Foodma Privacy Policy

Our promise to the Foodma community

Foodma collects only the data required to run a reliable marketplace, and we explain every use clearly. This policy covers everyone who interacts with Foodma products: customers ordering meals, vendors listing kitchens, and delivery riders completing trips.

What we collect and why

We collect personal data directly from you, through device permissions, and from secure third-party partners. Each category below helps us operate specific features.

• Personal information

  Full name, phone number, email address, and optional profile image so we can identify you on the platform.

• Location data

  Precise or approximate location from your device to show nearby vendors, track deliveries, and match riders.

• Account information

  Your selected role (customer, vendor, or rider), verification documents, business details, and account preferences.

• Payment-related information

  Transaction references, payout history, and billing status. Card or bank details are handled directly by Paystack/Flutterwave and never stored by Foodma.

• Device & usage data

  Device model, operating system, app version, log files, and crash reports that help us keep the app stable.

Purpose of processing

• Set up and authenticate Foodma accounts across customers, vendors, and riders.
• Process marketplace orders, deliveries, and secure payments.
• Match delivery riders to nearby pickup or drop-off locations in real time.
• Provide responsive customer support and resolve disputes.
• Improve app performance, recommendations, and product roadmaps based on aggregated insights.
• Detect fraud, enforce platform rules, and maintain security compliance.

Why we need location access

Granting location permission is essential for accurate deliveries. For riders, the Foodma app may ask to access location in the background when you mark yourself as available. Background sharing keeps customers updated on routes even if your screen is off.

• Delivery tracking so customers and vendors can follow a rider on the map.
• Matching riders to the closest delivery requests even when the rider app is running in the background.
• Showing customers curated vendors based on their city or neighborhood.

Who we share data with

We share only the data required to complete an order or comply with applicable laws.

• Vendors receive customer order details (items, delivery address, phone number) to fulfill requests.
• Riders receive pickup locations, drop-off details, and contact information required for each trip.
• Trusted third parties such as Paystack/Flutterwave (payments), Supabase (authentication), Firebase (analytics/notifications), and Crashlytics (app stability).
• Regulators or law-enforcement agencies when legally required to protect Foodma users and comply with NDPR obligations.
• Foodma never sells personal data to advertisers or brokers.

How we protect your information

• Encryption in transit (HTTPS/TLS) and encryption at rest within our databases.
• Role-based access control so only trained Foodma staff can view sensitive data.
• Secure cloud infrastructure hosted in reputable regional data centers with continuous monitoring and backup routines.

While we implement strong safeguards, no digital service is completely risk-free. Please keep your passwords private and enable device-level security such as biometrics or screen locks.

Your controls

Under the NDPR and similar laws, every Foodma user can exercise the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate information straight from the app or through support.
• Deletion: ask us to remove data we no longer need, subject to legal retention rules.
• Consent management: withdraw permission for optional features such as marketing emails or background location.

Contact us through the details below and we will respond within the timelines defined by the NDPR (usually 30 days or sooner).

How to close your Foodma account

• Send an email to support@foodma.co from the address linked to your account, or submit the in-app privacy request form.
• We will verify your identity and confirm whether you want a full account closure or role-specific data removal (customer, vendor, or rider).
• Once approved, we anonymize order history required for financial reporting and delete the remaining personal data within 30 days unless the law requires a longer retention period.

Use by minors

• Foodma services target adults managing food orders, restaurants, and deliveries.
• We do not knowingly collect data from children under 13. If you believe a child has provided information, contact us immediately so we can delete it.

External services

• Our platform may include links to vendor menus, payment gateways, logistics dashboards, or app store listings we do not control.
• Those services follow their own privacy practices. Review their policies before sharing personal information outside Foodma.

Staying informed

• We may revise this policy to reflect regulatory guidance (including NDPR updates), product changes, or new integrations.
• If we make a significant change, we will notify you through the app, email, or banner announcements. Your continued use of Foodma means you accept the updated terms.