Privacy Policy

• Account: your phone number, your name, and whether you're a customer or vendor.
• Orders: what you ordered, prices, your delivery spot (landmark and note), order times and status. If you tap “Use my exact location” at checkout, we save that location with the order.
• Chat: messages you send in order chats, and any reports you make.
• Ratings and reports you write.
• Payments: Paystack handles card and bank payments. We keep the payment reference and status, never your card details.
• Vendors: shop name, campus and location landmark, menu and photos, and payout bank details (bank, account name and the last 4 digits of the account number; the full number is held by Paystack).
• Device: if you turn on notifications, your browser's push address. We use small cookies and browser storage to keep you signed in, remember your campus, theme and cart.
• Early access list: if you joined before launch, your name, phone number and campus.

• To create your account and sign you in by SMS code.
• To take, deliver, track and support orders, and to process payments, refunds and vendor payouts.
• To send order updates and chat messages (SMS or notifications you turned on).
• To keep AllChow safe and fair: preventing fraud, enforcing chat rules, reviewing reports and strikes.
• To keep financial records we're required to keep, and to improve the service.

We rely on the contract with you (providing the service you asked for), our legitimate interests (safety and fraud prevention), legal obligations (records), and your consent where we ask for it (location, notifications). You can withdraw consent at any time in your phone or browser settings.

• The shop you order from sees what you ordered and where to deliver it. It sees your name and phone number only after it accepts your order, so it can deliver.
• Customers see a shop's name, location landmark, menu and ratings. Reviews show only your first name.
• Service providers who help us run AllChow: Paystack (payments), Supabase (database and sign-in), Vercel (website hosting), Termii (SMS codes) and your browser's push service (notifications). They may only use your data to provide their service to us.
• Authorities, if the law requires it.

Some of these providers store data outside Nigeria. Where they do, we use providers with appropriate safeguards, as the Nigeria Data Protection Act requires.

We keep your account while you use AllChow. Order and payment records are kept as long as Nigerian law requires for financial records. Chat messages and reports are kept to resolve disputes and enforce the rules. When we no longer need data, we delete it or make it anonymous.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• give you a copy of your personal data;
• correct data that is wrong;
• delete your data (except records we must keep by law);
• stop or limit some uses of it, or move it to another service.

Message us using the contact below and we'll respond within the time the law allows. You can also complain to the Nigeria Data Protection Commission.

Your data is protected with encrypted connections and access rules that let each person see only their own orders. Shops can see only their own orders and customers only their own. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

AllChow is for people aged 16 and over. We don't knowingly collect data from younger children.

If we change this policy in an important way, we'll tell you in the app before it applies.