Trust & safety

1Protected handover — without touching your money

Kifurushi is a platform, not a middleman for money. The carriage fee is agreed and paid directly between sender and traveller — cash, M-Pesa, bank transfer, whatever suits you both — and we take 0%. The protection comes from the record the platform builds around every delivery:

1. Terms agreed on-platform. Fee, weight, contents and dates are confirmed in the match before handover — so there is a written record both sides accepted.
2. Co-sealed, with photos in the chat. The parcel is inspected open, then sealed together. Photograph it on your own phones and send the pictures in the match chat — messages there are timestamped and cannot be edited or deleted, so both sides have a record they can point to.
3. Coded delivery. The receiver gets a one-time 6-digit code. Entering it at handover is the proof of delivery that completes the record and unlocks reviews.
4. Disputes. If something goes wrong, email hello@kifurushiapp.com and we review the agreed terms, the match chat and the journey updates. Accounts at fault are banned, and the full record is available to the parties for any claim they pursue.

2Identity verification

• • Travellers must pass government-ID + liveness selfie checks before their first carry.
• • Senders verify a phone number always, and full ID for parcels above $200 in declared value.
• • Ratings are two-way and immutable. Accounts with confirmed misconduct are banned across all corridors, permanently.

3Inspect-and-seal — travellers never carry unknowns

The single most important rule: the traveller inspects every item, open, in person, with the sender — then both seal the parcel together. Photograph it on your own phones and send the pictures in the match chat, where they are timestamped and cannot be edited. A traveller who accepts a pre-sealed package carries it as their own at the border — which is why the platform treats it as a bannable offence for both sides.

4Prohibited items

Misdeclared contents void platform protection for the sender and are reported where the law requires it.

5Platform security

• • All traffic over HTTPS with strict transport security; strong Content-Security-Policy on every page.
• • Passwords hashed with modern KDFs; sessions are short-lived and revocable.
• • Database access is gated by row-level security — users can only ever read or write their own records.
• • Every input is validated server-side (length, format, allow-lists) before it touches the database.
• • Rate limiting and anomaly detection on login, posting and messaging endpoints.
• • Personal contact details are masked until both sides confirm the match.