Privacy Policy
Last updated 8 September 2026
Lejo is a parcel delivery service operating in Ontario, Canada. This policy describes what the Lejo customer app, the Lejo driver app and our systems collect, why each item is collected, who else processes it, and how you can have your account removed. It is written to describe what the software actually does rather than to reserve rights we do not exercise.
Who is responsible
Lejo Express Inc., Brampton, Ontario, Canada, is responsible for the personal information described here. You can reach us at business@lejoexpress.com with any question about this policy, or to exercise any of the rights below.
What we collect, and why
| Information | Why it is collected |
|---|---|
| Mobile phone number | This is how you sign in. There is no password: we send a one-time code by SMS and you enter it. The number identifies your account and lets a driver and a customer reach each other about a delivery in progress. |
| Name, and email address if you give one | So a driver knows who they are collecting from or delivering to, and so we can send you a receipt. Both are optional. |
| Profile photo, if you add one | Shown to the driver or customer you are matched with. Optional. |
| Pickup and drop-off addresses, contact names at those addresses, and what you are sending | To price the delivery, dispatch a driver, and let that driver find the address and the right person. |
| Location — customer app | Used while you are choosing a pickup or drop-off point, so the map can start near you and addresses can be filled in accurately. The customer app does not collect location in the background. |
| Location — driver app | Collected while you are signed on and working a delivery, including when the app is in the background, so the customer can watch their parcel approach and so jobs can be offered to the nearest driver. The driver app tells you when this is happening with a permanent notification, and it stops when the delivery ends or you go offline. |
| Camera and photographs — driver app | Drivers photograph a parcel at collection and at delivery as proof of what was handed over and in what condition. These photos are attached to the delivery record and shown to the customer for that delivery. |
| Identity and vehicle documents — driver app | Drivers upload the documents their region requires — for example a driving licence and insurance — so we can check that the person carrying a parcel is entitled to. Reviewed by our staff and stored privately; never shown to customers. |
| Payment information | Card payments are handled entirely by Stripe. Card numbers are entered into Stripe's own components and never reach Lejo's servers or our staff. We store the amount, the currency, whether the payment succeeded, and the last few digits Stripe reports so you can recognise the card. Drivers who are paid out provide their banking details to Stripe directly for the same reason. |
| Notification token | An identifier for your device, issued by Google, so we can tell you a driver has been assigned or a parcel has arrived. It is deleted when you sign out or when Google tells us it is no longer valid. |
| Basic usage analytics | Which screens are opened and whether key steps succeed, so we can find what is broken. Collected through Google Firebase Analytics. |
What we deliberately do not do. Neither app shows advertising. We do not collect the advertising identifier on your device — the permission that would allow it is removed from both apps at build time — and we do not sell personal information, share it with data brokers, or use it to build advertising profiles. We do not track you across other companies' apps or websites.
Who else processes your information
We use a small number of service providers. Each receives only what it needs to do its part, and each is bound by its own agreement with us.
- Google (Firebase) — sends the sign-in code by SMS, delivers push notifications, and provides usage analytics.
- Stripe — processes card payments and pays drivers. Stripe is the party that handles card and bank details.
- Supabase — hosts our database, in a data centre in Canada.
- Hostinger — hosts the servers that run the Lejo application.
- Google Maps Platform — turns the addresses you type into map locations and helps drivers navigate.
Some of these providers operate outside Canada, which means your information may be processed in another country and be subject to the laws of that country. We also disclose information where the law requires it, or where it is necessary to investigate a dispute about a specific delivery.
What the other person in a delivery can see
A delivery involves two people, and each needs enough to complete it. While a delivery is active, the driver sees the pickup and drop-off addresses, the contact names given for them, what is being sent, and a phone number for reaching you about that delivery. The customer sees the driver's first name, their vehicle, their live position while the parcel is being carried, and a phone number for reaching them. Neither sees the other's account details, and this access ends when the delivery does.
How long we keep it
Delivery records, and the payment records attached to them, are kept for seven years after the delivery. This is because they are business and tax records: they are what lets us answer a chargeback, settle a dispute about a parcel, and meet our obligations to the Canada Revenue Agency. Proof-of delivery photographs are kept for two years. Driver documents are kept for as long as the driver works with Lejo and for seven years afterwards. Notification tokens and analytics events are kept for fourteen months.
Deleting your account
You can delete your account from inside either app — in the customer app under Profile, and in the driver app under Settings — or by following the instructions at lejoexpress.com/delete-account. That page also explains exactly what deletion removes and what is kept.
In short: deleting your account signs you out everywhere, removes your name and email address, and closes the account permanently. Your phone number and the records of deliveries you have already made or received are kept for the retention periods above, because they are financial records of completed transactions between you and other people. A delivery that is still in progress must finish first.
Your rights
Under Canadian privacy law you may ask us what personal information we hold about you, ask us to correct it if it is wrong, and ask us to delete it. To do any of these, write to business@lejoexpress.com from the email address on your account, or from any address if you tell us the phone number you sign in with. We will respond within thirty days. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.
Children
Lejo is not intended for children. You must be at least 18 years old to hold a Lejo account, whether as a customer or a driver. We do not knowingly collect information from anyone under that age; if we learn that we have, we delete it.
Security
Traffic between the apps and our servers is encrypted in transit. Access to the database and to driver documents is restricted to the small number of people who operate the service. Sign-in uses a one-time code sent to your phone rather than a password, so there is no Lejo password to be stolen or reused. No system is perfect; if a breach affects you, we will tell you and the Privacy Commissioner as the law requires.
Changes to this policy
If we change what we collect or why, we will update this page and change the date at the top. Where a change is significant, we will also tell you in the app before it takes effect.