payouts, commissions, and tips;
- keep records of each order (receipt, photos, timeline, location, chat) to resolve disputes, respond to chargebacks, and detect fraud;
- enforce the Terms of Use and Community Guidelines, including investigating safety reports and managing deactivations and appeals;
- send transactional texts, emails, and push notifications about your account and orders;
- send marketing email you can opt out of;
- provide support;
- measure, debug, and improve the Platform;
- comply with law, tax, and regulatory obligations and respond to lawful requests; and
- protect the rights, property, and safety of AkiAki, our users, and the public.
We do not use your personal information to make decisions with legal or similarly significant effects by fully automated means, except that ratings and completion-rate thresholds described in the Community Guidelines can affect AKier access, and an AKier may appeal.
3. How we share information
With other users, to complete an order. A Customer sees an AKier's first name, profile photo, rating, delivery fee, and live location while checked in nearby or working the Customer's order. An AKier sees the Customer's first name, delivery address or meeting point, request details, and messages for that order only. Both see the receipt total. Users agree under the Terms not to use this information for any other purpose.
With service providers who work for us, under contracts that limit their use of the information: Stripe (payments, payouts, identity verification), Auth0 (sign-in), Microsoft Azure (hosting, database, file storage, maps, telemetry), Google (analytics, maps and places), Twilio (text verification codes), SendGrid and Zoho (email), Netlify (website hosting), and app-store platforms.
For legal reasons: to comply with law, subpoena, or court order; to enforce our Terms; to respond to a chargeback or dispute; or to protect the rights, property, or safety of AkiAki, our users, or others, including sharing with law enforcement where we believe a crime or safety threat is involved.
Business transfers: if AkiAki is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.
With your direction: when you ask us to share something, for example by posting a public review.
Aggregated or de-identified data that cannot reasonably identify you may be shared for any purpose.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in California law. We have not done so in the preceding 12 months.
4. How long we keep information
| Information | Retention |
|---|---|
| Account profile | While your account is active, then up to 90 days after deletion request unless a longer period is required below |
| Order records (request, receipt and drop-off photos, timeline, location trail, chat, charges) | 7 years, for tax, dispute, and chargeback purposes |
| AKier ID image and date of birth | While you are an active AKier plus 3 years, or as long as required by law or by Stripe |
| Messages to support | 3 years |
| Analytics and telemetry | Up to 26 months, then aggregated |
| Safety, fraud, and deactivation records | As long as needed to keep the Platform safe, including to prevent a deactivated user from re-registering |
We may keep information longer when required by law or to resolve a dispute.
5. Your choices
- Location: you can disable location in your device or browser settings, but most of the Platform will not work without it.
- Notifications: turn push notifications off in the app or your device. Reply STOP to opt out of non-essential texts. Use the unsubscribe link for marketing email. You will still receive verification codes and essential order messages while you have an account.
- Profile: edit your name, photo, and contact details in Settings.
- Delete your account: email support@akiaki.io from the email on your account, or use the delete option in Settings where available. We will delete or de-identify your profile within 30 days, subject to the retention periods above.
- Analytics: you can block Google Analytics with a browser extension or by disabling cookies. We honor Global Privacy Control signals as described in Section 6.
6. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA") may give you the following rights, subject to legal exceptions. Whether or not the CCPA applies to AkiAki at any given time, we will honor these requests for California residents.
- Right to know what personal information we collect, use, share, and why, and to receive a copy of the specific pieces of information we hold about you.
- Right to delete personal information we collected from you.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising. If that ever changes, we will provide a "Do Not Sell or Share My Personal Information" link before doing so.
- Right to limit use of sensitive personal information. We use sensitive information (precise location, government ID, account credentials) only to provide the Platform and for the purposes permitted by the CCPA, so no limitation request is needed.
- Right to non-discrimination for exercising your rights.
How to submit a request. Email privacy@akiaki.io or write to the address in Section 11, with "California Privacy Request" in the subject, the email and mobile number on your account, and what you are asking for. Only you, or someone legally authorized to act for you, may make a request. We will verify your identity by confirming a code sent to the mobile number or email on your account and, for sensitive requests, may ask you to confirm name, date of birth, phone, or address. A request made from inside your password-protected account is treated as verified for that account. You may use an authorized agent; we require written, signed authorization (or a notarized authorization or power of attorney) and may still verify your identity directly. A parent or guardian may make a request for a child with government ID and proof of guardianship. You may make a request to know up to twice in any 12-month period.
Timing and format. We will confirm receipt within 10 business days and respond substantively within 45 days, which we may extend once by up to 45 days with notice. We deliver responses to your account or, if you have none, by mail or email as you choose. Disclosures cover the 12 months before your request. Data-portability responses are provided in CSV or another readily usable format. We do not charge for requests unless they are excessive, repetitive, or manifestly unfounded, and if we believe a fee is warranted we will explain why and give you an estimate first. If we deny a deletion request under a legal exception (for example, to complete a transaction, detect fraud or security incidents, debug, comply with a legal obligation, or for internal uses reasonably aligned with your expectations), we will tell you which exception applies.
Financial incentives. We do not currently offer any financial-incentive program in exchange for personal information.
Accessibility. If you need this Policy in an alternative format because of a disability, contact privacy@akiaki.io.
Global Privacy Control. We treat a Global Privacy Control browser signal as a request to opt out of sale or sharing for that browser. Because we do not sell or share, the practical effect today is that we will not load third-party analytics for that browser.
Categories of personal information (as defined in Cal. Civ. Code § 1798.140) collected in the preceding 12 months, with the categories of recipients for a business purpose. We have not sold or shared any category.
| Category | Examples we collect | Collected | Disclosed for a business purpose to |
|---|---|---|---|
| A. Identifiers | Name, phone, email, IP address, account and device IDs | Yes | Stripe, Auth0, Microsoft Azure, Google, Twilio, SendGrid, Zoho |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Name, phone, address, payment token, bank account (AKiers, via Stripe), driver's license image (AKiers) | Yes | Stripe, Microsoft Azure |
| C. Protected classifications | Date of birth (AKiers, for age eligibility only) | Yes | Stripe |
| D. Commercial information | Orders, receipts, tips, fees, credits | Yes | Stripe, Microsoft Azure |
| E. Biometric information | — | No | — |
| F. Internet or network activity | Pages and screens viewed, taps, errors, browser and device data | Yes | Microsoft Azure, Google |
| G. Precise geolocation | Device location while the app is open; AKier location trail during an order | Yes | Microsoft Azure; other Users for the order |
| H. Audio, electronic, or visual information | Profile, receipt, and drop-off photos; chat messages | Yes | Microsoft Azure; other Users for the order |
| I. Professional or employment information | Vehicle information (AKiers) | Yes | — |
| J. Non-public education information | — | No | — |
| K. Inferences | Ratings, completion rate | Yes | Other Users (rating only) |
| L. Sensitive personal information | Precise geolocation, government ID, account log-in credentials, bank account (via Stripe) | Yes | Stripe, Auth0, Microsoft Azure |
Sources: directly from you (forms, uploads, messages), automatically from your device and use of the Platform, and from Stripe, Auth0, and sign-in providers. Purposes are described in Section 2.
Notice at collection for AKiers. Information collected during AKier onboarding is used to verify identity and eligibility, process payouts, meet tax obligations, and keep the Platform safe. It is shared with Stripe for those purposes and retained as described in Section 4.
7. Cookies and analytics
The website and app use first-party cookies and local storage for sign-in sessions, security, and preferences, and third-party analytics (Google Analytics and Azure Application Insights) to understand how the Platform is used and to find bugs. Analytics data includes device, browser, pages viewed, and approximate location derived from IP. You can control cookies in your browser; blocking essential cookies will prevent sign-in. We do not use advertising cookies or pixels.
8. Security
We use industry-standard measures including encryption in transit (TLS), encrypted storage, access controls, private storage for photos and ID images, and monitoring. Card and bank details are handled by Stripe, a PCI DSS Level 1 provider, and never touch our servers in full. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law. Report security concerns to security@akiaki.io.
9. Children
The Platform is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. Contact privacy@akiaki.io if you believe a minor has provided us information.
10. Changes to this Policy
We may update this Policy. We will post the new version with a new date and, for material changes, notify you in the app or by email before the change takes effect. Continued use after the effective date is acceptance.
11. Contact
AkiAki LLC [MAILING ADDRESS] privacy@akiaki.io support@akiaki.io