Last updated: July 17, 2026
CarryOn is a peer-to-peer platform connecting travelers with people who need to send packages. Your privacy and security are our priority.
By using CarryOn, you accept: (1) To be at least 18 years old, (2) To provide truthful and up-to-date information, (3) Not to publish illegal, offensive or prohibited content, (4) To comply with all local and international shipping and customs laws, (5) To be responsible for your own transactions with other users.
CarryOn acts ONLY as a connection platform between users. We are NOT responsible for: loss, damage or theft of packages; fraud or non-compliance between users; illegal content transported without our knowledge; legal or customs disputes; injuries or damages resulting from encounters between users. Transactions are exclusively between private users.
Each user is TOTALLY RESPONSIBLE for: verifying the identity and reliability of the other user; correctly declaring package contents; complying with customs and import laws; insuring their own valuables; coordinating deliveries in safe places; any legal consequences of their shipments.
In no event shall CarryOn, its directors, employees or affiliates be liable for direct, indirect, incidental, special, consequential or punitive damages arising from the use of the platform. Use is at your own risk.
We collect personal information (name, email, phone, birthdate, nationality, address), trip and package information, transaction/subscription status, messages between users, photos you upload, and security reports. We do not collect precise or approximate location, and we do not collect any government ID or document numbers.
We use your data to facilitate connections between users, verify identities, process subscription payments (via Google Play Billing and RevenueCat), improve our services, investigate security reports, serve ads (via Google AdMob, personalized only with your consent), and comply with legal requirements.
We share limited data with service providers who help us operate CarryOn, each bound by their own data protection obligations: Supabase (database and backend infrastructure, hosted in the European Union), RevenueCat and Google Play Billing (subscription purchases), Google AdMob (advertising, using your device's advertising ID — personalized only with your consent), and Brevo (transactional emails, such as delivery verification PINs). We do not sell your personal data.
We implement encryption of data in transit and at rest, secure authentication, constant security monitoring, regular information backup, and protection against unauthorized access.
We process your personal data based on: performance of our contract with you (to provide the CarryOn service), your consent (for marketing communications and personalized ads), our legitimate interests (fraud prevention, platform security, and service improvement), and compliance with legal obligations we are subject to.
We keep your personal data only as long as necessary to provide the service and meet legal obligations. When you delete your account, your personal data is anonymized and your active trips and packages are cancelled; conversations and reviews you were part of remain visible to other participants but no longer show your identity. Some records may be kept longer where required by law, such as for fraud prevention or tax obligations.
Our core database is hosted in the European Union. Some service providers, such as Google and RevenueCat, may process data outside the EU/EEA, including in the United States. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider's own certified compliance framework.
Depending on where you live, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data (the "right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing relies on it. You can exercise most of these rights directly in the app (Profile → Export My Data / Delete Account), or by contacting us at legal@carryon.com.
If you are located in the European Economic Area and believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.
CarryOn is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.
CarryOn is available to users worldwide. Wherever you are located, we apply the same data protection practices described in this policy. If your local law grants you additional rights, we will honor them — contact us at legal@carryon.com with any request.
NEVER send prohibited items. ALWAYS verify the identity of the other user. Use ONLY the in-app chat. CORRECTLY declare package contents. ADEQUATELY secure packages. Meet in PUBLIC PLACES. Report any SUSPICIOUS ACTIVITY.
Illegal substances or drugs; weapons, explosives or ammunition; dangerous, toxic or flammable materials; cash, checks or negotiable instruments; official identity documents; stolen or illegally obtained items; counterfeit products; pornographic or illegal material; live animals; human organs or tissues.
CarryOn reserves the right to: suspend or delete accounts that violate the terms; remove inappropriate or suspicious posts; investigate user reports; cooperate with authorities in case of illegal activity; modify these terms at any time.
Disputes between users must be resolved directly between them. CarryOn can facilitate communication but will not arbitrate or resolve conflicts. Any legal dispute with CarryOn will be resolved through binding arbitration.
For legal or privacy inquiries: legal@carryon.com