Privacy Policy Nuli Nuli Eatery Mobile App

We collect the following categories of information to provide and improve our service:

Your information is used solely to provide you with the best food ordering experience:

• Process and deliver your food orders
• Calculate accurate delivery fees based on your location
• Send real-time push notifications about your order status
• Pre-fill your delivery address for faster checkout
• Respond to customer support inquiries
• Improve the app's performance and features
• Ensure the security and integrity of our platform

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

The app requests access to your device's GPS location to automatically calculate your delivery distance from our restaurant and pre-fill your delivery address at checkout.

• Location is only accessed when you open the Cart or Checkout screen
• We use device-native geocoding — your coordinates are not sent to a third-party mapping API
• Your last known delivery coordinates are saved locally on your device for convenience
• You can deny location permission — you will still be able to type your address manually

We use the following trusted third-party services. Each has its own privacy policy:

• Firebase (Google) — Authentication, push notifications (FCM), and crash analytics. Firebase Privacy Policy ↗
• Pesapal — Secure payment processing for mobile money and card payments. Pesapal Privacy Policy ↗
• Marstech Solutions (our servers) — Order management, delivery info, and rider dispatch hosted at marstechsolns.com.

Your data is stored on secure servers hosted by Marstech Solutions. We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data transmitted between the app and our servers
• Secure database access with parameterised queries to prevent SQL injection
• Firebase Authentication for secure account management
• Local data (delivery coordinates, preferences) is stored using Android/iOS Shared Preferences on your device only

While we take all reasonable steps to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to keep your account credentials private.

• Order records are retained for up to 2 years for accounting and support purposes
• Account information is retained for as long as your account is active
• FCM tokens are updated on each app launch and removed when you log out
• Location data stored on-device is cleared when you uninstall the app

You may request deletion of your account and associated data at any time by contacting us.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete information
• Deletion — request that we delete your account and personal data
• Portability — receive your data in a machine-readable format
• Opt-out of notifications — disable push notifications in your device settings at any time

To exercise any of these rights, please contact us using the details in Section 9.

The Nuli Nuli Eatery app is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us:

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes your acceptance of the revised policy.