Kolis Privacy Policy

Last updated: June 15, 2026

Kolis is a parcel-delivery service operated by Concord Express Inc. (“Kolis”, “we”, “us”). This policy explains what we collect, how we use it, and your choices. It covers the Kolis mobile app and our web portals (business.kolis.ca, admin.kolis.ca).

Information we collect

• Account: name, email address, phone number, role (sender/courier), and language preference.
• Identity verification: to verify couriers and members we use Stripe Identity, which collects a government-issued ID and a selfie. We receive a verified name and verification status; the ID images are processed by Stripe, not stored by us.
• Payments: processed by Stripe. We do not store full card numbers; we receive payment status and limited card metadata.
• Delivery data: pickup and drop-off addresses, parcel details, and delivery status. Couriers carrying your parcel see the information needed to complete the delivery.
• Location: addresses you enter, and—where you grant permission—device location used to match and route deliveries.
• Device & notifications: a push-notification token and basic device information so we can send delivery alerts.
• Usage: app activity and diagnostics used to operate and improve the service.

How we use it

• Create and manage your account and verify your identity.
• Match parcels with couriers, route deliveries, and show tracking.
• Process the verification fee and any delivery charges.
• Send delivery requests and status notifications.
• Provide support, prevent fraud and abuse, and meet legal obligations.

How we share it

We share data only as needed to run the service: with couriers and queue drivers (delivery details for the parcel they carry), and with service providers who act on our behalf—Stripe (identity & payments), Supabase (hosting/database), Google Maps (mapping/geocoding), and our push-notification and email providers. We do not sell your personal information. We may disclose information when required by law.

Data retention

We keep your information for as long as your account is active and as needed to provide the service or comply with legal, tax, and fraud-prevention requirements. You can delete your account in the app (Profile → Delete account), after which we remove or de-identify your personal data except where retention is legally required.

Security

We use encryption in transit, access controls, and reputable processors (Stripe, Supabase). No method of transmission or storage is completely secure, but we work to protect your information.

Your choices & rights

• Access & deletion: view your profile in the app and delete your account at any time.
• Notifications: turn off push notifications in your device settings.
• Location: grant or revoke location permission in your device settings.
• Depending on your region, you may have rights to access, correct, or delete your data—contact us to exercise them.

Children

Kolis is intended for users 18 and older. We do not knowingly collect data from children.

Changes

We may update this policy and will revise the date above. Material changes will be communicated in the app or by email.

Contact

Concord Express Inc. — privacy@kolis.ca · www.concordexpress.ca