This Privacy Policy explains how BiteExpress Limited ("BiteExpress", "we", "our", "us") collects, uses, shares and protects your personal information when you use bite.express, the BiteExpress mobile apps, and any related services (together, the "Services").
We are committed to handling your information transparently and in line with the Nigeria Data Protection Act 2023 (NDPA) and other applicable laws.
1. Information we collect
We collect the following categories of information:
- Account information — name, phone number, email, password (hashed), profile photo.
- Delivery information — addresses, geolocation, map pins, delivery instructions.
- Order information — items ordered, vendors, totals, ratings and feedback.
- Payment information — tokenised card references, transaction history. We never store your full card number.
- Device and usage data — device model, OS, IP address, in-app interactions, crash reports.
- Communications — chat messages with riders/ vendors, customer support tickets and call recordings.
2. How we use your information
We use your information to:
- Process and deliver your orders.
- Calculate fees, apply promotions, and pay vendors and riders.
- Provide customer support and resolve disputes.
- Detect, investigate and prevent fraud or abuse.
- Improve the Services, including through analytics, A/B testing and machine-learning features (e.g. recommendations).
- Send transactional and operational notifications (you can disable marketing notifications in settings).
3. Sharing your information
We share information only as needed to operate the Services and only with the categories of recipients listed below:
- Vendors and riders assigned to your order — limited to what they need to prepare or deliver it.
- Payment processors licensed in Nigeria — to settle transactions.
- Infrastructure providers (cloud hosting, email, analytics) bound by data protection contracts.
- Law enforcement and regulators when required by law or to protect users.
We do not sell your personal information to anyone.
4. Your rights
Under the NDPA, you have the right to:
- Access the information we hold about you.
- Correct inaccurate or outdated information.
- Request deletion of your account and data (subject to legal retention requirements).
- Withdraw consent to marketing communications at any time.
- Object to certain types of processing.
To exercise any of these rights, contact support@bite.express.
5. Data retention
We retain order and account records for as long as your account is active and for up to seven years after closure, to meet tax, accounting and dispute-resolution requirements. We may keep de-identified analytics indefinitely.
6. Security
We protect your data with encryption in transit (HTTPS), encryption at rest on production servers, access controls and routine security reviews. No system is 100% secure, but we work hard to keep yours safe.
7. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences and measure how the Services are used. See our Cookie Policy for details.
8. Children
BiteExpress is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. If changes are material, we'll notify you in-app or by email before they take effect. The "Last updated" date at the top of this page reflects the current version.
10. Contact us
For privacy questions or requests: support@bite.express.