Quikk Privacy Policy

1. Overview & Scope

Quikk ("we", "us", or "our"), operating as a Rare Inc. company in Juba, South Sudan, is committed to respecting your privacy and protecting personal information collected through our public websites (quikkride.com, quikkeats.com, quikkbusiness.com) and associated mobile applications (collectively, the "Services").

This Privacy Policy explains the specific types of information collected across our web intake forms, waitlists, partner onboarding workflows, and operational platforms; how that data is stored and utilized; who it is shared with; and how you can exercise control over your personal details.

2. Information We Collect

We only collect personal information that is necessary to provide mobility matching, marketplace listings, partner vetting, customer support, and pre-launch communications. We collect information through the following vectors:

A. Information You Provide Voluntarily

• Waitlist & Early Access Subscribers: Email address submitted through launch notification forms on QuikkRide and QuikkEats.
• Customer & Community Inquiries: Full name, email address, and inquiry message content submitted via support contact forms.
• Partner Leads & Expressions of Interest: Name, phone number, email address, and interest track (driver, restaurant, merchant, corporate) submitted on QuikkBusiness.
• Comprehensive Partner Onboarding Applicants: Full name, registered phone number, email address, Juba residential or business neighborhood area, vehicle categories (Boda, Tuk Tuk, Standard, Comfort), driving license numbers, registered store names, retail/cuisine types, and career resume details.

B. Uploaded Identity & Regulatory Documents

To ensure basic regulatory vetting and document verification before onboarding partners, applicants voluntarily upload verification files:

• Driver Applicants: Scanned copies or photos of official driving licenses (PDF, PNG, JPG, or WEBP, max 10MB).
• Merchant & Restaurant Applicants: Commercial business registration certificates or local operating permits.
• Corporate Applicants: Resumes, CVs, and professional portfolio links.

C. Device, Network & Technical Data

When you interact with our web services, basic technical information is received by our cloud infrastructure provider (Google Cloud / Firebase Hosting), such as your IP address, browser user-agent, operating system, and request timestamps, necessary for network routing, security filtering, and HTTPS delivery.

D. Location Information

On our public websites, location details are limited to self-selected neighborhood dropdowns (e.g., Customs, Konyo Konyo, Hai Amarat, Munuki, Gudele). The websites do not access device GPS sensors. Real-time GPS telemetry is restricted to the mobile application environment for active trip dispatch and delivery tracking, as described in our Location & Tracking Notice.

3. Production Data & Storage Map

The following authoritative map reflects actual data handling, storage destinations, and operational recipients verified in production code:

4. Why We Process Information

Quikk processes collected personal data strictly for legitimate operational purposes:

1. Service Delivery: Coordinating ride dispatching, order matching, and storefront listings across Juba.
2. Partner Vetting & Safety: Reviewing driving licenses and commercial permits to verify applicant eligibility before active status is granted.
3. Operational Communications: Providing status updates regarding applications, answering support tickets, and notifying subscribers of official launch dates.
4. Abuse & Fraud Prevention: Protecting the integrity of the platform against automated spam submissions, multiple fake applications, and platform manipulation.
5. Legal Compliance: Complying with applicable commercial, tax, and law enforcement recordkeeping requirements under South Sudan law.

5. Information Sharing & Disclosure

Quikk does not sell, rent, or trade your personal information to third parties for advertising purposes. Information is shared only in the following limited circumstances:

• Between Platform Participants: During active service requests on our mobile apps, necessary operational details are shared (such as passenger first name and pickup location with drivers, or order contents with kitchens).
• Cloud Infrastructure Providers: Data is hosted securely on Google Cloud Platform and Firebase services (including Cloud Firestore and Firebase Storage) located in secured enterprise data centers.
• Law Enforcement & Legal Demands: We may disclose information if required to do so by a lawful warrant, court order, or formal investigation by competent authorities in South Sudan, as detailed in our Law-Enforcement Guidelines.
• Corporate Restructuring: In the event of a merger, acquisition, or asset transfer involving Rare Inc., user records may be transferred under equivalent confidentiality commitments.

6. Data Retention

We do not retain personal data indefinitely:

• Waitlist emails: Retained until the public launch in Juba is completed, or until the subscriber requests removal.
• Support tickets: Retained for 12 months following resolution to maintain audit trails and support quality.
• Partner applicant documents: Retained for the duration of an active partner relationship. Documents of rejected or withdrawn applications are permanently deleted from Firebase Storage within 90 days of review.
• Privacy & deletion requests: Retained in compliance archives for 24 months to demonstrate lawful execution of rights requests.

7. Cloud Infrastructure & International Processing

Quikk’s technical backends and database infrastructure are hosted through Google Cloud Platform services. While our primary business operations and service deliveries occur in Juba, South Sudan, collected data is processed and stored across secured Google Cloud data center facilities. We ensure that our infrastructure configurations enforce strict role-based access controls and encrypted storage at rest.

8. Security Safeguards

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. These include:

• Enforced HTTPS/TLS encryption across all public web domains.
• Strict Firebase Security Rules governing Cloud Firestore collections, preventing unauthenticated public reads of partner or applicant records.
• Restricted Firebase Storage access controls ensuring verification documents can only be accessed by authenticated administrative staff.
• Client-side input sanitation and file MIME type validation (JPG, PNG, WEBP, PDF only; 10MB size limits).

While we work diligently to safeguard your data, no method of transmission over the internet or electronic storage is completely infallible, and we cannot warrant absolute security.

8A. Age Eligibility & Identity Information Disclosures

Because Quikk operates strictly as an 18+ platform and facilitates dispatches involving independent mobility and regulated commerce, we collect and process age-related information strictly to the extent necessary for eligibility and verification:

Information Collected & Purpose

• Date of Birth / Age Eligibility Declarations: When registering an account or placing orders for age-restricted products, customers may be prompted to confirm their date of birth or declare they are at least eighteen (18) years of age. This information is processed exclusively to verify platform eligibility and ensure restricted merchandise is not marketed or made available to minors.
• Partner Applicant Age Verification: Driver and courier applicants must submit documentation confirming they are at least 18 years old and hold valid driving licenses.

In-Person ID Verification vs Digital Storage

Notice regarding Customer Government Identification: At present, Quikk does NOT require or collect uploaded digital copies of customer passports or national ID cards during general account creation. For orders containing regulated goods (such as alcohol or tobacco), physical proof of age (such as a National ID or Passport) is inspected in-person by the delivery courier or merchant at the time of handoff to confirm age compliance. Couriers do not photograph or electronically retain customer identity documents on personal devices.

If digital identity or automated age verification systems are introduced into our mobile applications in future releases, this Privacy Policy will be formally updated prior to or concurrently with the deployment of such features.

9. Your Privacy Rights

Subject to local regulations, you have rights regarding your personal information:

• Right to Know & Access: You can request a summary of personal information we maintain about you.
• Right to Rectification: You may request correction of outdated or inaccurate personal details.
• Right to Deletion: You can request that we delete your account profile and associated personal data from our systems.

To exercise any of these rights, submit an authenticated request through our Privacy & Data Requests Portal.

10. Policy Updates & Contact Information

We may update this Privacy Policy from time to time to reflect changes in our operational procedures, technical features, or applicable legal obligations. Updates will be published on this page with an updated effective date.

For questions or privacy inquiries, contact the Quikk legal and compliance team:

• Email: Support@rareincorporated.com
• Entity: Quikk, a Rare Inc. Company
• Location: Juba, South Sudan