Katchy Privacy Policy

Last updated: 8 November 2026

This policy explains what personal data Katchy collects, why, and what rights you have over it. It covers both people who book deliveries (customers) and people who carry them (couriers), because we collect noticeably different things from each.

1. Who we are

Katchy is operated by Katchy Services UK Limited, a company registered in England and Wales under company number 17454638, with its registered office at 66 Paul Street, London, England, EC2A 4NA.

For UK GDPR purposes we are the data controller for the personal data described here. We are registered with the Information Commissioner's Office as a fee-paying data controller, and our entry appears on the ICO's register of fee payers under registration number ZC254499.

For any question about this policy or your data, contact [email protected].

2. What we collect, and why

If you book a delivery

Data	Why	Lawful basis
Name, email address, phone number	To create your account, confirm bookings and let a courier contact you about a delivery in progress	Performance of a contract
If you sign in with Apple or Google: your name, email address and the account ID Apple or Google gives Katchy	To sign you in and keep that sign-in linked to your Katchy account. We never see your Apple or Google password, and we ask for nothing else from either account	Performance of a contract
Pickup and drop-off addresses, and any delivery notes	To price the job, route it and complete it	Performance of a contract
Your device's location, while the app is open	Only to offer your current location as a pickup address and to show couriers near you. We do not track a customer's location in the background	Consent (you can decline, and enter addresses manually)
Payment details	To take payment. Card details are entered in Stripe's own payment sheet and are never seen or stored by Katchy — we hold only the last four digits, card brand and Stripe's reference	Performance of a contract
Photographs you attach to a delivery, and messages you send a courier	To describe a parcel, prove a drop-off, and resolve disputes	Performance of a contract
Delivery history	Receipts, refunds, support and fraud prevention	Contract, and legitimate interests in preventing fraud

If you deliver for Katchy

Data	Why	Lawful basis
Name, email address, phone number, date of birth	To create and verify your courier account	Performance of a contract
Driving licence, right-to-work document or share code, insurance documents	To check you are entitled to work in the UK and legally able to carry out deliveries. We are required to make and keep these checks	Legal obligation, and performance of a contract
A photograph of your face	To confirm you are the person the documents belong to, and to show customers who is arriving	Performance of a contract
Vehicle make, model, colour and registration	So a customer can identify you at the kerb	Performance of a contract
Your location, including while the app is in the background	To offer you jobs near you, to show a customer where their delivery is, and to settle disputes about whether a delivery was made. See section 3	Performance of a contract
Bank details, via Stripe	To pay you. Held by Stripe, not by Katchy	Performance of a contract, and legal obligation for tax records
Earnings and delivery records	Payments, tax records and account decisions	Contract, and legal obligation

Both

We also collect a device identifier for push notifications, and basic technical information about the app and device so we can diagnose faults.

Data	Why	Lawful basis
If you allow AI answers in Help: your question, and details of your recent deliveries such as their status, pickup and drop-off addresses, the courier's first name and what was paid or earned	To write an answer to your support question. Without your permission, answers come only from Katchy's own help and records and nothing is sent to the AI provider	Consent (you can turn AI answers off in Help at any time)
Reports and blocks in delivery chat: the reason you give, the message reported and who blocked whom	To review reports, keep customers and couriers safe, and stop two people who blocked each other being matched again	Legitimate interests in keeping Katchy safe
If you turn on Offers and promotions in Account: your account and device, to send you promotional notifications	To tell you about discounts and news from Katchy. Delivery updates are sent whatever you choose	Consent (turn it off in Account at any time)

Messages in delivery chat are checked automatically for offensive language and threats, and a message that fails the check is not sent. Katchy Support reviews every report, normally within 24 hours.

Website visits

When you open a page on getkatchy.co we count the visit, so we know how many people use the site. We record the page (never anything after a "?" in its address) and the website you came from. To tell visitors apart within a day we use a scrambled code made from your IP address and browser with a secret that changes every day; we never store your IP address, and the code cannot be traced back to you or linked to another day. We use no cookies and store nothing on your device for this, and we skip it entirely if your browser sends Do Not Track or Global Privacy Control. The lawful basis is our legitimate interest in understanding how the site is used.

Advertising cookies

Katchy advertises on Google. If you tap Accept on the cookie banner on getkatchy.co, we load Google's tag, which sets Google advertising cookies so we can see which of our ads brought you to Katchy, and tells Google when you tap a link to download a Katchy app or to start courier sign-up. Google receives your browser and device details, the page and the ad you came from; it acts under its own privacy policy (policies.google.com/privacy). If you tap Reject, or never answer, nothing from Google loads and no advertising cookie is set. The lawful basis is your consent. You can change your choice at any time from Cookie settings at the bottom of any page on getkatchy.co. The Katchy apps don't use these cookies.

App install measurement (iPhone)

The Katchy iPhone apps include Google Analytics for Firebase, which counts app installs and opens so we can tell whether our Google ads bring people to the app. It uses an app-specific identifier, not your Apple advertising identifier, and the apps never ask to track you across other companies' apps. Advertising storage and personalisation are switched off, and no name, email, phone number or GPS location is sent to Google (Google estimates the city from your connection). This is used only for statistics about how many people install and open Katchy.

3. Location data — what we actually do

This deserves saying plainly, because it is the most intrusive thing Katchy collects.

Customers: we read your location only while the app is open, and only if you allow it. It is used to fill in a pickup address and show nearby couriers. You can refuse and type addresses instead — the app works either way.
Couriers: while you are online, the Katchy Driver app records your location and sends it to us, including when the app is in the background. This is how we offer you nearby work and how a customer watches their delivery approach. On Android a notification stays on screen the whole time you are online, so you can always see that location is being shared.
Couriers who go offline: we stop collecting your location. Going offline in the app is the switch — we do not track you between shifts.
A customer sees a courier's live position only while that courier is carrying their delivery, and only until it is completed or cancelled.
We keep courier location history for seven years from the date it was collected, so that disputes about whether a delivery was made can be settled, then delete it.

4. Who we share it with

Between customer and courier. A courier assigned to your delivery sees the pickup and drop-off addresses, your first name and a contact method. You see their first name, photograph, vehicle and live location. Neither side sees the other's full account.
Stripe — payments and courier payouts. Stripe is a separate controller for the payment data it holds. See stripe.com/gb/privacy.
Google Maps Platform — addresses and coordinates are sent to Google to geocode addresses and calculate routes.
Apple and Google — push notifications are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android.
Our hosting and database providers — DigitalOcean, which hosts the Katchy application, and Neon, which hosts the database. Both store this data on our behalf under contract and may not use it for their own purposes.
Resend — sends our emails, such as sign-in codes.
Twilio — connects phone calls between a customer and their courier without showing either person's number, and can send verification codes by text.
Our AI provider — only if you allow AI answers in Help. It receives your question and the delivery details described in section 2 to write the answer, on our behalf and under contract.
Law enforcement or regulators, where we are legally required to, or where it is necessary to investigate a serious safety incident.

Every company that handles personal data for Katchy does so under a written contract that requires it to protect that data to at least the standard set out in this policy and to use it only to provide its service to us. Stripe, as a separate controller, is bound by its own privacy policy and the law.

We do not sell personal data, and we do not use it for advertising or share it with advertising networks.

5. Where your data is held

Katchy's servers and database are hosted in the United Kingdom — the Katchy application runs in DigitalOcean's London (LON1) region. Some of our processors, including Stripe and Google, may process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

6. How long we keep it

Delivery and payment records: six years after the delivery, because HMRC requires business records to be kept for that long.
Courier verification documents: for as long as you are a courier, and six years after you stop, matching the period business records have to be kept.
Courier location history: seven years from the date it was collected.
Messages and delivery photographs: seven years from the date they were collected.
Accounts you delete: we remove your profile promptly, but keep the transaction records above for the legal periods, in a form no longer linked to your public profile where we can.
Chat reports and blocks: for as long as the delivery records they relate to.

Deleting your account. You can delete your account inside either app at any time: open Account and choose Delete account. You can also email [email protected] and ask us to do it.

7. Your rights

Under UK GDPR you can ask us to:

give you a copy of the personal data we hold about you;
correct anything inaccurate;
delete your data, where we are not required to keep it;
restrict or object to how we use it, including where we rely on legitimate interests;
send your data to another provider in a portable format;
withdraw consent, where we relied on it — for customer location, this is your phone's location permission and you can turn it off at any time. AI answers can be turned off in Help, and promotional notifications in Account.

Write to [email protected] and we will respond within one month.

If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.

8. Automated decisions

Katchy decides which courier is offered a delivery automatically, based on how near they are, what vehicle they drive, and whether they are online. This affects which jobs you are offered but not your account standing. Decisions to suspend or remove a courier account are made by a person, not automatically.

9. Children

Katchy is not for under-18s. We do not knowingly collect data from children, and courier accounts require proof of age and right to work.

10. Changes

If we change this policy we will update the date at the top, and tell you in the app where the change is significant.