Privacy & Trust

Your trust matters to us. This page explains what data we collect, how we protect it, and how to reach us about privacy or security concerns.

What we collect

• Order details: name, phone number, delivery location, and items ordered — used solely to fulfil your order.
• Payment data: M-Pesa transactions are processed by Safaricom. We store the receipt number and the amount for reconciliation. We never see or store your M-Pesa PIN.
• Account data (optional): if you create an account, we store your email and a securely hashed password.

How we protect your data

• All traffic is encrypted in transit (HTTPS).
• Database access is restricted by row-level security policies; only the account that owns a record can read it, and admin tooling is gated behind authenticated admin roles.
• Secrets and payment credentials are stored server-side and are never shipped to the browser.
• Public endpoints expose only the fields needed to browse the catalogue — supplier details, internal IDs, and payment references stay private.

Your choices

• You can request a copy or deletion of your personal data at any time.
• You can update or close your account from the My account area.

Contact

For privacy, data, or security questions, email support.

This page reflects our current practices and may be updated. It is provided as our own statement and is not an independent certification.