Terms of Service and Privacy Policy

Dabba is an intermediation platform that connects private individuals who need to send parcels (Clients) with private individuals already travelling and willing to carry them (Drivers).

Dabba is neither a carrier nor a courier. It does not perform transport itself and is not a party to the transport contract between Client and Driver.

The service is available to users resident in Italy who are of legal age and hold a valid identity document.

To use Dabba you must create an account by providing:

• First and last name, phone number, date of birth and Italian tax code (codice fiscale)
• A valid email address
• For drivers: vehicle details and a self-declaration (valid ID, licence and insurance)

The user is responsible for the accuracy of the information provided and for keeping their access credentials confidential.

• Correctly declare the contents, weight and value of the parcel
• Not send prohibited items (see section 5)
• Package the parcel adequately for transport
• Be available for pickup at the agreed times
• Pay the amount agreed with the Driver through the platform

The Client is liable, both civilly and criminally, for false declarations about the contents of the parcel.

• Carry out the transport with care and diligence
• Not open, damage or withhold the parcel
• Respect the pickup and delivery times
• Promptly report any delays or problems
• Hold a valid driving licence and a vehicle insured for the declared use

It is strictly forbidden to send via Dabba:

• Weapons, ammunition and potentially dangerous items
• Narcotic, psychotropic or illegal substances
• Live animals
• Cash, credit cards, securities
• Dangerous goods (flammable, explosive, corrosive)
• Prescription medicines without documentation
• Any goods whose shipment is prohibited by Italian law

Violation of this article results in the immediate suspension of the account and reporting to the competent authorities.

Payments are processed by Stripe, a PCI-DSS certified provider. Dabba never sees or stores your card details.

The amount paid by the Customer stays with Dabba until the shipment is completed: it does not go straight to the Driver.

• Delivery completed: once the recipient gives the delivery PIN, the Driver is owed 80% of the amount, paid out after 5 business days. Dabba keeps 20% as a service fee.
• Cancelled before pickup: full refund to the Customer, issued immediately; it usually arrives within 5–10 business days.
• Parcel picked up but not deliverable: the Driver must bring it back to the Customer. The full refund is issued only when the Customer has the parcel back and gives the Driver the return PIN. In this case the Driver receives nothing.

Dabba is not responsible for:

• Damage, loss or theft of the parcel during transport
• Delivery delays
• Misconduct by Clients or Drivers
• Service interruptions due to force majeure

Dabba's maximum liability is limited to the amount of the fee received for the transaction. We recommend separately insuring high-value parcels.

After each completed shipment, the Client can leave a rating (from 1 to 5 stars) for the Driver. Ratings are public and contribute to the Drivers' reputation on the platform.

Leaving false, intimidating or bad-faith ratings is prohibited.

Dabba may suspend or close an account in case of:

• Breach of these Terms
• Fraudulent or abusive behaviour
• Repeated negative ratings
• Prolonged inactivity (over 24 months)

You can delete your account at any time in the app (Profile → Delete account). Deletion is immediate: we erase your profile, vehicles, trips, documents, photos, notifications and devices. Completed shipments are kept for tax purposes in anonymous form, without addresses, coordinates or email. If you have shipments in progress or payouts still due, you can delete your account once they are completed.

Data controller

Wajdi Saidani — Viale Cavalieri di Vittorio Veneto 43, 22070 Cirimido (CO), Italy. Email: privacy@dabba.it. We answer requests about your data within 30 days.

What data we process

• Account: first and last name, email, phone, date of birth, tax code, profile photo (optional), language, referral code. If you sign in with Apple or Google, we receive your name and email from them (including Apple's anonymous address).
• Shipments: pickup and delivery addresses and coordinates, weight, type and value band of the parcel, parcel photo, recipient email, codes and PINs, shipment status, reviews.
• Chat: messages are end-to-end encrypted on your device: Dabba cannot read their content.
• Drivers: vehicle and number plate, VAT number if any, the self-declaration they accepted (text, language and date) stating that they hold a valid ID and, for motor vehicles, a valid licence and insurance, published trips, GPS location during shipments in progress.
• Payments: handled by Stripe. Dabba only receives amounts, outcomes and transaction IDs; drivers' IBANs are collected and held by Stripe.
• Notifications and support: device token for push notifications, notifications in your inbox, messages to support and reports.
• Consents: date you accepted the Terms and your newsletter choice.
• Technical data: system logs and app error reports, without data that identifies you.

Why we process it and on what legal basis

• To provide the service (account, shipments, payments, refunds, payouts, notifications and service messages): performance of the contract (Art. 6(1)(b) GDPR).
• To verify drivers' identity and eligibility, keep deliveries safe and prevent fraud and abuse: performance of the contract and legitimate interest (Art. 6(1)(b) and 6(1)(f)).
• To comply with tax and accounting obligations: legal obligation (Art. 6(1)(c)).
• To send you our newsletter with offers and news: only with your consent (Art. 6(1)(a)), which you can withdraw at any time in Profile → Notifications.
• To fix bugs, improve app stability and defend our rights in case of disputes: legitimate interest (Art. 6(1)(f)).

We do not profile you and we do not make decisions based solely on automated processing. Prices suggested to drivers are only indicative.

Name, email, phone, date of birth and tax code (and, for drivers, the self-declaration) are needed to use Dabba: without them we cannot provide the service. The newsletter is optional.

Who we share data with

With the other users of a shipment, only what is needed: the driver sees the sender's name and the pickup and delivery addresses; sender and recipient see the driver's name, photo, rating, vehicle and location during transport; the recipient receives the shipment code and the delivery PIN.

Anyone with the tracking link (dabba.it/traccia), which the sender or recipient can share, can see without signing in the shipment status, the departure and arrival cities, the driver's first name, rating and vehicle, and their location during transport. The link stops working 48 hours after delivery or cancellation.

With the providers that run Dabba, appointed as data processors (Art. 28 GDPR):

• Supabase — database, sign-in and files (servers in Ireland, EU)
• Stripe — payments, refunds and payouts
• Resend — sending emails
• Google — maps, Google sign-in, push notifications on Android (Firebase)
• Apple — Apple sign-in, push notifications on iPhone
• Komoot (Photon) — address suggestions (Germany)
• Sentry — app error reports (EU)
• Vercel — hosting of dabba.it and of the admin panel

Some of these providers may process data in the United States: transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses. We do not sell your data or use it for third-party advertising; we disclose it to authorities only when required by law.

How long we keep it

• Account data: as long as the account exists; erased immediately when you delete it.
• Shipments and payments: 10 years for tax purposes (Art. 2220 Italian Civil Code); after account deletion only in anonymous form.
• Drivers' self-declaration: as long as the account exists. Any documents uploaded in the past: rejected application, 30 days after the decision; approved, as long as the account exists.
• GPS location: shared only during shipments in progress; the delivery point is kept as proof of delivery.
• Inbox notifications: 90 days.
• Newsletter: until you withdraw consent.
• Error reports: up to 90 days.

Your rights

You can ask for access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest and withdraw consent at any time. Much of this you can do directly in the app:

• Profile → Personal details: edit your data
• Profile → Notifications: newsletter on or off
• Profile → Download my data: get all your data by email in one file
• Profile → Delete account: immediate deletion

For anything else write to privacy@dabba.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.

Security and minors

Data is encrypted in transit; chats are end-to-end encrypted; parcel photos are private and visible only to the Dabba team; pickup, delivery and return PINs are checked on the server. Dabba is for adults only: we do not knowingly collect data from anyone under 18.

The dabba.it website uses only technical cookies needed for it to work: no profiling, analytics or third-party advertising cookies. The app stores on your device only what it needs to work (sign-in session, language, preferences).

The Dabba trademark, the logo, the source code and the app's contents are the exclusive property of Dabba. Any unauthorised reproduction or use is prohibited.

These Terms are governed by Italian law. The competent court is that of the Consumer's place of residence (Legislative Decree 206/2005).

Before bringing a claim before the courts, the parties undertake to attempt an amicable resolution by contacting supporto@dabba.it.

Dabba reserves the right to modify these Terms. Changes will be communicated with at least 15 days' notice via in-app notification or email.