Privacy Policy

Information we collect

When you create an account or place an order, we collect:

• Your phone number, which doubles as your login — we send a one-time code to it by SMS to verify it's really you
• Your name, email, delivery state, and delivery address, if you add them to your account
• Your order history: what you ordered, when, and its delivery status
• Payment confirmation details for each order (amount, reference number, and status) — not your card number, which we explain below

We also keep a cart of what you've added before checkout, but that lives in your browser's local storage on your device, not on our servers, until you actually place an order.

If you turn on order-update notifications from your Account page, your browser gives us a subscription reference for that device so we can send you a notification when your order status changes. Turning notifications off, or deleting your account, removes it.

How we use it

• To take, prepare, and deliver your order to the right address by the right morning
• To verify your identity when you sign in, using the one-time code sent to your phone
• To contact you about an order — delivery updates, a problem with payment, or a question from the kitchen
• To keep the service working: fraud prevention, rate-limiting abuse of the sign-in system, and basic troubleshooting

We do not sell your information, and we do not use it for advertising.

Who we share it with

A short list, because it's a short list:

• Paystack, to process payment. When you pay, your card or bank details go directly to Paystack — we never see or store them. We only receive confirmation that a payment succeeded, for how much, and a reference number.
• Termii, to deliver the SMS containing your one-time sign-in code.
• Our hosting and infrastructure providers, who store the data described above on our behalf and don't use it for their own purposes.

We don't share your information with anyone else.

Cookies

We use exactly one cookie: a session cookie that keeps you signed in, valid for 30 days or until you log out, whichever comes first. It's marked httpOnly and secure, meaning it can't be read by page scripts and is only ever sent over an encrypted connection. We don't use advertising or third-party tracking cookies.

How long we keep it

We keep your account and order history for as long as your account is active, and for a reasonable period afterward for legitimate business and legal purposes — for example, resolving a payment dispute or keeping records tax law requires us to keep.

You can suspend or delete your own account any time from your Account page. Suspending keeps everything as-is and just blocks sign-in until you contact us to lift it. Deleting also clears your name, email, and saved address immediately — your order history is kept for the business/legal reasons above, but is no longer tied to any personal details beyond what a given order itself recorded at the time.

Your rights

• You can see and update your name, email, state, and address any time from your Account page
• You can ask us what personal data we hold about you
• You can suspend or delete your own account any time — see above
• You can log out of your account at any time from the menu in the top-right corner

These rights come from Nigeria's Data Protection Act, which governs how businesses like ours handle personal data.

Security

We use industry-standard practices to protect your information — encrypted connections, secured sign-in cookies, and access controls on our systems. No system is perfectly secure, but we take reasonable steps to keep your data safe and will let you know if something ever goes wrong that affects you.

Changes to this policy

If we make a meaningful change to how we handle your information, we'll update the date at the top of this page. Significant changes will be communicated more directly — for example, by SMS or on the site.

Contact us

Questions about this policy or your data? Message us on WhatsApp from your Account page. For special orders, feedback and enquiries, email us at [email protected].