Legal

Privacy Policy

Last updated: November 3, 2026

Naija Eats (“Naija Eats,” “we,” “us”) is operated by BudgetBrandBag, a single-member limited liability company doing business as “Naija Eats”. You can reach us at support@naijaeats.org or (469) 591-1916.

This Privacy Policy explains what information we collect when you use Naija Eats as a customer, kitchen or driver, how we use it, and the choices you have. We do not sell your personal information.

1. Information we collect

• Account details: name, email address, phone number, state, delivery address (so drivers know where to bring your food), and password (stored only in scrambled “hashed” form).
• Deliveries: which kitchen, the delivery address, the time you chose, your notes (such as what you ordered or a gate code), and your delivery history.
• Kitchens: business name, owner name, business address, phone number (shown on the kitchen’s public page so customers can WhatsApp or text it), menu, prices, photos, logo, store hours and optional EIN, plus the Cash App $Cashtag and/or Zelle email or phone and name the kitchen adds so customers can pay it (shown to customers on the kitchen’s pay page). A kitchen that connects its own Stripe account: we keep its Stripe account ID and business name, and never see its Stripe login or bank details. On the driver and customer maps, each approved kitchen appears as a hotspot: an area about a mile across, never its exact address.
• Paying a kitchen: when you pay a kitchen by Cash App or Zelle, that payment happens in Cash App or your bank — we don’t see or keep your payment or bank details. The pay page may carry your order total and name in its web address so it can fill in the amount and note.
• Paying a kitchen by card: you type your card details into Stripe’s page, in the kitchen’s own Stripe account — we never see your card number. We keep a record of the payment (the dishes, amount, the name you gave and whether it was paid) so the kitchen can see it in its dashboard. Stripe and the kitchen handle the payment itself under Stripe’s privacy policy.
• Drivers: home address and ZIP code (we check it on a map to verify you, and use it as your starting point for leave-time estimates when location is off; it is never shown to customers or kitchens), vehicle details, license plate, driver’s license and insurance expiration dates, insurance provider, and the documents you upload (such as your license and proof of insurance). While the driver portal is open on your phone, it shares your location with Naija Eats (online or not), and we use it to show drive times to pickups and reservations; we keep only the latest location, not a history, and clear it when you sign out.
• Guest checkout: if you book without an account, we keep the name, email, phone and delivery address you give us (to deliver your food, send your receipt and show your orders on this device), just as for an account.
• Reviews: if you rate Naija Eats or send a suggestion from our home page, we keep your rating, message and any name you give. We may show approved reviews on our site with your first name only.
• Driver location during deliveries: while a driver has a delivery, their phone shares its location with Naija Eats so the customer can follow the delivery on a live map and see the arrival time. We keep only the latest location; customers only see the driver of their own order, and only while that order is with them.
• Delivery photos: when a driver completes a delivery, they take a photo of the food at the door (or in your hands). We store it privately with the order number, the delivery address, your name and phone number, the driver’s name, phone and vehicle, and the time it was taken, as proof of delivery. Photos are re-saved without hidden metadata such as GPS location. You can see your own delivery photo in My account → My orders.
• Payments: handled by Stripe. We receive limited information such as the card brand, last four digits and expiration date, and payout status. Drivers give their bank and identity details directly to Stripe. Kitchens don’t give us bank details: customers pay kitchens for food directly.
• Device information: if you turn on phone alerts, your browser gives us a notification address so we can send alerts. Your browser also stores small items on your device (such as the dishes you pick on a kitchen’s page, your sound setting and your chosen delivery area).
• Messages to kitchens: when you tap WhatsApp or Text on a kitchen’s page, your own app opens with a message we write for you (your picked dishes, note and name). You send it yourself through WhatsApp or your mobile carrier; we don’t receive or keep these messages. WhatsApp’s and your carrier’s own privacy policies apply to them.
• Cookies: we use only the cookies needed to keep you signed in, plus cookies Stripe sets on payment pages to prevent fraud. We do not use advertising, analytics or tracking cookies. See our Cookie Policy for the full list.

2. How we use information

• To create and secure your account and verify your email address.
• To show kitchens’ menus and contact details, suggest addresses as you type, book deliveries, process payments, calculate delivery distance and fees, and deliver food.
• To pay drivers and to meet tax-reporting duties.
• To check drivers’ documents before they can deliver.
• To send emails about your account and deliveries (a welcome email, and a thank-you email when a delivery arrives), and the sound alerts and phone notifications you turn on.
• To provide support, prevent fraud and abuse, and improve Naija Eats.

3. Who we share information with

• Kitchens see the customer’s name, phone number, delivery address, delivery time and notes for deliveries booked from them. Anything you send a kitchen on WhatsApp or by text goes to them directly.
• Drivers see the pickup kitchen and the delivery area before accepting a delivery, and the customer’s name, phone number and full address after accepting it.
• Customers see their driver’s first name, vehicle and phone number during a delivery.
• Service providers who help run Naija Eats: Stripe (payments and payouts), Supabase (database and sign-in emails), Mapbox (address suggestions as you type, address lookup and driving distance), Hostinger (hosting and email), and Google, Apple or Mozilla (delivering phone notifications to your device).
• Legal reasons: when required by law, or to protect the safety and rights of our users and Naija Eats.

4. How long we keep information

We keep account and order information while your account is open and as long as needed for tax, accounting and legal purposes (generally up to 7 years for payment records). Driver documents are kept while the account is active and then deleted unless we must keep them for legal reasons. Kitchens no longer send us permit documents; any sent in the past are kept privately and deleted on request.

5. Security

We use encrypted connections (HTTPS), hashed passwords, separate customer, kitchen and driver accounts, and private storage for uploaded documents. No system is perfectly secure, so please use a strong, unique password.

6. Your choices and rights

• You can update your profile and remove saved cards in your account.
• You can turn sound alerts and phone notifications on or off at any time.
• You can ask us for a copy of your information, ask us to correct it, or ask us to delete your account by contacting support@naijaeats.org or (469) 591-1916. We will respond within 45 days. Texas residents may have additional rights under the Texas Data Privacy and Security Act; contact us to use them.

7. Children

Naija Eats is not intended for children under 13, and we do not knowingly collect information from them.

8. Changes

We may update this policy. If we make important changes, we will tell you by email or on the site.

9. Contact

Privacy questions or requests: support@naijaeats.org or (469) 591-1916.