Privacy Policy
Last Updated: October 21, 2026 | Effective Date: October 21, 2026
Introduction
Welcome to Dagu ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our freight logistics platform, including the Dagu mobile app (listed on Google Play as "Dagu: Ethiopia"), our website daguapp.com and related services (collectively, the "Services").
Dagu operates in accordance with the Federal Democratic Republic of Ethiopia's data protection laws, including the Computer Crime Proclamation No. 958/2016, the Electronic Transactions Proclamation, and emerging data protection regulations. We also align our practices with international standards including GDPR principles where applicable.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with these terms, please do not access or use our Services.
Information We Collect
1. Personal Information You Provide
We collect information you voluntarily provide when registering, using our Services, or contacting us:
- Account Information: Your name, phone number and role (shipper, carrier, driver or freight forwarder), and your email address if you give us one. We use your phone number to sign you in with a one-time code.
- Business Information: Company name, TIN (Tax Identification Number), trade license, commercial registration, business address and contact details, and the business documents you upload to prove them
- Identity Verification: Depending on your role, your Fayda national ID number (FAN), photos of your Fayda ID card, and a selfie that our verification team uses to confirm your identity. For drivers, also your date of birth and driver's license details.
- Vehicle Information: Vehicle type, plate numbers, capacity, vehicle registration and insurance documents
- Shipment Details: Origin, destination, cargo type, weight, dimensions, special handling requirements, prices and bids
- Photos, Documents and Messages: Proof-of-delivery photos, shipment and business documents you upload, and chat messages you send to other users, including photo and PDF attachments
- Voice Commands (drivers): While a driver presses and holds the voice command button on a delivery, the app records a short audio clip of the spoken command (for example, "loaded" or "on the way"). The microphone is used only then. The clip is sent to OpenAI to be transcribed, and only the transcribed text is sent to Anthropic to work out the command. Dagu does not keep the recording after the command has been processed; OpenAI may keep it for a limited time under its own data policy.
- Reports and Blocks: When you report a user or a message, or block someone, we keep a record of the report or block, including the reason, any details you add and the reported message
- Financial Information: The amount and bank reference of deposits carriers and freight forwarders make to Dagu, their deposit balance and commission history, agreed shipment prices and, where you give them to us, bank account and mobile money (Telebirr, CBE Birr) details
- Support Requests: Messages you send to our support team
2. Information Collected Automatically
When you access our Services, we automatically collect:
- Precise Location: With your permission, the app uses your device's precise (GPS) location only while the Dagu app is open. We use it to show nearby loads and routes and to fill in addresses. During an active delivery, the driver's live position is shared with the shipper of that shipment (and with the carrier the driver works for, if any) and is used to confirm arrival at pickup and drop-off. Your location is not shared with shippers outside an active delivery, and Dagu does not collect your location in the background or when the app is closed. You can turn off location access at any time in your device settings.
- Device Information: Device type, operating system, browser type, and the push notification token your device gives us so we can send you notifications. When you sign a shipment agreement in the app, we record your IP address, device model and the time with your signature as evidence of signing.
- Transaction Data: Bid history, completed shipments, payment records, ratings, and reviews
- Log Data: IP address, access times, error logs, and referral URLs recorded by our servers
3. Information from Third Parties
We may receive information from:
- Payment Processors: Telebirr, Chapa, and banking partners for transaction verification
- Government Databases: Vehicle registration verification, business license validation (where legally permitted)
- Business Partners: Freight forwarders, insurance providers, customs authorities
How We Use Your Information
We use your information for the following purposes:
Service Provision
- Create and manage your account
- Facilitate connections between shippers and carriers
- Process bids, bookings, and shipments
- Enable real-time shipment tracking during active deliveries
- Carry out drivers' voice commands and fill in forms from documents you scan
- Process payments and manage wallets
Verification & Trust
- Verify identity and business credentials (KYC/KYB)
- Prevent fraud and ensure platform security
- Review reports, apply blocks, and enforce our Terms of Service and Child Safety Standards
- Maintain trust scores and reputation systems
- Comply with Ethiopian anti-money laundering regulations
Communication
- Send service-related notifications (bid updates, shipment status)
- Provide customer support
- Send marketing communications (with your consent)
- Notify you of policy changes
Platform Improvement
- Analyze usage patterns to improve features
- Develop new services and functionalities
- Conduct research and analytics
- Optimize route suggestions and pricing algorithms
Legal Compliance
- Comply with Ethiopian laws and regulations
- Respond to legal requests from authorities
- Enforce our terms of service
- Protect against legal liability
Legal Basis for Processing
Under Ethiopian law and international best practices, we process your data based on:
- Contractual Necessity: Processing required to provide the Services you requested when you register and use our platform
- Consent: Where you have given explicit consent, such as for marketing communications, access to your device's location, camera or microphone, or optional features
- Legal Obligation: Processing required to comply with Ethiopian laws, including tax regulations, transport authority requirements, and financial regulations
- Legitimate Interest: Processing necessary for our legitimate business interests, such as fraud prevention, security, and platform improvement, balanced against your rights
Data Sharing and Disclosure
We may share your information with:
Platform Users
Shippers can view carrier profiles, ratings, and vehicle information. Carriers can see shipment details and shipper business information. During an active delivery, the shipper can see the driver's live location. People you chat with can see the messages and attachments you send them. This is necessary for the marketplace to function.
Service Providers
Companies that help us operate our platform, including cloud hosting, maps, SMS and email delivery, push notifications, voice transcription and document reading, and payment processing. They are listed by name in the next section.
Freight Forwarders & Partners
When using freight forwarding services, relevant shipment and documentation information is shared with licensed freight forwarders and customs clearing agents.
Government Authorities
Ethiopian government bodies when required by law, including the Ethiopian Revenues and Customs Authority (ERCA), Transport Authority, Financial Intelligence Center, and law enforcement agencies with valid legal requests. We also report child sexual abuse material and other illegal content to the relevant authorities, as described in our Child Safety Standards.
Insurance Providers
Shipment and cargo information shared with insurance partners for coverage and claims processing.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with appropriate notice provided.
We never sell your personal data to third parties for marketing or advertising purposes.
Service Providers We Use
We use the following companies to run Dagu. Each one receives only the data it needs to provide its service to us and is required to protect that data with the same or equal protection as described in this policy.
Supabase
What they do: Hosts our database, file storage and servers, and handles sign-in.
Data they receive: The information described in this policy, including your account details, documents, photos, chat messages, location points and push token.
Google Maps Platform (Google)
What they do: Shows maps in the app, suggests and looks up places when you enter an address, and calculates routes, distances and travel times.
Data they receive: Addresses and places you enter or select, map locations including your current location when you use the map, and technical data such as your IP address.
SMS Ethiopia
What they do: Sends the one-time sign-in codes we text to your phone.
Data they receive: Your phone number and the text of the message.
Resend
What they do: Sends one-time codes and service emails when you use an email address with Dagu.
Data they receive: Your email address and the content of the email.
Expo push notification service, Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM)
What they do: Deliver push notifications to your phone, such as new bids and shipment updates. Expo passes each notification to Apple (iPhone) or Google (Android) for delivery.
Data they receive: Your device's push token and the content of the notification.
OpenAI
What they do: Transcribes the voice commands that drivers record with the voice command button.
Data they receive: The audio recording of the voice command.
Anthropic
What they do: Works out what a driver's transcribed voice command means, and reads images of documents you choose to scan (such as a trade license, driver's license or vehicle registration) to fill in forms for you.
Data they receive: The text of the transcribed voice command, and the image of the scanned document.
Telebirr and Chapa
What they do: Process payments, deposits and payouts when you pay or get paid through Dagu.
Data they receive: Your name, phone number or account details, the payment amount and the transaction reference.
ipify
What they do: Tells the app your device's public IP address when you sign a shipment agreement, so it can be recorded with your signature.
Data they receive: Your IP address, which any web request reveals.
ExchangeRate-API
What they do: Supplies the currency exchange rates shown in the freight forwarder tools.
Data they receive: Your IP address, which any web request reveals. No account details are sent.
OpenStreetMap (website only)
What they do: Provides the map images shown on the daguapp.com website.
Data they receive: Your IP address and the map area being viewed.
Photos of your Fayda ID and your selfie are reviewed by our own verification team and are not sent to OpenAI or Anthropic.
Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption: All data transmitted between your device and our servers uses TLS/SSL encryption
- Secure Storage: Data at rest is encrypted using AES-256 encryption
- Access Controls: Strict role-based access controls limit who can access your data
- Phone Verification: Signing in with your phone number requires a one-time code sent to that number by SMS
- Regular Audits: Security assessments and vulnerability testing
- Payments: Dagu does not collect or store payment card numbers. Shippers pay carriers directly, and deposits to Dagu are made by bank transfer; any card or mobile money payment is entered on the payment provider's own page
Data Location
Your data is stored by our hosting provider, Supabase, on secure cloud servers outside Ethiopia, and the service providers listed above may process it in other countries. We ensure such transfers comply with applicable data protection requirements and appropriate safeguards are in place.
Data Retention
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account Information | Until you delete your account. Deleting it in the app erases it straight away; a request through our website is completed within 30 days. Copies in our backups are gone within 30 days. |
| Identity Verification (Fayda number, ID photos, selfie, driver's license details and verification documents) | Until you delete your account, when they are erased |
| Transaction Records | 10 years (Ethiopian tax requirements), linked to an anonymous "Deleted user" once your account is deleted |
| Shipment Records | 7 years, linked to an anonymous "Deleted user" once your account is deleted |
| Chat Messages | Until you or the person you chatted with deletes their account, when the conversation is erased (a message that was reported is kept with the report) |
| Location Data | Location points from a delivery are kept as part of that shipment's record; a driver's last known position is replaced with each update |
| Voice Recordings | Not kept by Dagu after the voice command has been processed; OpenAI may keep them for a limited time under its own data policy |
| Reports and Blocks | As long as needed to keep the platform safe, and longer where the law requires |
Your Rights
You have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to legal retention requirements. Note: We cannot delete data required for legal compliance or ongoing transactions. See Deleting Your Account below.
Right to Restrict Processing
Request limitation of how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Withdraw consent for processing based on consent at any time, without affecting prior lawful processing.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email us at privacy@daguapp.com or use the other contact details below. We will respond within 30 days of receiving your request.
Deleting Your Account
You can delete your Dagu account and the personal data linked to it at any time:
In the app (takes effect immediately)
- Shippers and carriers: Account tab, then Danger Zone, then Delete Account
- Freight forwarders: Profile tab, then Danger Zone, then Delete Account
- Drivers: Profile tab, then Delete Account
Type DELETE to confirm. Your account is deleted and you are signed out at once.
On the web
If you can't use the app, submit a request using our account deletion form at https://daguapp.com/delete-account, or email privacy@daguapp.com with the phone number on your account. We confirm the account is yours, then delete it within 30 days of your request.
Before you delete your account, please complete or cancel any active shipments and ask support@daguapp.com to pay out any deposit balance.
What is deleted: your name, phone number, email address and profile photo; your Fayda number, ID photos, selfie, driver's license details and verification documents; saved bank and Telebirr payout details; your messages, chat attachments and notifications; and your sign-in, so the account cannot be used again.
What is kept, without your name: shipments, loads, bids, jobs and delivery records the other party to a trade still needs; payments, deposits, commissions and invoices, as Ethiopian tax law requires; ratings, signed agreements and reports of abuse; and the business registration details (company name, TIN and licenses) written on those records. These records point to an anonymous "Deleted user" and are kept for the periods shown under Data Retention. Copies in our backups are gone within 30 days.
Cookies and Tracking Technologies
On our website, we use cookies and similar technologies for:
- Essential Cookies: Required for authentication, security, and basic functionality
- Functional Storage: Remember your preferences and settings, such as your language
We do not use advertising cookies, and we do not use cookies to track you across other websites or apps.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Services.
Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
We have zero tolerance for child sexual abuse and exploitation. Read our Child Safety Standards to learn how to report a concern.
Ethiopian Regulatory Compliance
As a platform operating in Ethiopia, we comply with specific local requirements:
Computer Crime Proclamation (No. 958/2016)
We maintain appropriate security measures and cooperate with law enforcement when required under this proclamation while protecting user rights.
Financial Regulations
We comply with National Bank of Ethiopia regulations regarding payment processing, including mobile money transactions through Telebirr and other licensed providers.
Transport Authority Requirements
Carrier and vehicle information is maintained in compliance with Ethiopian Transport Authority licensing and documentation requirements.
Anti-Money Laundering (AML)
We conduct KYC verification and transaction monitoring in accordance with Ethiopian Financial Intelligence Center requirements to prevent money laundering and terrorist financing.
Customs & Revenue Authority (ERCA)
Shipment records and documentation comply with ERCA requirements for domestic and cross-border freight movements.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or in-app notification
- Where required, obtain your consent for new data processing activities
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Dagu Data Protection Officer
Ethiopia
For urgent matters or if you believe your data has been compromised, please contact us immediately at the above email address with "URGENT: Data Security" in the subject line.
By using Dagu's Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
This Privacy Policy is provided in English. In case of any discrepancy between this English version and any translated version, the English version shall prevail.
© 2026 Dagu. All rights reserved.