Privacy Policy

KiaKia("KiaKia", "we", "us") is the data controller for personal data processed through our website and apps. We handle personal data in line with the Nigeria Data Protection Act 2023 and other applicable law.

• Account details: your name, email address, password (stored only in hashed form) and, where you give it, phone number.
• Order details: items ordered, delivery address and notes, order history, delivery codes and messages about an order.
• Payment information: payment status, amounts, references and refund or wallet records. Card details are entered with our payment partner, Monnify, and are not stored by KiaKia.
• Location: your delivery address and map position. For riders, live location while online.
• Vendor and rider information: business name, registration and contact details, menu content, bank account details for payouts, and identity or vehicle details needed to verify riders.
• Technical data: device and browser type, IP address, and cookies needed to keep you signed in and remember your selected mode (customer or vendor).

• To create and secure your account, including verifying your email with a one-time code.
• To process orders, take payment, hold it in escrow and pay out vendors and riders.
• To match orders with nearby riders and let you and the rider reach each other about a delivery.
• To send order updates and service messages by email, in-app and push notification.
• To provide support, handle refunds and resolve disputes.
• To prevent fraud, abuse and security incidents, and to meet legal and accounting obligations.
• To maintain and improve KiaKia.

We process data to perform our contract with you (running your account and orders), to meet legal obligations, for our legitimate interests (security, fraud prevention and improving the service) and, where required, with your consent, which you can withdraw at any time.

We do not sell your personal data. We share it only as needed to run KiaKia:

• Vendors see the items, name, notes and delivery details needed to prepare and hand over your order.
• Riders see the pickup and delivery address, your first name and your contact number for the delivery. They do not see your delivery code until you give it to them.
• Service providers acting for us: Monnify (payments and payouts), Supabase (database, authentication and hosting), our email delivery provider, and mapping and push-notification services.
• Authorities and adviserswhere required by law, to enforce our terms, or to protect people's safety and rights.

Some providers process data outside Nigeria. Where they do, we rely on safeguards that the Nigeria Data Protection Act permits, such as contractual protections.

We keep data for as long as your account is active and as long as needed for the purposes above. Financial and order records are kept for the period the law requires, which is generally at least six years. When data is no longer needed we delete or anonymise it.

We protect your data with encryption in transit, hashed passwords, access controls on our database, and verification of your email before an account is activated. No system is completely secure, so please use a strong, unique password and never share your verification code or delivery code except as described in our terms.

You have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data, subject to records we must keep by law;
• object to or ask us to restrict certain processing, and withdraw consent;
• receive your data in a portable format where it applies;
• complain to the Nigeria Data Protection Commission.

To exercise any of these, email [support email address]. We may need to verify your identity first.

We use cookies and similar storage that are necessary for the service: keeping you signed in, protecting your session, and remembering whether you are using KiaKia as a customer or a vendor. You can block cookies in your browser, but parts of KiaKia will not work without them.

KiaKia is not intended for children under 18 using the service on their own. If you believe a child has given us personal data without a parent's consent, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows when it last changed, and we will tell you about significant changes by email or in the app.

KiaKia, [Registered office address]
Email: [support email address]