SwiftRun Data Protection Policy
How to delete your SwiftRun account and data
You can delete your SwiftRun account and personal data yourself at any time:
- Open the SwiftRun app and sign in.
- Go to Profile.
- Tap “Delete my account” and confirm.
Deleting your account removes your profile, your Omang photo and selfie, and your delivery history. Financial records (delivery amounts and service-fee ledger entries) are kept for the period Botswana tax and business law requires for financial records, then removed. If you cannot sign in, email [email protected] from your account email address and we will delete your account within 30 days after confirming your identity.
1. Who is responsible
SwiftRun is the data controller for the personal information handled through the SwiftRun app and swiftrun.online. That means we decide what information is collected and why, and we answer for how it is protected.
Data protection contact: [email protected], or call or WhatsApp 72173308.
Regulator: the Information and Data Protection Commission of Botswana. Anyone may complain to the Commission if they believe we have mishandled their information. We would rather you came to us first so we can put it right.
2. The principles we work by
- Lawfulness and honesty. We collect information only for stated reasons, and we say what they are.
- Purpose limitation. Information collected for deliveries is used for deliveries, safety and our legal duties. Nothing else.
- Minimum necessary. We do not collect information “just in case”.
- Accuracy. People can correct their information, and we fix errors when we find them.
- Storage limitation. We keep information only as long as it is needed (see section 6).
- Security. Information is protected in transit and at rest, and only team members who need it can see it.
- Accountability. We keep records of how information is handled and can show our working.
3. What we hold and why
| Information | Why we hold it | Basis |
|---|---|---|
| Name, phone, email, password (hashed) | Your account and logging in | Contract |
| Email verification and password reset codes | Account protection | Contract and security |
| Omang photo and selfie (runners and senders) | Identity verification, keeping fake accounts and scammers out | Safety and legitimate interest |
| Location during a delivery | Matching, live tracking, proof of service | Contract |
| Delivery details: addresses, notes, confirmation codes, proof photos | Completing and evidencing deliveries | Contract |
| Payment records: amounts, references, weekly service-fee ledger | Accounting for the 15% sender-paid service fee | Legal obligation and contract |
| Support and complaint messages | Resolving queries and complaints | Legitimate interest |
SwiftRun never holds customer payment money. Senders pay runners directly. We never see or store mobile money PINs or bank passwords.
4. Who we share with
We do not sell personal information. Ever.
We use a small number of service providers who process information only on our instructions:
- Cloudflare hosts the website and the service, and keeps the internet traffic safe.
- Resend sends our verification and password reset emails.
We may share information where the law requires it, for example a court order or a police investigation, and to protect someone’s safety. We do not share ID documents or selfies with marketing companies or other third parties.
Some providers process information on servers outside Botswana. Where that happens, we use providers with recognised security standards and contractual data protection terms.
5. Your rights
You may:
- Ask for a copy of the information we hold about you.
- Ask us to correct information that is wrong.
- Ask us to delete your account and information (you can also do this yourself in the app: Profile, then “Delete my account”).
- Object to, or ask us to restrict, how we use your information.
- Ask for your information in a portable format.
Write to [email protected]. We respond within 30 days. We may ask you to confirm your identity first, so information only goes to its owner.
Deleting your account removes your profile, documents and delivery history, except records the law requires us to keep, such as financial records.
6. How long we keep information
- Account information: while your account is active.
- ID documents and selfies: while your account is active. If you delete your account, they are removed with it, subject to the legal records below.
- Delivery and payment records: kept for the period Botswana tax and business law requires for financial records.
- Support messages: kept while needed to resolve the matter and for a reasonable period afterwards for quality and dispute records.
7. Security
- Passwords are stored only as one-way hashes (bcrypt).
- All traffic between the app, the website and our service is encrypted (HTTPS).
- Access to personal information is limited to team members who need it for their work, and admin access is logged.
- Verification codes are short-lived, hashed, and rate limited.
8. Children
SwiftRun accounts are for people aged 18 and over. We do not knowingly collect information from children.
9. Changes
If this policy changes, we will publish the new version on swiftrun.online and update the date below. Significant changes will also be announced in the app.
Effective: October 2026.