What we hold, and who sees it
A plain description of what the software does, not a legal document.
What each form stores
Placing an order
Your name and phone number, what you ordered, and, for a delivery, the area, address and any directions you give. A note to the business is stored as you wrote it.
The business you ordered from can read all of it. That is the point: they have to know what to make and where to bring it.
Creating an account
Your name, phone number and email address. Your password is never stored. We keep only a scrypt hash of it, which cannot be turned back into the password you chose.
Applying to sell
Your business name, your name, phone, optional email, town and whatever you write about the business. Read by whoever reviews applications, so they can ring you.
Applying to ride or drive
Your name, phone, optional email, the town you work in, what you ride, and, if it has an engine, the registration plate and licence number.
These are the most sensitive details on the platform and are treated as such: only the platform operator can open the rider queue, not the businesses you might carry for, and the plate and licence are deliberately kept out of the activity log that more people can read.
What leaves the system
Paying by card or mobile money
Paystack processes the payment and receives the amount, the order reference and the email address you give at that step. Card details are entered on their page and never reach us.
Paying a business directly
Nothing leaves. You send M-Pesa from your own phone to that business's till or paybill, and we record only that the order was marked paid.
Nothing else
There is no analytics, no advertising tracker and no third-party script on this site. Your details are not sold, and no code here shares them with anybody beyond the business you dealt with and the payment provider above.
Who can read what
A business
Sees its own orders and its own customers, and nothing belonging to any other business. A business with several branches sees each branch separately.
A rider
Before accepting a delivery, sees only the area it is going to. The door address, directions and the customer's phone number are released after they accept, and removed again once the job is finished.
Anybody holding your order link
An order is opened with its reference and a private token together. The reference on its own will not open it, which is what stops somebody guessing one. Treat the full link the way you would a receipt.
What is not here yet
A formal privacy policy and terms of service, the registered company details behind BizMtaani, a published route for data-deletion requests, and a stated retention period. Those are commitments a company makes rather than things software does, so they are not written here in place of the real thing. Until they exist, the description above is what the product actually does.
Questions about how ordering, delivery or payment work are answered on the questions page.