Privacy Policy

1. Who is responsible

234Foods is the organisation responsible for personal data processed through the Services. Privacy requests: support@234food.com or our contact page.

2. Personal data we collect

Depending on how you use the Services, we may process:

• Account & profile: name, phone number, email address (including a temporary technical placeholder email created for phone-first signup), and saved delivery addresses.
• Order data: restaurant and items ordered, quantities, prices, delivery instructions, order status history, and support communications about an order.
• Payment data: payment status, amount, currency, transaction reference, and provider used. Card numbers and sensitive payment credentials are processed by Paystack and/or Flutterwave — we do not store full card PAN or CVV on our servers.
• Location (customer app): approximate and precise location while you use the customer app, to show nearby restaurants, help set a delivery address, and — during an active order — share your live position with your assigned rider. The customer app does not request or use background / "always" location when that app is closed.
• Location (234Foods Rider): precise location while you are online or completing a delivery, including background location when the rider app is not in the foreground. This is used to match you with nearby orders, show your position to the customer during an active delivery, support navigation, and keep assignment accurate. Background location is used only for delivery operations. When you go offline, we stop using location for new order matching. We do not use rider location for advertising.
• Identity & vehicle documents (riders): government ID photos, selfie or profile photo, vehicle type, plate number, and other verification photos you take with the camera or choose from your gallery during signup or later updates.
• Payout data (riders): bank name, account number, account name, withdrawal requests, payout status, and payment receipts. We do not store full card PAN or CVV.
• Device & technical data: device type, operating system, app version, IP address, and server logs needed to operate, secure, and debug the Services. We do not currently use a third-party mobile crash-analytics SDK in the customer app.
• User content: ratings and written reviews you submit about restaurants, meals, or riders, and any reports you submit about content or users.
• Support requests: information you provide when you contact us (including account-deletion requests submitted on the website).

We may also receive limited data from partners (for example payment confirmation from Paystack or Flutterwave, or delivery OTP confirmation from an SMS provider).

3. Why we use your data

• Create and authenticate your account (including OTP verification)
• Process, fulfil, and track orders and payments
• Communicate about orders, account security, and support
• Show relevant restaurants and map/delivery context
• Verify rider identity and vehicle details before approving deliveries
• Match riders with nearby orders and complete deliveries (including background location while a rider is online or on a job)
• Calculate rider earnings and process bank payouts / withdrawals
• Enable riders to complete delivery during an active order
• Prevent fraud, abuse, and security incidents
• Comply with legal, tax, accounting, and regulatory obligations
• Improve reliability and user experience of the Services

We do not sell your personal information. We do not use your location for advertising. Marketing messages (if any) will only be sent where allowed and with an opt-out where required.

4. Legal bases

Where Nigerian data-protection law applies, we process personal data on bases that may include: performance of a contract (providing the Services you request); consent (for example certain location permissions on your device); legitimate interests (securing the platform, preventing fraud, improving operations) balanced against your rights; and legal obligation (tax, dispute, or regulatory records).

5. How we share information

• Restaurants receive order details needed to prepare food and, where necessary, contact you about the order.
• Riders receive delivery address, contact details needed for handover, and — while an order is active and you are using the customer app — live location to complete delivery.
• Customers (when you use 234Foods Rider) receive your first name, vehicle details needed for handover, and — while a delivery is active — your live location.
• Payout partners process rider withdrawals to a nominated bank account or wallet.
• Payment processors (Paystack and/or Flutterwave) process payments.
• SMS / OTP providers (for example Termii) deliver verification codes.
• Maps providers (for example Google Maps) help display maps, geocode addresses, and show routes.
• Email delivery (for example Resend) sends transactional messages such as account or order notices when you have a deliverable email.
• Infrastructure providers (hosting, database) process data on our instructions to run the Services.
• We may disclose information if required by law, court order, or regulator; to protect rights, safety, and security; or in connection with a merger, acquisition, or asset transfer (with appropriate safeguards).

6. International transfers

Some processors (for example cloud, email, or maps providers) may process data outside Nigeria. Where we transfer personal data internationally, we take steps designed to ensure appropriate protection consistent with applicable law and our contracts with those providers.

7. Retention

We keep personal data only as long as needed for the purposes above. Account and order records are typically retained while your account is active and for a further period required for legal, tax, dispute-resolution, and fraud-prevention purposes. Server logs are retained for shorter operational windows unless needed for security investigations.

When you delete your account, we soft-delete the account so you can no longer sign in. Certain order and transaction records may remain in restricted or anonymised form where we must keep them for legal or operational reasons.

8. Account deletion

You can delete a customer account in the 234Foods customer app, or a rider account in the 234Foods Rider app, under Profile → Delete Account. You can also request deletion without either app using the link below (choose Customer or Rider). Customer deletion is blocked while you have an active order; rider deletion is blocked while you have an active delivery. Web requests are verified by support before processing (usually within a few business days). Identity photos and payout details on a rider account are removed or restricted with the account, except records we must keep for legal, tax, dispute, or fraud-prevention purposes.

Go to account deletion

Direct URL: 234food.com/delete-account

9. Your rights and choices

Subject to applicable law, you may:

• Access and update profile details in the app
• Request a copy of personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account (see Section 8) via the app or the account deletion page
• Object to or restrict certain processing where the law allows
• Withdraw device permissions (for example location, camera, or photos) in your phone settings — some features will then be limited. Riders cannot accept deliveries while location is off.
• Lodge a complaint with the relevant data-protection authority in Nigeria if you believe your rights have been infringed

To exercise rights that are not available in-app, email support@234food.com. We may need to verify your identity before fulfilling a request.

10. Children

The customer Services are not directed at children under 13, and we do not knowingly collect personal data from children under 13. The 234Foods Rider app is for adults: you must be at least 18 to register as a rider. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

11. Security

We use safeguards such as HTTPS encryption in transit, access controls, authenticated APIs, and payment handling by certified processors. No method of transmission or storage is 100% secure. See also our Security page. Report suspected fraud via Report Fraud.

12. Cookies and similar technologies

Our website may use cookies and similar technologies as described in our Cookie Policy. The mobile apps use device storage (for example secure token storage and preference flags) to keep you signed in and remember settings such as location-disclosure acceptance.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date will change when we do. Material changes may be highlighted in the app or on the website. Continued use of the Services after an update means you acknowledge the revised policy, except where additional consent is required by law.

14. Contact

Privacy questions and data requests: support@234food.com. Also see our Terms & Conditions.