PRIVACY POLICY

Last updated: 24 October 2026

AZENETLTLVPLRU

 

City & Carrier is a trade mark of B2B-TRADE OÜ (“we”, “our”, or “us”) is committed to safeguarding your privacy while you navigate our website, citycarrier.com, and utilize the City & Carrier web page, web application or mobile applications (collectively referred to as the “Service”).

This document outlines our practices regarding the collection, usage, and disclosure of your personal information when using our Service, as well as your choices in relation to that data.

 

Information Collection and Use

To enhance your experience and improve our Service, we collect various types of information.

 

Types of Data Collected

 

Personal Data

During your interaction with our Service, we may request certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

  • Email Address
  • First and Last Name
  • Address

Usage Data

We may also gather information that your browser sends whenever you access our Service. This “Usage Data” encompasses details such as:

    • Internet Protocol address 
    • Browser type and version
    • Pages visited on our Service
    • Date and time of your visit
    • Time spent on those pages
    • Unique device identifiers 

When accessing our Service via mobile devices, additional information may be collected, including:

    • Device type and unique ID
    • Mobile operating system
    • Mobile browser type and version
    • GPS geolocation and Activity recognition 
    • IP address
    • Name and address of places
    • Driving direction and speed
    • Phone Number
    • Permission to send SMS using telco operator
    • Permission to camera 
    • Permission to image gallery 

Tracking & Cookies

We implement cookies and similar tracking technologies to monitor activity on our Service and store specific information.
You can manage cookie preferences through your browser settings. However, rejecting cookies may limit your ability to use certain features of our Service.

Types of Cookies Used:

    • Session Cookies: Essential for the operation of our Service.
    • Preference Cookies: To remember your preferences and settings.
    • Security Cookies: To enhance security measures.

Use of Data

B2B-Trade OÜ utilizes the collected data for various purposes, including:

    • Providing and maintaining our Service
    • Informing you about changes to our Service
    • Allowing interaction in features of our Service
    • Offering customer support
    • Conducting analysis to improve our Service
    • Monitoring Service usage
    • Identifying and resolving technical issues

Data Transfer

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside your jurisdiction, where data protection laws may differ.

If you provide information from outside Estonia, you consent to the transfer and processing of your data in Estonia.

B2B-TRADE OÜ commits to ensuring your data is handled securely and in accordance with this Privacy Policy, with necessary safeguards in place during any transfer of Personal Data.

Disclosure of Data

B2B-TRADE OÜ may disclose your Personal Data when we believe it is necessary to:

    • Comply with legal requirements
    • Protect the rights or property of B2B-TRADE OÜ
    • Investigate potential misconduct related to the Service
    • Ensure the safety of Service users or the public
    • Mitigate legal liabilities

Data Security

While we take the security of your data seriously, please be aware that no method of transmission over the Internet or electronic storage is entirely secure. We strive to employ commercially acceptable measures to protect your Personal Data but cannot guarantee absolute security.

Analytics

We may utilize third-party Service Providers for monitoring and analyzing Service usage.

Google Analytics is one such service that tracks website traffic. Google may use the data collected to contextualize and personalize ads within its advertising network. 

Online Route Planner

The free online route planner on citycarrier.com works without an account. When you type or paste an address, the address text is sent to a geocoding service to find it on the map: first OpenStreetMap Nominatim (OpenStreetMap Foundation, United Kingdom) and, if needed, HERE (HERE Global B.V., the Netherlands). Your addresses and routes are processed in memory only to return the result and are not stored. To protect the tool from automated misuse we use Google reCAPTCHA, and the page keeps a random anonymous identifier in your browser’s local storage so that usage limits apply per browser; it contains no personal data and is removed when you clear your browser data. Our logs for the tool record only counts, timings, the result status and a one-way hash of your IP address, never addresses, coordinates or the identifier. Events sent to Google Analytics contain no addresses or coordinates. Map images are loaded from OpenStreetMap. If you open the route in Google Maps or Waze, the coordinates of your stops are passed to that service under its own privacy policy. The legal basis is our legitimate interest in providing the tool and protecting it from misuse (Article 6(1)(f) GDPR).

Delivery Planner App

This section describes how the Delivery Planner mobile app (iOS and Android) processes your data. The controller is B2B Trade OÜ (City & Carrier), Tallinn, Estonia.

Sign-in and Your Account

You can start using Delivery Planner without an account, in guest mode (see “Guest Mode” below). To use the service without the limits of guest mode, you need an account. You can sign in with your email address and a one-time code, or with Google, Apple, Facebook or Microsoft. We store your name, email address, a user ID and, if you choose to enter it, your phone number. If you sign in with Google, Apple, Facebook or Microsoft, that provider confirms your identity to us and processes the sign-in under its own privacy policy.

We use this data to create and run your account and to provide the app. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).

After you sign in, the app sends us the identifier of your device once. We store only a hash of it, the platform, the app version and the time of the first and the last link. We need this so that the free plan’s limit is counted per device as well as per account, and new accounts on the same phone do not get the limit again. The legal basis is our legitimate interest in applying the free plan fairly (Article 6(1)(f) GDPR). This data is deleted together with your account.

Guest Mode (Without an Account)

You can try the Delivery Planner app and the web route planner in the City Carrier dashboard without signing up. For this we create a guest profile. To recognize the same device or browser the next time, we store only a hash (a one-way transformed value) of the device identifier, never the identifier itself. In a browser the identifier is kept in the cc_guest cookie; guest mode does not work without it. Together with the guest profile we store the platform, the app version, the language, the time of last use and the routes created in guest mode. Guest mode has limits, for example on the number of stops in a route.

Protection against misuse. To prevent automated and mass use of guest mode, we use your IP address when a guest profile is created: we store only a hash of it, to limit the number of profiles per address, and we look up the network (autonomous system) it belongs to, to recognize requests from data centers. In the web version your browser also solves a small computational task; this check runs on our own servers, without any third party. In the app we check that the request comes from a genuine copy of the app on a real device: on Android with Google Play Integrity, on iPhone with Apple App Attest. For this check your device contacts Google or Apple, and we receive the result. We store the result of the check and, on iPhone, also the key created for this installation of the app. Google and Apple process this data under their own privacy policies.

The legal basis is our legitimate interest in letting you try the service without signing up and in protecting it from misuse (Article 6(1)(f) GDPR).

If you create an account from a guest profile, your guest-mode routes stay in your account. If you sign in to an existing account instead, the guest profile and its routes are deleted.

Approximate Location from Your IP Address. To suggest demo addresses near you and to estimate your fuel savings with the average fuel price in your country, we determine your country and city (to about 1 km) from your IP address. We use a database installed on our own servers: your IP address is not sent anywhere, and the result is not stored or written to logs. If you use a VPN, the city may be wrong; you can choose it manually. The legal basis is our legitimate interest in showing you a relevant demo (Article 6(1)(f) GDPR). Network and IP location data: IP Geolocation by DB-IP, licensed under CC BY 4.0.

Location, Including in the Background

While you are signed in and set to “online”, the app collects your device’s precise GPS location every 15 seconds, also when the app runs in the background. The location is sent to our servers so that you and your dispatcher can follow the progress of deliveries. If there is no network connection, locations are stored on the device and sent later. Collection stops when you go “offline” or sign out.

The legal basis is the performance of our contract (Article 6(1)(b) GDPR). You can turn off location permission in your device settings at any time, but route navigation and delivery tracking will then not work.

Route Data and Recipients’ Data

To build and run your routes, the app stores on our servers the stop addresses and recipients’ phone numbers you add (for example, to send recipients an SMS with the estimated arrival time) and the photos of parcels you take at pickup and delivery. Photos of shipping labels are read on your device (Google ML Kit) to fill in addresses; they are not uploaded, and the temporary file is deleted after reading.

For recipients’ data, the driver or the company using Delivery Planner decides why and how it is used and acts as the controller; City & Carrier processes this data on their behalf, only to provide the app (Article 28 GDPR). We do not use recipients’ data for our own purposes, analytics or advertising.

Voice Notes

Couriers can attach short voice notes (length depends on the plan) to a stop or an order. A voice note is a recording of the courier’s voice and may mention the delivery address or the recipient. Notes are stored on the phone until they are sent with the stop’s status, then on our servers together with the route or the order they belong to. Notes on a route are deleted with the route (see how long we keep route data below) and when the courier deletes the account; notes attached to a company’s order stay with that order, like delivery photos. We do not transcribe voice notes and do not use them for any other purpose.

Address Search

When you type, paste or import an address, the app sends the address text to a geocoding service to find it on the map. We first use OpenStreetMap Nominatim (OpenStreetMap Foundation, United Kingdom). If the address is not found there, we also look it up at HERE (HERE Global B.V., the Netherlands) and, on paid plans, for addresses in Estonia, Latvia and Lithuania, at Regio (AS Regio, Estonia). If your company has connected its own map service account (for example Google Maps), the address is sent to that service. We send only the address text, sometimes with the map area to search in, never your name, account details or GPS location. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).

Fair use of paid searches. We count how many paid lookups (HERE, Regio) each account makes in a calendar month: only the number, linked to your courier account and, if you work for a company in the app, also to the company’s account. If the number is unusually high, our staff may look at it and note that it was checked, with a short internal comment. The count never blocks or slows down your searches. The legal basis is our legitimate interest in preventing misuse of paid services (Article 6(1)(f) GDPR). The counts of your courier account and the review notes are kept for no longer than the current and the three previous months and are deleted when your account is deleted.

Proof of Delivery Sent to Recipients

If you send a proof of delivery to a recipient by email or share it, the recipient gets a link to a page with the delivery address and time, the driver’s name, the photos taken at the stop and the recipient’s signature, if one was collected. Anyone who has the link can open this page. The link works only as long as the route data is kept (see below); after that it shows that the proof of delivery is no longer available. As with other recipients’ data, the driver or the company sending the proof decides on its use, and City & Carrier processes it on their behalf (Article 28 GDPR).

Crash Reports

To find and fix errors, the app sends crash reports to Google Firebase Crashlytics. They contain technical data about the device and the error, linked to an internal user ID only — not your name or email. For network errors we record only the address, method and status code of the request, not its content. Crash reports are deleted after 90 days. The legal basis is our legitimate interest in keeping the app stable (Article 6(1)(f) GDPR).

App Analytics and Advertising Measurement

With your consent, Delivery Planner collects information about how you use the app: for example, when you add stops, build, start or finish a route, the number of stops, the method used to add them, the app language and the sign-in method. Together with this we collect technical data: an app instance identifier, device model, operating system and app version, approximate location derived from your IP address (city level), and, if you allow it, your device advertising identifier (IDFA on iOS, Advertising ID on Android).

We do not use the addresses, recipients’ phone numbers or GPS coordinates from your routes, or your name, for analytics or advertising.

We use this information to understand and improve the app, and to measure which of our advertising campaigns lead people to start using it. For advertising measurement we share these events with Google (Google Analytics for Firebase, Google Ads), Meta Platforms (Facebook and Instagram ads) and Apple (Apple Search Ads, SKAdNetwork). These companies may process data outside the European Economic Area under the safeguards required by the GDPR.

The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time in Settings → Privacy settings, without affecting the lawfulness of processing before withdrawal. On iOS you can also change tracking permission in the system settings. Analytics data is kept for 14 months and then deleted.

Paid Plans and Purchases

If you buy a paid plan (Comfort, Pro or a Pro day pass) in the app, the payment is made through Google Play or the Apple App Store under their terms and privacy policies. We never receive your card or bank details.

To check your purchase and switch on your plan, we use RevenueCat (RevenueCat, Inc., USA). The app sends RevenueCat your internal user ID and the purchase receipt from the store; RevenueCat confirms the purchase to us and tells us when a plan is renewed, cancelled or refunded. We keep a record of your plan (plan, product, store, start and end dates, status). RevenueCat processes this data on our behalf under a data processing agreement; data may be processed in the USA under the safeguards required by the GDPR (Standard Contractual Clauses). The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).

How Long We Keep App Data

  • Account (name, email, phone number, user ID): until you delete your account.
  • Guest profile (hash of the device identifier, hash of the IP address, device check result) and guest-mode routes: deleted 30 days after last use; if you sign in to an existing account, at the next automatic clean-up.
  • Device linked to your account (hash of the device identifier): until you delete your account.
  • Route data (stop addresses, recipients’ phone numbers, parcel photos, voice notes, location history): deleted automatically 30 days after it is created on the free plan, and 120 days after it is created on paid plans.
  • Analytics data: 14 months.
  • Crash reports: 90 days.
  • Paid plan records (plan, product, store, dates, status): while your account exists; after the account is deleted, only the data we must keep for accounting, without your name, email or phone number, for the period required by law.
  • Invoices for paid plans: for the period required by law.

Your Rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise these rights or ask about your data, contact us at privacy@citycarrier.com. You also have the right to lodge a complaint with a supervisory authority; in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Deleting Your Delivery Planner Account

You can delete your Delivery Planner account (developer: B2B Trade OÜ / City & Carrier) at any time:

  • In the app: open the side menu, tap your name and email at the top, tap “Delete Account” and confirm.
  • Without the app: email privacy@citycarrier.com from the email address linked to your account, with the subject “Delete my Delivery Planner account”. We will confirm the request and complete it within one month.

When your account is deleted, we delete your profile, routes, stop addresses, recipients’ phone numbers, delivery photos, voice notes and location history from our servers. Analytics data is deleted automatically within 14 months, crash reports within 90 days. We keep only data we are legally required to keep, such as invoices for paid plans, for the period required by law.

Route data (addresses, recipients’ phone numbers, photos, voice notes, location history) is deleted automatically even if you keep your account: on the free plan 30 days after it is created, on paid plans 120 days after it is created. Automatic deletion applies to route data and location history created on or after 10 October 2026. Data created before that date is deleted when you delete your account, and otherwise in a later clean-up.

Changes to This Privacy Policy

We may update our Privacy Policy periodically. Any changes will be communicated by posting a revised Privacy Policy on this page. We will also notify you via email and/or a noticeable announcement on our Service before changes take effect.

You are encouraged to review this Privacy Policy periodically for updates. 

Changes become effective upon posting.

Contact Us

If you have any questions regarding this Privacy Policy, please reach out to us by email: info@citycarrier.com