Privacy Policy

1. Who is responsible

234Foods is the organisation responsible for personal data processed through the Services. Privacy requests: support@234foods.com or our contact page.

2. Personal data we collect

Depending on how you use the Services, we may process:

• Account & profile: name, phone number, email address (including a temporary technical placeholder email created for phone-first signup), and saved delivery addresses.
• Order data: restaurant and items ordered, quantities, prices, delivery instructions, order status history, and support communications about an order.
• Payment data: payment status, amount, currency, transaction reference, and provider used. Card numbers and sensitive payment credentials are processed by Paystack and/or Flutterwave — we do not store full card PAN or CVV on our servers.
• Location: approximate and precise location while you use the app, to show nearby restaurants, help set a delivery address, and — during an active order — share your live position with your assigned rider so they can find you. We do not request or use background / "always" location when the app is closed.
• Device & technical data: device type, operating system, app version, IP address, and server logs needed to operate, secure, and debug the Services. We do not currently use a third-party mobile crash-analytics SDK in the customer app.
• User content: ratings and written reviews you submit about restaurants, meals, or riders, and any reports you submit about content or users.
• Support requests: information you provide when you contact us (including account-deletion requests submitted on the website).

We may also receive limited data from partners (for example payment confirmation from Paystack or Flutterwave, or delivery OTP confirmation from an SMS provider).

3. Why we use your data

• Create and authenticate your account (including OTP verification)
• Process, fulfil, and track orders and payments
• Communicate about orders, account security, and support
• Show relevant restaurants and map/delivery context
• Enable riders to complete delivery during an active order
• Prevent fraud, abuse, and security incidents
• Comply with legal, tax, accounting, and regulatory obligations
• Improve reliability and user experience of the Services

We do not sell your personal information. We do not use your location for advertising. Marketing messages (if any) will only be sent where allowed and with an opt-out where required.

4. Legal bases

Where Nigerian data-protection law applies, we process personal data on bases that may include: performance of a contract (providing the Services you request); consent (for example certain location permissions on your device); legitimate interests (securing the platform, preventing fraud, improving operations) balanced against your rights; and legal obligation (tax, dispute, or regulatory records).

5. How we share information

• Restaurants receive order details needed to prepare food and, where necessary, contact you about the order.
• Riders receive delivery address, contact details needed for handover, and — while an order is active and you are using the app — live location to complete delivery.
• Payment processors (Paystack and/or Flutterwave) process payments.
• SMS / OTP providers (for example Termii) deliver verification codes.
• Maps providers (for example Google Maps) help display maps, geocode addresses, and show routes.
• Email delivery (for example Resend) sends transactional messages such as account or order notices when you have a deliverable email.
• Infrastructure providers (hosting, database) process data on our instructions to run the Services.
• We may disclose information if required by law, court order, or regulator; to protect rights, safety, and security; or in connection with a merger, acquisition, or asset transfer (with appropriate safeguards).

6. International transfers

Some processors (for example cloud, email, or maps providers) may process data outside Nigeria. Where we transfer personal data internationally, we take steps designed to ensure appropriate protection consistent with applicable law and our contracts with those providers.

7. Retention

We keep personal data only as long as needed for the purposes above. Account and order records are typically retained while your account is active and for a further period required for legal, tax, dispute-resolution, and fraud-prevention purposes. Server logs are retained for shorter operational windows unless needed for security investigations.

When you delete your account, we soft-delete the account so you can no longer sign in. Certain order and transaction records may remain in restricted or anonymised form where we must keep them for legal or operational reasons.

8. Account deletion

You can delete your account in the 234Foods customer app under Profile → Delete Account. You can also request deletion without the app using the link below. Deletion is blocked while you have an active order — finish or cancel it first. Web requests are verified by support before processing (usually within a few business days).

Go to account deletion

Direct URL: 234food.com/delete-account

9. Your rights and choices

Subject to applicable law, you may:

• Access and update profile details in the app
• Request a copy of personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account (see Section 8) via the app or the account deletion page
• Object to or restrict certain processing where the law allows
• Withdraw device permissions (for example location) in your phone settings — some features will then be limited
• Lodge a complaint with the relevant data-protection authority in Nigeria if you believe your rights have been infringed

To exercise rights that are not available in-app, email support@234foods.com. We may need to verify your identity before fulfilling a request.

10. Children

The Services are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

11. Security

We use safeguards such as HTTPS encryption in transit, access controls, authenticated APIs, and payment handling by certified processors. No method of transmission or storage is 100% secure. See also our Security page. Report suspected fraud via Report Fraud.

12. Cookies and similar technologies

Our website may use cookies and similar technologies as described in our Cookie Policy. The mobile apps use device storage (for example secure token storage and preference flags) to keep you signed in and remember settings such as location-disclosure acceptance.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date will change when we do. Material changes may be highlighted in the app or on the website. Continued use of the Services after an update means you acknowledge the revised policy, except where additional consent is required by law.

14. Contact

Privacy questions and data requests: support@234foods.com. Also see our Terms & Conditions.