Privacy
What we know about you, and why
Last updated 20 September 2026
2wingz moves paper documents between people, so it necessarily handles some of the most sensitive information there is: who you are, proof of it, and where a traveler happens to be. This page says exactly what we hold, why, who else sees it, and how long we keep it.
Before publishing: fill in the operator's legal name, postal address and, if one is appointed, the data protection officer's contact details below. Both stores and the GDPR require a real identity and address here, not just an email.
Who is responsible
[LEGAL ENTITY NAME], [POSTAL ADDRESS] — the controller for the personal data described here. Questions, requests and complaints: hello@2wingz.com.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Name, email address, phone number, password (stored only as a hash) | Your account, and letting the other party know who they are meeting | Performance of our contract with you |
| Photographs of your identity document and a live selfie, plus the automatic comparison score between them | Confirming you are who you say you are, before anyone hands you a document or you hand one to a stranger | Our legitimate interest in a network where identity is proven, and where required, legal obligation |
| Shipment details: route, dates, document description, recipient's name and phone number, delivery code | Arranging and completing the delivery | Performance of our contract |
| Photographs you take in the app: the sealed envelope, pickup and delivery, evidence attached to a problem report, your profile picture | Proving what was handed over and in what condition, and settling disputes | Performance of our contract; legitimate interest in preventing fraud |
| Messages between a sender and a traveler | Arranging handovers, and reviewing a complaint if one is made | Performance of our contract; legitimate interest in safety |
| A traveler's location while carrying a document — approximate by default, exact only if they choose | Letting the sender see where their document is | The traveler's consent, given in the app and withdrawable at any moment |
| Payment records: amounts, currency, status and the payment's identifier at our payment provider | Taking payment, paying travelers, refunds and accounting | Performance of our contract; legal obligation to keep financial records |
| Technical records: IP address, device type, timestamps, and an audit trail of actions taken in the app | Keeping the service running, rate limiting, and investigating abuse | Legitimate interest in security |
We never see your card details. Card data goes directly to Stripe; we store only the identifier of the payment and its amount.
Location, specifically
A traveler's location is shared only while a document is in their custody, and only after they switch sharing on. It is off by default. The sender sees an area of roughly a kilometre unless the traveler chooses to share their exact position. When delivery is confirmed, the whole trail is deleted. Nobody's movements are recorded outside a carry.
Who else sees your data
- The other party in a shipment sees your first and last name, your profile picture, your rating, whether you are verified, and the messages you send them. Senders see the traveler's shared location during a carry. Nobody ever sees your identity documents but our review team.
- Stripe (payments), which acts as its own controller for card data.
- Our hosting provider in Germany, where the service and its database run.
- Our email provider, for verification codes and notices.
- Authorities, where the law requires it — for example a court order, or a report of a crime.
We do not sell your data, and we do not use it for advertising or tracking.
Where it is kept
On servers in Germany. Backups, including identity documents, are encrypted before they leave those servers and are stored with a German hosting provider.
How long we keep it
- Location during a carry — deleted when delivery is confirmed.
- Identity documents and verification records — for as long as your account exists, and afterwards only where a law requires it.
- Shipment, payment and audit records — kept for the retention periods accounting and tax law impose, typically several years, in anonymised form once you erase your account.
- Messages and photographs — for the life of the shipment record.
- Backups — the most recent two weeks, then overwritten.
Your rights
You can see, correct, export or delete what we hold. Two of those are buttons in the app, under Account → Privacy & GDPR: Export my data gives you everything we have in one file, and Erase my account anonymises your profile and signs you out immediately.
You also have the right to object to processing based on our legitimate interests, to withdraw consent for location sharing at any time, and to complain to your data protection authority. Write to hello@2wingz.com and we will answer within a month, usually much sooner.
Keeping it safe
- Everything between the app and our servers travels over an encrypted connection.
- Identity documents and photographs are stored separately from the database and are never public.
- Backups are encrypted before they leave the server.
- Only the few staff who review verifications and disputes can see identity documents, and every action they take is recorded.
Children
2wingz is for adults. You must be 18 or older to use it.
Changes
If we change how we handle your data we will update this page and, for anything significant, tell you in the app before it takes effect.