Privacy Policy

1. Who we are

FoodIt is a food ordering and delivery service operated by Ronawa Technologies in Kenya. This policy explains what personal data we collect when you use the FoodIt app, why we hold it, and who else sees it. It sits alongside our Terms of Service.

We are the data controller for the information described here. For anything in this policy, contact info.fooditapp@gmail.com.

2. What we collect

Only what the service needs to work. There is no advertising, no profiling, and no analytics or tracking SDK in this app.

When you sign up: your phone number, your name, and a password we store only as a hash — we never hold the password itself. We also record the moment you accepted the Terms of Service and the version you were shown.

To verify your number: a one-time code we text you, and how many times it was entered.

To let you order: the zone you chose, your saved delivery addresses (a registered building, your house or unit number, and a label like 'Home'), and any building you have asked us to add, in the words you described it in.

When you order: what you ordered and what it cost, the vendor, the runner who took it, the delivery address, the pickup and delivery codes, and the times each step happened. If an order is cancelled we keep the reason.

When you pay: the M-Pesa number you paid from — which may not be the number on your account — the amount, whether it succeeded or why it failed, and the M-Pesa confirmation code. If you pay our paybill by hand, we also keep the M-Pesa confirmation message you paste, so we can match it to our statement. We never see or store your M-Pesa PIN; you enter that on Safaricom's own prompt.

After a delivery: the rating and comment you leave about the runner.

If you allow notifications: a token identifying your handset, its platform, and when it was last seen, so a message can reach that device.

We do not collect your location. Delivery works from the building and unit you type in, and the app asks for no location permission.

If you are a vendor or a runner, we also hold your business name and pickup building, or your online status and rating, and the wallet entries that make up your earnings.

3. Why we hold it

Your phone number and password identify you and let you back in. The one-time code proves the number is yours.

Your zone, addresses and order details are how food gets found, cooked and carried to your door — a runner on foot has your building name, landmark and unit number, and nothing else to go on.

Payment records are how we know an order was paid for, how vendors and runners get paid, and how we answer you when something goes wrong with money.

Ratings tell other customers, and us, how a runner is doing.

Order, payment and payout records are also our accounting records and our evidence in a dispute, which is why they outlive an order.

We hold this to provide the service you asked for, to meet our legal and tax obligations, and to keep the platform safe from fraud and abuse. We do not sell your data, and we do not use it for advertising.

4. Who else sees it

The people your order involves. A vendor sees what was ordered and the pickup code. A runner sees the order, your name, your delivery address and your phone number, so they can reach you at the door — they get this when they take the job, and they should not use it for anything else. You see your runner's name and rating.

Our staff, through an internal admin console, where they need to approve vendors and runners, register buildings, investigate a problem with an order, or answer a support request.

Three services we depend on:

• Africa's Talking, which sends the SMS with your verification code — it receives your phone number and that message. • Safaricom (M-Pesa Daraja), which takes the payment — it receives the number being charged and the amount, and tells us the outcome. Your PIN stays with Safaricom. • Google (Firebase Cloud Messaging), which delivers push notifications — it receives your device token and the message.

Each handles that data under its own terms and privacy policy.

We may also disclose data where the law requires it, or to establish or defend a legal claim. Otherwise we do not share it, and we never sell it.

5. Where it is kept, and for how long

Your data is held on our servers and in the databases behind them. Dish photos and other uploaded images may be stored with a cloud storage provider. Some of the services in section 4 may process data outside Kenya.

On your own phone the app stores your sign-in tokens and a few settings, so you stay signed in. Signing out clears them.

We have not yet set retention periods for each kind of record. Today the practical position is: verification codes are usable for five minutes and are kept only briefly; account, order, payment and payout records are kept for as long as the account exists and after that for as long as tax and accounting rules require. We will publish specific periods in a future version of this policy.

Closing an account does not erase the orders and payments already recorded against it — those are records of transactions that happened, and both we and the vendors and runners involved need them.

6. How we protect it

Traffic between the app and our servers is encrypted. Passwords are stored hashed, never in the clear. Sign-in tokens are short-lived and rotate. Sign-up, sign-in and code requests are rate-limited so someone cannot work through numbers or passwords in bulk.

Access to the admin console is limited to staff who need it.

Pickup and delivery codes are the one thing you hold that we cannot protect for you: give the delivery code to a runner only once your food is in your hands.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.

7. Your rights

Under Kenya's Data Protection Act you can ask us to: tell you what data we hold about you and give you a copy; correct anything wrong; delete data we no longer have a reason to keep; or stop using it in a particular way.

You can change your name, phone number and delivery addresses yourself in the app, and turn notifications off in your phone's settings at any time.

You can close your account yourself, in the app: Account → Delete account. It asks for your password, then removes your name, phone number, saved addresses, notifications and devices, and signs you out everywhere. Your phone number is released, so you can sign up again with it later if you want to.

Two things stop an account closing, and both are temporary: an order still in progress, and money still owed to you in a vendor or runner wallet. The app tells you which, and you can close the account once it's resolved.

As noted in section 5, orders and payments already made are kept — they are the vendor's and the runner's record of work they were paid for, and our accounting. The name on those past orders stays as it was when you placed them; your phone number does not.

If you would rather not use the app, or no longer have it installed, you can ask us to close your account at info.fooditapp@gmail.com, or through the form on our website. For any of the other requests above, contact info.fooditapp@gmail.com and we will action it.

If you are not satisfied with how we have handled a request, you can complain to the Office of the Data Protection Commissioner.

8. Children

FoodIt is not for children. You need to be old enough to enter into a contract and to hold the M-Pesa line you pay from. We do not knowingly collect data about children, and we will delete it if we find we have.

9. Changes to this policy

This policy ships inside the app, so a new version reaches you with an app update. The version in force is the one shown at the top of this screen.

If we change how we use your data in a way that matters, we will say so in the app rather than quietly changing the text here.

10. Contact

Questions about this policy, a request about your data, or a complaint: contact info.fooditapp@gmail.com.

FoodIt is operated by Ronawa Technologies.