MlimaGo Privacy Policy

We only collect the information needed to run the service:

• Account details — your name, email address and phone number when you sign up with email or Google.
• Saved addresses — delivery addresses you save, including their map coordinates.
• Order information — the items you order, prices, notes to the restaurant, and the delivery address.
• Ride and parcel details — pickup and drop-off locations, and for parcels the recipient's name and phone number.
• Location data — the pickup or delivery point you choose on the map, and the rider's live location while a delivery or ride is in progress so you can track it.
• Payment information — the M-Pesa phone number you pay with and the M-Pesa receipt reference. We never see or store your M-Pesa PIN.
• Delivery confirmation — where a delivery can't be confirmed with the usual PIN, a photo or signature plus GPS coordinates may be stored as proof of delivery.
• Messages to the in-app assistant — questions you ask the built-in help assistant, so the conversation can continue where you left off.

• To take and fulfil your orders, rides and parcel deliveries.
• To share the necessary details with the restaurant or rider handling your order.
• To process payments and keep payment records.
• To send you notifications about your orders, rides and account.
• To keep the service secure, prevent fraud and resolve disputes.

We do not sell your personal data. We share only what is needed to provide the service:

• Restaurants and riders — the details they need to prepare and deliver your order or complete your ride.
• Safaricom M-Pesa — to process mobile-money payments you authorise.
• Google Maps — to show maps, search places and calculate distances.
• Our hosting and database provider — stores account and order data securely on our behalf.
• SMS provider (Africa's Talking) — used only to send delivery confirmation codes when SMS is enabled.

Access to your data is limited to your own account and to the people directly involved in your order. Sensitive records such as payment attempts and delivery codes are stored server-side and are not publicly readable. Delivery evidence is stored privately and cannot be changed after it is recorded.

We keep account, order and payment records for as long as your account is active and as required for financial record-keeping and dispute resolution. Cancelled rides and parcel jobs are removed after 24 hours. When a merchant is removed from the platform, their financial and delivery records are retained as required, but their access is revoked.

You can request deletion of your account and associated personal data at any time by emailing appforgedigital@gmail.com from the email address linked to your account, or by using our account deletion page. Some records, such as completed payment and delivery records, may be retained where required for legal, tax or fraud-prevention reasons.

If we change how we handle your data, we will update this page. Continued use of MlimaGo after an update means you accept the revised policy.