Privacy Policy

This Privacy Policy explains how Idya ("we", "us", "our") collects, uses, shares and protects your personal information when you use our website (idya.co.zw), our customer app, our restaurant partner app, and our driver app (together, the "Services"). By using the Services you agree to the practices described here.

1. Information We Collect

Depending on how you use Idya, we may collect:

• Account details: name, phone number, email address and password.
• Order details: items ordered, delivery address, delivery instructions, order history and ratings.
• Location data: your delivery location, and for drivers, real-time location while online so orders can be assigned and tracked.
• Payment information: your chosen payment method (for example EcoCash, InnBucks, card payments via Pesepay, or cash on delivery), any order deposit paid, and transaction references. Card and mobile money payments are processed by our payment partners. We do not store full card numbers or mobile money PINs.
• Restaurant partner information: business name, owner contact details, address, menu items, prices and payout details.
• Driver information: name, contact details, vehicle type, and documents submitted during registration such as ID and licence details.
• Device and usage data: device type, operating system, app version, IP address, push notification token, pages visited and actions taken in the Services.
• Communications: messages you send to our support team by phone, WhatsApp, email or the contact form.

2. How We Use Your Information

• To create and manage your account and process and deliver your orders.
• To connect customers, restaurants and drivers and show live order status.
• To process payments, payouts and refunds.
• To provide customer support and respond to your requests.
• To send push notifications about your orders, deliveries and account activity.
• To send order updates, service notices and, where permitted, promotions and offers (you can opt out at any time).
• To prevent fraud, abuse and misuse of promo codes, and to keep the platform safe.
• To analyse usage and improve our website, apps and services.
• To comply with applicable laws and legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share it only as needed to run the Services:

• Restaurants receive your name, order details and, where needed, contact details to prepare your order.
• Delivery drivers receive your name, phone number and delivery address to complete delivery.
• Payment providers (such as EcoCash, InnBucks and Pesepay) process your payments, including card payments and order deposits, under their own privacy policies.
• Service providers such as hosting, analytics (including Google Analytics), SMS and notification services that help us operate the Services.
• Authorities where required by law, court order, or to protect the rights and safety of our users and the public.

4. Cookies and Analytics

Our website uses cookies and similar technologies, including Google Analytics, to understand how visitors use the site and to improve it. You can disable cookies in your browser settings, though some features may not work as expected.

5. App Permissions

Our apps may ask for the following permissions on your device:

• Location: to show nearby restaurants, set delivery addresses and, for drivers, to track deliveries.
• Notifications: to send order status updates, delivery alerts and, where permitted, offers.
• Camera and photos: so restaurant partners and drivers can upload menu images, profile photos and registration documents.

You can change these permissions at any time in your device settings, but some features may stop working if they are turned off.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the Services, resolve disputes, prevent fraud and meet legal, accounting and tax requirements. When you request account deletion, we remove or anonymise your personal data, except where we must retain certain records by law.

7. Data Security

We use reasonable technical and organisational measures to protect your information against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password confidential.

8. Your Rights

In line with Zimbabwe's Cyber and Data Protection Act, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Object to or opt out of marketing communications.

To delete your account and data, use our Account Deletion Request page. For any other request, contact us using the details below.

9. Children's Privacy

Idya is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Third-Party Links

Our Services may link to third-party websites or apps, such as app stores and payment providers. We are not responsible for their privacy practices, so please review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above, and for significant changes we may also notify you through the app or website.