Privacy policy

Who this covers

Afripantry is a marketplace for African groceries operating in Canada, the United States and Nigeria. This policy covers the Afripantry website and mobile app, and applies to buyers, sellers and drivers alike.

Sellers and drivers give us more than buyers do, because being approved and being dispatched require it. Where that is the case it is said so below.

What we collect

Account details

Your first and last name, email address, phone number, and a password we store only as a hash and can never read back. We record whether your email has been verified, because an unverified account cannot place an order.

Delivery addresses

The addresses you save, with their country — which decides the market you shop and the currency you are charged in — and approximate coordinates for the address, so that nearby drivers can be offered the delivery.

Orders

What you bought, from which sellers, the price at the time, and a copy of the delivery address and phone number taken when the order was placed. An order covering several sellers becomes several separate deliveries, each recorded on its own.

Payments

Card numbers never reach us. Payment is handled by Stripe, and the card is entered into Stripe's own form. We store an identifier linking you to your Stripe customer record, and references to the payment and any refund. Cards you choose to save are held by Stripe, not by us — we read them back from Stripe when you look at your saved cards.

Reviews

Your rating and written review, published on the product page with your first and last name, together with any reply the seller writes.

Notifications

If you allow notifications, a token identifying the app on your device, along with which types you have switched on. The token is removed when you sign out.

Support messages

The name, email address and message you type into the support form, and any file you attach. The name and email are whatever you enter, not necessarily the ones on your account.

Loyalty points

A record of points earned and spent, and what earned them.

Seller and driver details

For sellers: business name, type, address and a business licence document. For drivers: date of birth, address, an emergency contact, driving licence number, expiry and photographs of it, proof of address, and vehicle details including the plate number. Buyers are never asked for any of this.

Your IP address

Used briefly to rate-limit sign-in attempts and other sensitive requests, so that one source cannot hammer them. It is not written to our database and not kept beyond the rate-limit window.

Why we collect it

To run your account, take payment, get orders to your door and tell you what is happening with them. That is the whole of it.

To provide the service

Signing you in, pricing and placing orders, giving your delivery address to the seller packing the order and the driver carrying it, and processing refunds.

To keep accounts safe

Verifying your email address, resetting passwords, ending sessions when you sign out, and limiting abusive traffic.

To meet legal obligations

Keeping records of completed sales and payments for tax and accounting purposes.

What we do not do

We do not sell your data, and we do not share it with advertisers or data brokers. There are no advertising pixels, no third-party analytics, and no cross-site tracking on the website or in the app.

The app never asks for your location. Delivery addresses are typed by you, not read from your device.

Who else sees it

Sellers see what they need in order to pack your order, and the address it is going to. Drivers see the pickup and delivery addresses and the delivery contact details for the delivery they are carrying, while they are carrying it.

Beyond that we use a small number of service providers, listed below. They act on our instructions and may not use your data for their own purposes.

Where it is processed

Afripantry operates across Canada, the United States and Nigeria, and our service providers operate internationally. Sending groceries from one country to another is an ordinary use of this service rather than an exception, so a single order will routinely involve a buyer, a seller and a driver in different countries, and the details of that order will be visible in each of them.

How long we keep it

While your account is open

Your profile, addresses and notification preferences are kept until you change or remove them.

Closing your account

You can close your account from the app, under Account then Security. Closing it signs you out on every device, stops all notifications, and releases your email address so it can be used to register again.

Erasing your details

Closing an account is not the same as erasing what is attached to it. To have your personal details removed as well, email privacy@afripantry.com and we will do it by hand.

Orders and payments

Records of completed orders and the payments against them are kept for about 7 years, because tax and accounting rules require it. They survive an account being closed, and they include the delivery address the order was sent to.

Reviews

A published review stays on the product with your name until you or we remove it. Ask us if you want one taken down.

Sign-in tokens

Access tokens are short-lived. Tokens ended by signing out are held only long enough to make sure they cannot be reused, then expire on their own.

Your choices

See or correct your details

Your name, phone number and addresses can be edited in your account at any time.

Close your account

In the app, under Account then Security. It asks for your password.

Get a copy of your data, or have it erased

Write to privacy@afripantry.com. We will confirm who you are before acting, and we will tell you if anything has to be kept for the accounting reasons above.

Turn notifications off

By type, in the app under Account then Notifications, or entirely in your phone's own settings. Switching them off in your phone stops all of them, whatever the app is set to.

Complain

Write to us first. You can also complain to the data protection authority where you live, or in Ontario, Canada.

How it is protected

Traffic is encrypted in transit. Passwords are stored as hashes and never in readable form. Signing in issues short-lived tokens that are revoked when you sign out, and the mobile app keeps them in the device's secure storage rather than alongside ordinary app data.

No system is perfect. If a breach ever affects you, we will tell you and the relevant authority as the law requires.

Children

Afripantry is not intended for children. You need to be old enough to enter into a contract where you live in order to hold an account, and we do not knowingly collect anything from children. Tell us if you believe a child has an account and we will remove it.

Changes to this policy

If this policy changes in a way that matters to you, we will say so in the app and by email before it takes effect. The date at the top is when it was last revised.