Trust & safety

1Protected handover — without touching your money

Kifurushi is a platform, not a middleman for money. The carriage fee is agreed and paid directly between sender and traveller — cash, M-Pesa, bank transfer, whatever suits you both — and we take 0%. The protection comes from the record the platform builds around every delivery:

1. Terms agreed on-platform. Fee, weight, contents and dates are confirmed in the match before handover — so there is a written record both sides accepted.
2. A private contents and inspection record. The sender briefly describes the parcel and ticks one box confirming that it contains no prohibited items and can be inspected at handover. At collection, both people inspect and seal the parcel together, then each ticks the inspection confirmation in the dashboard before pickup can be recorded. Contents and handover photos are optional.
3. Coded delivery. The receiver gets a one-time 6-digit code. Entering it at handover is the proof of delivery that completes the record and unlocks reviews.
4. Disputes. If something goes wrong, email hello@kifurushiapp.com and we review the agreed terms, the match chat and the journey updates. Accounts at fault are banned, and the full record is available to the parties for any claim they pursue.

2Identity verification

• • Travellers must pass government-ID + liveness selfie checks before their first carry.
• • Senders confirm a short contents description. Item quantities and values are not required, and photos are optional. This declaration is not an identity or customs verification.
• • Ratings are two-way and immutable. Accounts with confirmed misconduct are banned across all corridors, permanently.

3Inspect-and-seal — travellers never carry unknowns

The single most important rule: the traveller inspects every item, open, in person, with the sender — then both seal the parcel together. Photos are optional. Each person must tick the inspection confirmation in the dashboard to confirm that the parcel was opened, that the contents match the declaration, that it was sealed together and that no safety concern remains. The traveller must be ID verified. Pickup and delivery shortcuts cannot bypass these checks.

Accepted declarations are locked. If the contents change before collection, cancel the match, update the parcel and arrange a new handover. Earlier versions and confirmations remain in the record. Deliveries already collected before these checks were introduced can complete their existing delivery process.

4Prohibited items

Misdeclared contents void platform protection for the sender and are reported where the law requires it.

5Platform security

• • All traffic over HTTPS with strict transport security; strong Content-Security-Policy on every page.
• • Passwords hashed with modern KDFs; sessions are short-lived and revocable.
• • Database access is gated by row-level security — users can only ever read or write their own records.
• • Every input is validated server-side (length, format, allow-lists) before it touches the database.
• • Rate limiting and anomaly detection on login, posting and messaging endpoints.
• • Personal contact details are masked until both sides confirm the match.