Privacy Policy

1Who We Are

Fasdex ("we", "us", "our") is a food delivery platform operating in Nigeria. We connect customers with local restaurants and provide earnings opportunities for delivery riders.

Our registered business website is fasdex.ng. For all privacy matters, contact us at privacy@fasdex.ng.

This Privacy Policy applies to all Fasdex mobile applications and the Fasdex admin portal.

2Apps Covered by This Policy

This policy covers the following applications:

Each app collects different categories of data appropriate to the user's role on the platform. Where a section applies to only certain apps, the relevant app is labelled.

3Data We Collect

3.1 Account & Identity Data

• Full name
• Email address
• Phone number
• Profile photo (optional)
• Encrypted password (managed by Supabase Auth — we never see plaintext passwords)

3.2 Delivery Address & Location

• Delivery addresses you enter (street, city, landmark)
• Precise GPS coordinates when you place or track an order (Customer)
• Restaurant location coordinates (Restaurant)
• Real-time GPS location while on an active delivery shift (Rider)

3.3 Order & Transaction Data

• Order history, items ordered, quantities, special instructions
• Order status and timestamps
• Payment amounts and transaction references
• Delivery earnings and payout history (Rider & Restaurant)

3.4 Payment Data

• Payment is processed by Paystack. We do not store your card number, CVV, or bank details on our servers.
• We retain only the transaction reference, amount, and status provided by Paystack after payment.

3.5 Restaurant & Menu Data

• Restaurant name, description, category, and operating hours
• Menu items, descriptions, prices, and food photos you upload
• Bank account or wallet details for payouts (stored securely, used only for disbursements)

3.6 Rider Registration Data

• Government-issued ID document (for identity verification)
• Vehicle type and details
• Bank account details for earnings payouts
• Profile photo

3.7 Device & Technical Data

• Device type, operating system, and version
• App version
• Firebase Cloud Messaging (FCM) token for push notifications
• Crash reports and error logs (collected via Sentry — anonymised where possible)
• IP address (collected by our backend infrastructure)

3.8 Images & Media

• Photos you upload for your profile picture
• Food and menu photos uploaded by restaurant owners
• ID document photos submitted by riders during registration

Images are stored securely in Supabase Storage with access controlled by row-level security policies.

4How We Use Your Data

We do not use your data for targeted advertising or sell your data to third parties.

5Location Data

5.1 Customer App — Foreground Location Only

We request access to your precise location when you open the app to auto-fill your delivery address and to show you nearby restaurants. Location is only accessed while the app is open (foreground). We do not track your location in the background.

5.2 Restaurant App — Foreground Location Only

We request location to set or verify the restaurant's pickup coordinates on the map. This is done once during setup or when you update your location. We do not track you continuously.

5.3 Rider App — Background Location During Active Shifts

Background location is used exclusively to:

• Match you with nearby delivery orders
• Show customers live tracking of their delivery
• Verify delivery completion for earnings calculation

Location data is transmitted to our servers only while a shift is active. When you go offline, location transmission stops immediately.

We do not share your real-time location with any third party other than the customer whose order you are delivering (and only for that delivery's duration).

6Payments

All payment transactions in the Fasdex Customer App are processed by Paystack (paystack.com), a PCI-DSS compliant payment processor licensed in Nigeria.

When you make a payment:

• Your card or bank details are entered directly into Paystack's secure interface — they never pass through Fasdex servers.
• Fasdex receives only a transaction reference and status (success/failed) from Paystack.
• Paystack's privacy policy applies to the data they process: paystack.com/privacy

For restaurant and rider payouts, we collect bank account numbers solely for the purpose of disbursing earnings. This information is stored encrypted and accessed only by our payment processing system.

7Notifications & Device Data

We use Firebase Cloud Messaging (FCM) by Google to deliver push notifications. FCM requires a device token, which we store against your account. We use this only to send you Fasdex notifications — order updates, delivery status, new order alerts for riders, and support replies.

You can disable push notifications at any time from your device's system settings. Disabling notifications does not affect your ability to use the app, but you may miss time-sensitive order updates.

Google's FCM privacy terms apply: firebase.google.com/support/privacy

Crash Reporting

We use Sentry to collect crash reports and error logs to help us fix bugs. Sentry may collect device type, OS version, app version, and a stack trace of what the app was doing when it crashed. Sentry data is anonymised where possible and is used solely for improving app stability.

Sentry's privacy policy: sentry.io/privacy

8How We Share Your Data

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

8.1 Within the Platform

• Your name and delivery address are shared with the restaurant fulfilling your order and the rider delivering it.
• Your real-time location (rider) is shared with the customer whose order is being delivered — only during the active delivery.
• Restaurant menu and details are visible publicly on the platform to customers.

8.2 Service Providers

All service providers are contractually bound to process data only on our behalf and in compliance with applicable law.

8.3 Legal Requirements

We may disclose your data if required to do so by Nigerian law, court order, or regulatory authority.

8.4 Business Transfers

If Fasdex is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice in the app before your data is transferred and becomes subject to a different privacy policy.

9Data Retention

• Account data — retained while your account is active and for 90 days after deletion to allow recovery.
• Order history — retained for 3 years for legal and financial compliance.
• Payment records — retained for 7 years as required by Nigerian financial regulations.
• Location data — real-time rider location is not permanently stored. Route summaries per delivery are retained for 90 days then deleted.
• Crash logs — retained in Sentry for 90 days.
• Identity documents (riders) — retained for the duration of your active rider status, and for 1 year after account closure.

You may request deletion of your account and personal data at any time by contacting us at privacy@fasdex.ng. Some data may be retained longer where required by law.

10Your Rights

Under applicable Nigerian data protection law (NDPR) and general data protection principles, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data (subject to legal retention requirements).
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing of your data for direct marketing or certain other purposes.
• Withdraw consent — where processing is based on consent (e.g., location access), you may withdraw consent at any time through your device settings.

To exercise any of these rights, email privacy@fasdex.ng with your request. We will respond within 30 days.

11Data Security

We take reasonable and appropriate technical and organisational measures to protect your data, including:

• All data is transmitted over HTTPS/TLS encryption.
• Our database (Supabase) enforces Row-Level Security so users can only access their own data.
• Passwords are hashed using industry-standard algorithms — we never store plaintext passwords.
• Payment card details are never processed or stored on our infrastructure.
• Access to production systems is restricted to authorised team members only.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects you, we will notify you within 72 hours of becoming aware.

12Children's Privacy

Fasdex is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@fasdex.ng and we will delete it promptly.

13Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send an in-app notification or push notification to all users.
• For significant changes, request your acknowledgement within the app before you continue using it.

Continued use of the Fasdex apps after changes take effect constitutes your acceptance of the updated policy.

14Contact Us