Privacy Policy
The Misk Cargo shipping and customs-clearance app and system
Last updated: 2 October 2026
In short: this is an internal app for Misk Cargo employees. There is no self-registration, no ads, no tracking, and no selling or sharing of data with third parties for marketing purposes. Everything collected is only what's needed to document shipment movement and job performance.
1. Who we are, and the scope of this policy
Misk Cargo is a freight-forwarding and customs-clearance company. This policy explains how we handle data across:
- •The warehouse mobile app (Misk Cargo) · used only by company staff.
- •The administrative web system · used only by company staff.
- •The public shipment-tracking page · opened by the customer with a tracking number, no account needed.
The app is not available to the public: no account can be created from within it, and accounts are created by the system administrator for company staff only.
2. Data we collect, and why
| Data | Why it's collected | When |
|---|---|---|
| Name, phone number, email, job role, branch | Creating the employee's account and defining their permissions and authorised warehouses | Entered by the system administrator when the account is created |
| Password (one-way hashed) and the OTP verification code | Signing in and protecting the account | At sign-in |
| Scanned parcel and shipment codes, and the time of each scan | Documenting the parcel's movement: where it was received, when it was loaded, and when it was delivered | With every barcode scan inside the app |
| The device's approximate/precise location | Recorded with the scan to prove the place of receipt or delivery if disputed | Only at the moment of the scan · no background tracking, and none while you're outside the app |
| Parcel photos and shipping documents | Proving the parcel's condition at receipt and delivery, and documenting damage | When a photo is explicitly taken or a document explicitly uploaded |
| Chat messages between employees, including attachments and voice notes | Coordinating work between branches | When a message is sent |
| Staff reports about a message: the reported message, the reason, and who reported it | Administrative review of inappropriate content | When a report is sent · read only by the system administrator |
| Call and meeting facts: who called whom, when, how long, and whether a screen was shared | Documenting internal communication and enabling administrative oversight | When a call or meeting starts · audio, video and screen content are never recorded or stored — only the facts |
| The push-notification token, and the device's type and OS | Delivering work notifications, and diagnosing faults | On first launch and after every token refresh |
| Customer and consignee data: name, phone, address, cargo contents and value | Performing the shipping contract, issuing invoices, and customs declarations | Entered by the sales or warehouse staff member |
We don't collect: contacts, SMS, call logs, browsing history, advertising identifiers, or any data for advertising or behavioural-analytics purposes. The app contains no third-party advertising or analytics SDK.
3. Device permissions
| Permission | Use | Is it mandatory? |
|---|---|---|
| Camera | Scanning parcel barcodes and photographing their condition | Optional · without it, the code is entered manually |
| Location | Recording the scan's location along with the code and time | Optional · scanning works without it, and the scan is saved with no location |
| Microphone | Voice notes in staff chat | Optional |
| Photos & files | Attaching a photo or document to a parcel or message | Optional |
| Notifications | Task and shipment alerts | Optional |
Each permission is requested the first time you use the feature that needs it, not when the app is opened. Any permission can be withdrawn at any time from your phone's system settings, and only the feature tied to it stops working.
4. Where data is stored, and who can access it
Data is stored in a managed database on Supabase (infrastructure on Amazon Web Services), and notifications are sent via Google's Firebase Cloud Messaging. These are our only two data processors, and they act solely on our instructions and for our account.
Internal access is governed by a per-page, per-warehouse permission system: an employee sees only what relates to their job and branch. We do not sell or rent data, or share it with advertisers or data brokers. We share it with no one else except in two cases: performing the shipment itself (the customs broker, the carrier, customs authorities, only to the extent the customs declaration requires), or a legally binding request from a competent authority.
5. Retention period
- •Shipment, invoice and customs records: ten years, as required by accounting and customs regulations.
- •Parcel photos and proof documents: five years from the delivery date.
- •Scan locations and the movement log: three years.
- •Chat messages: two years.
- •An employee's account after their relationship with the company ends: disabled immediately, and their personal data deleted within 90 days, while scans remain attributed to an internal staff number because they are part of a record that may not be amended retroactively.
6. Security
- •All connections are encrypted via HTTPS/TLS.
- •Session data on the phone is stored in the OS's secure storage (Keychain on iOS and Keystore on Android).
- •Passwords are stored one-way hashed and cannot be retrieved · none of us can see them.
- •Row-level security in the database: the server itself refuses to give an employee a row outside their scope, not just the interface.
- •An audit log documents who changed what and when.
7. Your rights, and account deletion
You may request: a copy of your data, its correction, its deletion, or to object to its processing. The request is fulfilled within 30 days, unless a legal duty to retain the record prevents it (such as customs and accounting records), in which case we explain to you what part remains and why.
Account deletion: since accounts are created administratively and self-registration is not possible, deletion requests are submitted to the company's system administrator or via the email below.
8. Children
The app is a work tool for adult employees, not directed at anyone under 18, and we do not knowingly collect their data.
9. Changes to this policy
Whenever there is a material change in the data we collect or why we collect it, we update this page and the date above. We keep the privacy disclosures submitted to both stores — Data safety in Google Play and App Privacy in the App Store — consistent with this policy when submitting the app for publication and when updating those disclosures later.
10. Contact
For any privacy-related question or request: info@raanzlr.com