Policy wey concern privacy

1. Wetin this one cover

Ghar Dabba dey run three mobile app and this website: the buyer app for ordering tiffin, the Ghar Dabba Seller app for home kitchens, and the Ghar Dabba Delivery app for delivery partners. This policy dey apply to all of them, and to ghardabba.com. Na Ghar Dabba dey decide which data dem dey collect and why, so na im be the data fiduciary for the information wey dem describe here.

Every app get im own privacy notice wey dem dey show before you sign in, and every app only dey touch the data wey im own role need.

2. Information wey we dey collect

Everybody

• Phone number — na im be your identity for sign-in. We dey verify am with one-time password and we dey keep the number for your account.
• Name — the one wey you put for your profile.
• Account role and status — buyer, kitchen, or delivery partner, and whether application dey pending, dem don approve am, or dem don suspend am.
• Push notification token — check section 5.
• Location wey you allow us to see — check section 4.

Buyers

• Delivery address wey you don save: label, name of the person wey go receive am, contact number, address line, area, city and the map coordinates of that address.
• Orders: the items and slots wey you choose, how many, the amount wey dem charge you, how you pay and delivery status.
• Tiffin plans wey you subscribe to, including the history of when you pause and start am again.
• Rating and written review wey you leave for one kitchen.

Kitchen owners

• Owner name, contact number, and the kitchen name, area, city, postal code, door number and street, and map coordinates.
• Wetin you dey cook and how you dey sell am: menu items, prices, cooking time, service radius, how you dey deliver, packaging and delivery fee.
• number for your food business licence and the type of government ID wey you get. For kitchens we only dey record the type of ID — we no dey ask for or keep the ID number.
• Photos for verification of the documents themselves, wey you take with your phone camera when you sign up: your food business licence and one government ID. Check section 3 to see who fit see them.
• Images wey you publish: one profile photo of yourself, one brand photo for your kitchen, and photos of your dishes. These ones na part of your shop and buyers dey see them.

Delivery partners

• Name, contact number, base area, city, postal code and street address, and the map coordinates wey you give us.
• Type of vehicle, and your driving licence number if the vehicle wey you use need one.
• Your type and number of government ID (national ID, tax ID, passport, residence permit or driving licence) — check section 3.
• Photos for verification: one government ID, and your driving licence if your vehicle need one. Check section 3 to see who fit see them.
• One profile photo of yourself. Buyers dey see am beside your name and vehicle on the order wey dem ask you to deliver, so dem know who dey for the door; dem no dey show am to anybody outside that order.
• Jobs wey you don complete and the delivery fee wey you earn from them.

Apart from the photos we list above, we no dey collect your contacts, camera roll, microphone, files, or browsing history, and we no dey run advertising or analytics SDK inside any of the three apps, so we no dey build any advertising profile about you.

3. Sensitive personal data, and why we need am

Government ID number and driving licence number na sensitive personal data. We only dey collect them from delivery partners, only when dem dey apply, and only for these purposes: to confirm say the person wey apply na real adult wey person fit identify; to match the person with the vehicle wey e dey ride; and to fit answer accident, theft or police complaint about one particular delivery. Kitchen owners dey give us food business licence number for the same reason — home kitchens must show one where dem dey trade, and buyers dey rely on say e valid.

We no dey ever show these numbers to buyers, we no dey use them for marketing, and we no dey send them to third parties except when law require am. Only give this data if na you the person wey e belong to.

Document photos. Apart from the numbers, kitchen owners and delivery partners dey send us photograph of the same documents: food business licence and one ID for kitchen; one ID and, if the vehicle need am, driving licence for partner. Photograph of ID dey carry pass the number wey we record well well — full name, date of birth, address, photograph, and for national ID the number itself — so we dey treat these images as the data wey get the strongest restriction for your account:

• Dem dey use them for one purpose: to verify say your application na genuine before you fit trade.
• Only you and Ghar Dabba's review team fit see them. Buyers and kitchens no dey ever see them, and dem no dey ever show them for any public page.
• We dey keep them outside the public part of your account record; na through one private link wey dey expire by itself reviewer dey open them.
• Uploading them na optional in the sense say dem no fit approve kitchen or partner wey no get them — but na you dey choose which documents to photograph, and you suppose cover or crop out anything wey we no need to see.

No photograph document wey no be your own. If we no fit verify person wey apply, we dey suspend the application instead of keeping document wey we no get right to hold.

4. Wia you dey

All three apps fit ask your phone for im location, and dem no dey read anything until you grant that permission. We dey use am for one work only: to work out wetin dey near you. Inside the buyer app e dey power "kitchens near you" and e dey help drop pin on your address. Inside the Seller app e dey put your kitchen on map and measure your service radius. Inside the Delivery app na your base area, so the jobs wey dem offer you na ones wey you fit really reach.

We do not dey track you every time, we no dey record where you dey during delivery, and we no dey keep location history. We dey store address and kitchen position one time, as the coordinates wey you confirm. You fit switch location off inside your phone settings anytime; typing address still dey work.

When kitchen owner or delivery partner confirm one pin, we dey send those coordinates to your phone own address lookup — Google own on Android, Apple own on iPhone — make e write the street, area and postal code inside the form for you. Na only that time location dey leave your account go map provider, e dey happen one time when you sign up, and we no dey store anything from the answer except the address text wey you accept. We no dey use any paid Maps product and we no dey keep map search history.

5. Message wey dey come to your phone

We dey send order and job alert as push notifications. To deliver them we dey store one notification token for each device, wey dem link to your account and the role wey you sign in as — seller token no dey ever receive buyer message. The token na random identifier, no be device serial.

When you sign out e dey remove am, and we dey delete tokens wey the notification service report say don die, so dem no go still dey target app wey person don uninstall. Notifications dey on by default because kitchen wey dem no tell about order no fit cook am; you fit turn them off inside your phone settings, but that mean you go get to open the app make you see new orders.

6. How you dey pay

Today dem dey pay for order with cash on delivery, or by UPI direct to the kitchen or delivery partner when dem hand over the food. That na why we do not collect card number, UPI PIN, bank account number, or any other payment credential, and we no dey integrate payment gateway. But we dey keep record of how dem settle each order and whether dem pay am, because na im be the only audit trail wey disputed delivery get.

7. How we dey use your information

• To sign you in, and to keep one account wey tie to one verified phone number.
• To place order with the right kitchen, for the right slot, for the right address.
• To match delivery job to partners wey dem don approve and to record who pick up and drop off wetin.
• To review kitchen and delivery application before anybody fit trade.
• To send you the operational notifications wey you sign up for.
• To calculate platform commission, and to reconcile delivery wey dem dispute.
• To answer support request, and to detect fake order, abuse of review, and account takeover.
• To meet legal obligation, including food-safety, tax and law-enforcement requirement.

8. Who dey see your information

The kitchen wey you order from dey receive your name, contact number, delivery address and wetin dey inside that order, plus your rating of them. Dem no fit see your other orders, address wey you save, or anything else for your account.

The delivery partner wey dey carry your order dey receive the drop name, contact number, address and the amount wey e go collect. E dey see the pickup point for the job wey e claim, and nothing about other jobs. You dey see the same information the other way about that partner — im name, profile photo and vehicle — as long as the order dey with am.

The kitchen door address dey go to the rider, no be to buyers. Inside the buyer app dem dey show kitchen by name, area and city only. The street address and postal code wey kitchen owner confirm when e sign up na the delivery partner wey hold pickup from that kitchen dey read them, so e fit find the gate — and our review team when dem dey check application. Dem no dey ever share partner own base address with buyers or kitchens at all.

Wetin kitchen publish na public. Kitchen brand photo, dish photos and owner profile photo dey appear inside the buyer app and for this website so people fit choose where dem go order from. Remove them from your Shop tab if you no want make dem show them. Photos for verification of your business licence, ID and driving licence na the exception: dem no be part of your public profile and no buyer, kitchen or partner fit open them.

Other kitchens and partners no dey ever see your personal details. Dem dey show rating to kitchen with your first name only.

Our service providers. Ghar Dabba dey run on Google Cloud and Firebase. Google dey process data for us for phone sign-in (Firebase Authentication), the database (Cloud Firestore), server-side functions (Cloud Functions, wey dem host inside the asia-south1 region for India), file storage for the images we describe above (Firebase Storage, inside the same asia-south1 region), push delivery (Firebase Cloud Messaging), and app distribution if you install us from Google Play. Their own terms and data-processing commitments dey bind those providers, and their own privacy notices dey apply to them.

Nobody else. We no dey sell or rent personal data, we no dey share am with advertisers or data brokers, and we only dey disclose am to law enforcement when law compel us, and only the minimum wey dem require.

9. How long we dey keep am, and deletion

As long as your account dey open we dey keep your profile, addresses, orders and role data, because the service no fit work without them. After that:

• Buyers fit delete their account inside the buyer app. That one dey remove your profile and every address wey you save immediately and e dey cancel the plans wey you get with the kitchen.
• Kitchens and delivery partners no get delete button inside the app yet. Ask us at contact@ghardabba.com and we go suspend the account immediately and remove am once any open order, dispute or money wey you owe don settle.
• Photos for verification (business licence, ID, driving licence) dey stay only while your account dey open, and dem dey delete them with am. If dem decline application or dem leave am unfinished, we dey delete im document photos within 90 days from the last activity on am — we no dey hold ID images for people wey we no approve. You fit also ask us to delete one photo anytime; the effect be the same as fresh application, because we need am to keep your account approved.
• Shop and profile photos dey go as soon as you delete them inside the app, and dem dey go with your account. Buyers fit still see them inside browser until dem reload the page.
• Order records dey stay. Order wey dem complete dey keep the name, contact number and address wey dem use for am, because the kitchen and the platform need food-safety and accounting trail, and tax records must stay for years. Deleting your account dey end the link to your login, but dem no dey erase the order itself.
• You fit ask make dem erase am. Write to us with the number wey you register and we go remove or anonymise the remaining copies unless law require us to keep them, and we go tell you which records we no fit delete and why.

10. Rights wey you get

Data protection law dey give you right to: see summary of the data wey we hold about you and know who we receive am from; correct, complete or update am; erase am, under the legal-retention limit wey dey above; withdraw the consent wey you give us anytime; and nominate another person to exercise these rights if you no fit do am.

You fit do most of this yourself inside the app. For anything else, write to contact@ghardabba.com from the phone number wey dey for your account. We dey acknowledge request within two working days and answer within thirty days. You also get right to complain to the data protection authority for the place wey you live, and to the contact wey we name inside section 13.

11. How we dey keep am safe

Traffic between the apps and our servers dey encrypted as e dey travel. Na inside the database itself dem dey enforce access control: dem dey check every read and write against the identity and role wey sign in, buyer no fit read another buyer orders, kitchen no fit approve im own application, and partner fit only claim jobs wey really no get person. The account wey own status, commission and rating field no fit edit them. Administrative access dey limited to small allowlist of verified phone numbers, and dem dey mark every approval and suspension with who do am and when.

Images wey dem upload get their own access rules, separate from the database. Anybody fit read everything wey you publish as part of your shop; only the account wey upload am fit read anything wey dem file as verification document, and our reviewers dey reach am through link wey dey stop work after few minutes. Dem no dey ever give document photo permanent public address.

No system dey wey nobody fit break. Keep your one-time passwords to yourself — anybody wey get the code wey dem send to your number fit sign in as you. Tell us immediately for the address above if you lose phone or you suspect say dem use your account without you.

12. Pikin dem

Ghar Dabba na for adults. Nobody wey no reach 18 suppose create account, and we no dey collect data from children when we know. If you believe say child give us personal data, contact us and we go delete am.

13. Changes, and how you go reach us

When we change this policy we dey update the date for the top and, for material change, we dey announce am inside the apps before e start to work. The current version dey always for ghardabba.com/privacy.

Grievance officer, Ghar Dabba: contact@ghardabba.com . The same address dey handle privacy request, support, and report about kitchen or delivery partner.