MobileFoods Technologies ("we", "our", or "us") operates the MobileFoods mobile application. We are the Data Controller responsible for your personal data. This policy explains what information we collect, why we collect it, and how we use and protect it, in accordance with the Nigeria Data Protection Act (NDPA) 2023 and its subsidiary regulations, including the General Application and Implementation Directive (GAID). By using the app you agree to the practices described here.
1. Information We Collect
Account information
- Email address and phone number (provided during registration)
- Account type: customer, restaurant owner, or delivery rider
- Profile photo (optional, uploaded by you)
Location data
- Device GPS coordinates — used to find nearby restaurants and calculate delivery fees
- Delivery address — entered by you at checkout
- Rider live location — shared with restaurants and customers during an active delivery only
Order & payment information
- Items ordered, restaurant, amounts, and delivery address
- Payment confirmation reference from Paystack (we do not store card numbers)
- Bank account details for riders and restaurant owners who request payouts
Device & usage information
- Push notification token (to send order status updates)
- Device type and operating system version
2. How We Use Your Information
- Create and manage your account
- Process and fulfil your food orders
- Calculate delivery fees based on distance
- Connect customers with restaurants and riders in real time
- Send push notifications about your order status
- Process payouts to restaurant owners and riders via Paystack
- Detect and prevent fraud or abuse
- Improve the app and resolve support issues
3. Lawful Basis for Processing
Under the NDPA, we process your personal data on one or more of the following lawful bases:
- Performance of a contract — to create your account, fulfil your orders, and process payouts.
- Consent — for optional features such as location access, push notifications, and profile photos. You may withdraw consent at any time.
- Legal obligation — to keep transaction and financial records and comply with applicable law.
- Legitimate interest — to secure the platform, prevent fraud, and improve the service.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy:
- Firebase (Google) — authentication, real-time database, and push notifications. firebase.google.com/support/privacy
- Paystack — payment processing and payouts. Card data is handled entirely by Paystack and never stored on our servers. paystack.com/privacy
- Cloudinary — storage and delivery of restaurant and profile images.
- Google Maps / OpenStreetMap (Overpass) — map display and geocoding delivery addresses.
We enter into data processing agreements with our service providers as required by the NDPA.
5. Data Sharing
We do not sell your personal data. We share information only in these limited cases:
- Between app users: a customer's delivery address and first name are shared with the assigned restaurant and rider to fulfil the order. A rider's phone number is visible to the restaurant for coordination.
- Service providers: our processors (Firebase, Paystack, Cloudinary) receive only the data needed to provide their services.
- Legal requirements: if required by law, court order, or to protect the rights and safety of users.
6. Cross-Border Data Transfers
Some of our service providers (such as Google/Firebase and our hosting provider) store and process data on servers located outside Nigeria, including in the European Union and the United States. Where personal data is transferred outside Nigeria, we take reasonable steps to ensure it is protected by appropriate safeguards and that the recipient provides an adequate level of protection, consistent with the NDPA's cross-border transfer requirements.
7. Location Data
The app requests access to your device's location. Location is used to:
- Show restaurants near you
- Display your position on the map
- Allow riders to share their live position with the customer during delivery
Location data is not collected in the background when the app is closed. Rider location is only shared while an order is in the "picked up" state and stops automatically once the order is delivered.
8. Camera & Photo Library
The app requests camera and photo library access only for:
- Restaurant owners uploading a cover photo for their restaurant listing
- Riders or users uploading a profile photo
Photos are stored securely and are only displayed within the app.
9. Push Notifications
We send push notifications to inform you of order status changes (e.g. "Your order is ready", "Rider is on the way"). You can disable notifications at any time in your device settings. Disabling them will not affect your ability to use the app, but you may miss real-time updates.
10. Data Retention
We retain your account data for as long as your account is active. Order records are kept as a financial audit trail required for payment dispute resolution and legal compliance. If you delete your account, personal profile data is removed within 30 days; order history is anonymised and retained only for legal and accounting purposes.
11. Security
All data is transmitted over HTTPS. Firebase security rules enforce that users can only access their own data. Payment processing is handled entirely by Paystack — we never receive or store raw card numbers or PINs. Payout bank details are stored in Firestore and accessible only to the account owner and our server-side admin SDK.
12. Children's Privacy
MobileFoods is intended for users aged 18 and older and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. Your Rights
Under the Nigeria Data Protection Act, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your account and associated data
- Object to, or request that we restrict, certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time (e.g. location, notifications)
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any of these rights, contact us at the email below. We will respond within 30 days. You may also request deletion directly at /delete-account.
14. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
15. Contact Us & Data Protection Officer
If you have questions about this privacy policy or how we handle your data:
- Data Protection Officer: getmobilefoods@gmail.com
- App: MobileFoods
- Registered business: MobileFoods Technologies
- Location: Ogun State, Nigeria
Supervisory authority: Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng.