Effective Date: March 10, 2026  |  Last Updated: March 10, 2026

Permissions Overview

Servease requests only the permissions necessary to provide its core features. Below is a summary of each permission and why it is needed:

1. Introduction

SKYGRID TECH ("we," "us," or "our") operates the Servease mobile application ("App") and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you use our Service.

By downloading, installing, or using the Servease App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Full name, email address, phone number, date of birth, gender, and profile photograph.
• Identity Verification Documents: Government-issued identification, licenses, or other documents submitted during provider onboarding.
• Financial Information: Bank account details (account number, account holder name, bank code) for wallet funding and withdrawal processing.
• Errand and Task Data: Details of errands you create, offers you make, descriptions, pricing, and scheduling information.
• Communications: Messages, images, and files sent through our in-app chat system.
• Ratings and Reviews: Feedback and ratings you provide about other users.
• Support Requests: Information you submit when contacting our customer support team.

2.2 Information Collected Automatically

• Device Information: Device model, operating system and version, unique device identifiers, and platform type (Android or iOS).
• Location Data: Precise GPS coordinates, location accuracy, speed, and heading — collected when you grant location permission. For providers during active errands, location is updated in real time to enable errand tracking.
• Usage Data: App crash reports and error logs collected through Firebase Crashlytics to maintain app stability and performance.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used to deliver notifications to your device.

2.3 Information from Third-Party Services

• Google Sign-In: If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account.
• Google Maps: We use Google Maps APIs to display maps, calculate routes, and geocode addresses. Google's own privacy policy governs data processed by Google Maps.

3. How We Use Your Information

We use the information we collect for the following purposes:

4. Camera and Photo Access

Servease requests access to your device camera and photo library for the following specific purposes:

• Profile Photos: To capture or select a profile picture for your account.
• Identity Verification: To photograph government-issued identification documents and other verification materials required during provider onboarding.
• Chat Attachments: To capture or select images to send within the in-app messaging system.

Images captured through the camera or selected from your photo library are uploaded securely to our cloud storage (Amazon Web Services S3) using encrypted, time-limited upload URLs. We do not access your entire photo library — only images you explicitly select or capture within the App.

5. Location Data

Location access is central to the Servease experience:

• For Customers: We use your location to help you find nearby providers, display errand locations on maps, and track the progress of active errands.
• For Providers: During active errands, your precise location is shared in real time with the customer so they can track errand progress. Location is updated approximately every 10 seconds during active tracking.
• Background Location: With your explicit permission, providers may have their location tracked in the background during active errands to ensure uninterrupted tracking even when the App is minimized.

You can revoke location permissions at any time through your device settings. However, this may limit core functionality of the App.

6. Contacts Access

If you grant contacts permission, the App may access your device contacts to help you connect with other Servease users. We do not upload or store your entire contact list on our servers without your explicit consent.

7. Biometric Data

Servease supports biometric authentication (fingerprint and Face ID) as an optional security feature for logging in. All biometric data is processed and stored locally on your device using your device's secure enclave or trusted execution environment. We never receive, transmit, or store your actual biometric data (fingerprint scans, facial geometry) on our servers.

8. Data Storage and Security

8.1 Where We Store Your Data

• Server-Side: Account data, errand records, transaction history, and chat messages are stored on our secure backend servers.
• Cloud Storage: Files such as profile photos and verification documents are stored on Amazon Web Services (AWS) S3 with access controls and encryption.
• On-Device Storage: Authentication tokens and app preferences are stored locally using encrypted storage (AES encryption). Sensitive credentials are stored in your device's secure keychain (iOS) or keystore (Android).

8.2 Security Measures

• All data transmitted between the App and our servers is encrypted using HTTPS/TLS.
• Local data on your device is encrypted using AES encryption with per-device encryption keys.
• Sensitive data such as authentication tokens are stored in platform-native secure storage (iOS Keychain / Android Keystore).
• Financial transactions require PIN verification.
• JWT-based authentication with automatic token refresh and single-device session management.
• Time-limited, pre-signed URLs for file uploads to prevent unauthorized access.

9. Third-Party Services

We integrate the following third-party services, each governed by their own privacy policies:

We recommend reviewing the privacy policies of these third-party providers for detailed information on their data practices:

• Google Privacy Policy
• AWS Privacy Policy

10. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:

• Between Users: Customers and providers can see each other's name, profile photo, ratings, and real-time location during active errands — as necessary to facilitate the service.
• Service Providers: We share data with trusted third-party services (listed in Section 9) strictly for operating the App.
• Legal Compliance: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety and Fraud Prevention: We may share information to protect the rights, safety, and property of our users, the public, or SKYGRID TECH.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

11. Data Retention

• Account Data: Retained for as long as your account is active, plus a reasonable period after deletion for legal and operational purposes.
• Transaction Records: Retained for a minimum period as required by applicable financial regulations.
• Chat Messages: Retained for the duration of the associated errand, plus a reasonable retention period for dispute resolution.
• Crash Logs: Retained for up to 90 days for debugging and stability improvements.
• Location Data: Real-time location data is used transiently during active errands and is not stored indefinitely.

12. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Data Portability: Request your data in a structured, commonly used format.
• Withdraw Consent: Revoke previously granted permissions (e.g., location, camera, contacts) at any time through your device settings.
• Opt Out of Notifications: Manage push notification preferences through your device settings or within the App.

To exercise any of these rights, please contact us using the information provided in Section 15.

13. Children's Privacy

Servease is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you through the App via push notification or in-app notice.
• Where required by law, obtain your consent before applying material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

15. Contact Us

16. Jurisdiction-Specific Provisions

For Users in Nigeria (Nigeria Data Protection Regulation — NDPR)

If you are a resident of Nigeria, you have the right to access, rectify, and delete your personal data. We process your data based on your consent and our legitimate interests in providing the Service. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data rights have been violated.

For Users in the European Economic Area (GDPR)

If you are located in the EEA, we process your personal data on the following legal bases: consent, contractual necessity, and legitimate interests. You have the right to lodge a complaint with your local data protection authority.

For Users in California (CCPA)

California residents have the right to know what personal information is collected, request its deletion, and opt out of the sale of personal information. We do not sell personal information.