Privacy policy

We collect information you provide or generate while using Tokosss:

• Phone number, name, username, profile photo, and profile details.
• Approximate or submitted location used to suggest delivery and pickup options.
• For an approved transporteur, explicitly going On duty opens an active delivery shift/run and starts foreground or background location collection. The shift/run may be waiting for its first parcel assignment so Tokosss has a fresh position for dispatch. Readings include location, accuracy, capture and receipt times, movement information, and technical integrity signals. Tracking stops when the transporteur goes Off duty, the shift/run closes, permission is revoked, the user signs out, or the account is suspended.
• Listings, photos, posts, stories, comments, reviews, messages, reports, and support requests.
• Chat delivery and visible-read cursors used to show Sent, Delivered, and Seen status, together with your read-receipt preference.
• When content is reported, a restricted evidence snapshot of the reported text and relevant media references or metadata, together with report context and account history needed for review.
• Device and push-token information needed for security and notifications.
• If you apply for a verified role, identity-document photos and a photo of yourself.

We use this information to create and secure accounts, operate the marketplace, process orders and payments, arrange pickup and delivery, dispatch active transporteurs, show delivery progress, protect handoffs, investigate delivery or safety issues, communicate order activity, review applications, prevent fraud and abuse, provide support, and improve Tokosss. We do not use active-run tracking for off-duty monitoring.

We share only what is reasonably needed to provide the service:

• Order and handoff details with the relevant seller, pickup point, or transporter.
• Payment details with the selected mobile-money provider.
• Information with service providers that host, protect, monitor, or support Tokosss.
• Information when required by law or necessary to protect users and the platform.

Tokosss does not sell personal information. A reporter's identity and report evidence are restricted to authorized staff and service providers that need them for safety operations; Tokosss does not show the reporter's identity to the reported user. Identity documents are restricted to authorized review staff. A verified user's verification photo may be shown to an active delivery counterparty solely to help complete a handoff.

We keep information only as long as it is needed:

• Account and profile information is kept while your account is active and removed when a verified deletion request is completed.
• Direct-chat messages normally expire 30 calendar days after they are sent. Messages used to negotiate an order remain while the order is being fulfilled and expire no sooner than 30 days after the related seller sub-order is completed or cancelled.
• Photos and voice notes shared in chat become unavailable to users after 72 hours. A documented dispute, fraud, or legal hold may preserve restricted evidence internally, but does not make expired media available in chat again.
• Raw operational transporteur location heartbeats are automatically deleted 30 days after receipt. Pickup or drop-off GPS saved as handoff evidence may be kept with the related order, dispute, fraud-prevention, or legally required record instead.
• Order, payment, and payout records are kept for 10 years, as required by the OHADA accounting rules that apply to businesses in Cameroon.
• Identity-verification records are kept for 5 years after the verified role or account ends, in line with regional anti-money-laundering standards, or longer where the law requires.
• A report's evidence snapshot can remain available to authorized staff even if the original content is edited, recalled, deleted, or expires. Report, evidence, decision, appeal, and audit records are kept only as long as reasonably needed to review the case, protect against repeated abuse, resolve an appeal, or meet a legal obligation, then deleted or de-identified under Tokosss retention procedures.
• Login codes expire within minutes and are never stored in plaintext.
• Records tied to fraud prevention, an open dispute, or a legal obligation are kept under a documented, access-controlled hold until the matter is closed, then removed on the applicable schedule above.

You can update profile information in the app, manage notification and location permissions through your device, and request account deletion. In chat, you can edit the text of an ordinary message you sent for up to 15 minutes, hide an ordinary message from your own view before it expires, or recall an ordinary message for both participants within 15 minutes. Tokosss labels edited messages and shows a deletion notice after recall. System, offer, payment, order, price-change, and other transactional messages cannot be edited or deleted by users. Recall cannot remove a push already delivered, a screenshot, or a copy the recipient made outside Tokosss.

Read receipts are on by default. You can turn them off in Account & preferences. Seen status is reciprocal: it appears only when both participants have read receipts on. Sent and Delivered status continue to appear when read receipts are off, and your private unread state continues to work.

A transporteur chooses when to go On duty and can stop active-run tracking by going Off duty; turning off required location permission may prevent assignment to or completion of a delivery run. You can also ask us to access or correct the information we hold about you, in line with Cameroon's personal-data protection law (Law No. 2024/017 of 23 December 2024), by writing to support@tokosss.com. Some transaction and safety records are retained on the schedule in section 4 where the law or fraud-prevention and dispute-resolution needs require it.

Request account deletion →

There is no Tokosss password to steal: you sign in with a one-time code sent to your phone, and codes expire within minutes and are stored only as a cryptographic hash, never in plaintext. Identity documents are stored privately, are never publicly accessible, and can be opened only by authorized review staff. Detailed transporteur location is restricted to authorized operations staff for dispatch, delivery safety, support, or a documented investigation; access to location history is logged. Buyers, sellers, pickup points, and other transporteurs do not receive raw transporteur coordinates. Tokosss only contacts you from @tokosss.com addresses or the in-app chat, and never asks for your Mobile Money PIN or a login code. No service can guarantee absolute security, so keep login codes private and contact support if you suspect unauthorized access.

Tokosss is for adults. You must have reached the age of majority where you live and be able to enter a binding contract to use Tokosss. We do not knowingly collect personal information from children; if we learn that an account belongs to a minor, we close the account and delete its profile information.

We may update this notice from time to time. Material changes require users to review and accept the new version in the app before continuing. Questions can be sent to support@tokosss.com.