At Nuli Nuli Eatery, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, protect, retain and delete your information when you use the Nuli Nuli Eatery mobile application.
By using the app, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
We collect information necessary to create and manage your account, process orders, provide delivery services, communicate with you, improve the application and maintain the security of our platform.
| Data Type | What We Collect | Why |
|---|---|---|
| Account Information | Full name, phone number and account information | Account creation, authentication and order identification |
| Location | GPS coordinates (latitude/longitude) | Calculate delivery distance/fees and assist with delivery address entry |
| Order Data | Items ordered, quantities, delivery address and payment information/status | Process, fulfill and support your orders |
| Device Token | Firebase Cloud Messaging (FCM) token | Send push notifications about orders and relevant app activity |
| Usage Data | App interactions, session information and related technical data | Improve app performance, reliability and user experience |
2. How We Use Your Information
Your information may be used to:
- Process and deliver your food orders
- Calculate delivery distance and applicable delivery fees
- Send real-time push notifications about your order status
- Pre-fill or assist with your delivery address
- Respond to customer support inquiries
- Improve the app's performance, reliability and features
- Maintain the security and integrity of our platform
- Detect, prevent and investigate fraudulent or unauthorized activity
- Meet applicable legal, accounting and regulatory obligations
We do not sell, rent or trade your personal information to third parties for their own marketing purposes.
3. Location Data
The app may request access to your device's GPS location to help calculate delivery distance and assist with entering your delivery address.
- Location is accessed when you use features that require it, such as the Cart or Checkout screen.
- We use device-native geocoding where applicable; your coordinates are not intentionally sent to a third-party mapping API for geocoding.
- Your last known delivery coordinates may be saved locally on your device for convenience.
- You can deny location permission and continue using the app by entering your delivery address manually where supported.
- You can revoke location permission at any time through your device settings.
4. Third-Party Services & Data Sharing
We use trusted third-party services that help us operate and maintain the Nuli Nuli Eatery app. Certain information may be processed by these providers as necessary to provide their respective services.
| Service | Purpose |
|---|---|
| Firebase / Google | Authentication, Firebase Cloud Messaging (FCM), crash reporting/analytics and related app services. |
| Pesapal | Secure processing of payments, including supported mobile money and card payment methods. |
| Nuli Nuli backend services | Account management, order processing, delivery information and rider/order dispatch operations. |
Each third-party service may have its own privacy policy and terms governing how information is processed by that service.
We do not permit third-party service providers to use your personal information for their own unrelated marketing purposes where we control that information.
5. Data Storage & Security
Your information is stored and processed using systems used to operate the Nuli Nuli Eatery service. We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure or destruction.
- HTTPS/TLS encryption for data transmitted between the app and our servers
- Secure database access and parameterized queries to reduce the risk of SQL injection
- Firebase Authentication for account authentication and management
- Access controls intended to limit access to personal information to authorized systems and personnel
- Local information such as delivery coordinates and preferences may be stored on the device using Android/iOS local storage mechanisms
Although we take reasonable measures to protect your information, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.
6. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account information: Retained while your account remains active and until it is deleted, subject to applicable legal or regulatory requirements.
- Order records: May be retained for up to 2 years for accounting, customer support, legal, tax, audit, fraud-prevention and legitimate business purposes.
- FCM/device tokens: Updated as necessary and removed when no longer required for notifications or when your account is deleted.
- Location information: Location information stored locally on your device is controlled by your device and may be removed by uninstalling the app or clearing its local data. Location information associated with your account is deleted when your account deletion is completed, where stored by us.
7. Account Deletion
You can permanently delete your Nuli Nuli Eatery account directly from within the mobile application.
If you no longer have access to the Nuli Nuli Eatery app, you can also request account deletion through our external account deletion page.
Request Account DeletionWhen your account deletion is completed, we delete personal information associated with your account, including:
- Profile and account information
- Name, phone number and email address
- Saved delivery addresses
- Account preferences
- Location information associated with your account
- FCM/device notification tokens and associated notification identifiers
- Other personal account information associated with your Nuli Nuli Eatery account
Order records: Order records may be retained for up to 2 years where necessary for accounting, customer support, legal, tax, audit, fraud-prevention or other legitimate business purposes. After the applicable retention period, such records are permanently deleted or securely disposed of where applicable.
For deletion requests submitted through the external deletion page, we may verify account ownership before completing the request. External deletion requests are reviewed and processed within 7 business days.
8. Your Rights
Subject to applicable law, you may have the right to:
- Access — request information about the personal data we hold about you
- Correction — request correction of inaccurate or incomplete information
- Deletion — request deletion of your account and personal information
- Portability — request your personal information in a suitable machine-readable format where applicable
- Notification controls — disable push notifications through your device settings
To exercise these rights or ask questions about your personal information, please contact us using the details in Section 11.
9. Children's Privacy
The Nuli Nuli Eatery app is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
If you believe that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete that information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, data practices, legal requirements, operational needs or regulatory obligations.
When we make changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to remain informed about how we handle your information.
11. Contact Us
If you have questions, concerns, requests or complaints regarding this Privacy Policy or how Nuli Nuli Eatery handles your information, please contact us: