1. Introduction

Deel{i}ver ("we", "us", "our") operates a surplus-food and goods redistribution marketplace that connects donors (restaurants, supermarkets, farms, businesses, individuals) with recipients (families, students, NGOs, community groups) and rescuers (delivery agents).

This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have. By creating an account or using the platform, you agree to the practices described here.

2. Information We Collect

Account data: full name, email address, phone number (optional), role (donor, recipient, rescuer, NGO, admin), and location preferences you provide during onboarding.

Listing & request data: item titles, descriptions, categories, quantities, photos, pickup locations, expiry dates, and allergen information you submit.

Transaction data: negotiation messages, agreed delivery fees, cost-bearer choices, payment method type (card, transfer, USSD), Monnify transaction references, pickup/delivery confirmation codes, and split-payment breakdowns.

Impact & token data: CO₂ saved, meals equivalent, waste diverted, and Deel{i}ver Token (DTL) ledger entries tied to your email.

Usage data: device type, approximate location (for matching), app interactions, and crash/performance logs.

3. How We Use Your Information

To match surplus items with nearby recipients based on location, urgency, and category preferences.

To facilitate negotiations, schedule pickups, assign rescuers, and confirm deliveries via pickup codes.

To orchestrate zero-custody split payments through Monnify — routing vendor amounts, platform fees, and rider escrow without holding funds centrally.

To generate Impact Receipts, calculate DTL token rewards, and maintain transparent impact records.

To send behavioral, context-aware notifications (match alerts, streak reminders, expiry warnings, comeback nudges).

To operate the Secondary Marketplace — identifying stalled transactions and re-circulating items after two failed rounds.

To provide admin moderation, fraud prevention, and platform health analytics.

4. Zero-Custody Financial Data

Deel{i}ver never stores full card numbers, bank PINs, or raw payment credentials. Payment authorization is handled entirely by Monnify, our licensed payment infrastructure partner.

We retain only transaction references, status, and split-payment breakdowns for record-keeping and dispute resolution. Funds are split and disbursed programmatically at the point of delivery confirmation — we do not hold or custody user money.

Rider escrow is held briefly in a virtual ledger pending delivery confirmation, then released automatically via the Monnify API.

5. Who Sees Your Data

Donors and recipients see each other's names and pickup/delivery locations only after a match is established.

Rescuers see pickup location, delivery location, item category, and agreed fee — not payment details.

NGO partners see escalated listings (items that have exhausted their two-round cycle) with item details and pickup location.

Platform administrators can access all records for moderation, dispute resolution, and recovery of silent transactions.

Monnify processes payment data under its own privacy and security framework. We do not sell your personal data to third parties.

6. Cookies & Local Storage

We use local storage to keep you logged in, remember your language preference, and store your home-screen installation choice. We do not use third-party advertising cookies.

You can clear local storage at any time through your browser settings; you will simply need to log in again.

7. Data Retention & Deletion

Active listings and requests are retained while their status is active. Completed transactions and Impact Receipts are retained indefinitely as proof of impact and for audit purposes.

Stalled transactions surface in the Secondary Marketplace after 6 hours of inactivity; expired listings after 12 hours. Items are escalated to the NGO network if they remain unrescued.

You may request deletion of your account and personal data at any time. We will remove your identifiable information, though anonymized impact aggregates may be retained for platform-wide reporting.

8. Your Rights

Access: you can view your profile, listings, transactions, token ledger, and impact receipts at any time within the app.

Correction: you can edit your profile and listing details through the in-app settings.

Deletion: you can request account deletion by contacting support.

Opt-out: you can mute specific notification types (streak warnings, comeback nudges, expiry alerts) from your notification settings without losing core functionality.

9. Changes to This Policy

We may update this policy as Deel{i}ver evolves. Material changes will be announced in-app and reflected by the "last updated" date below. Continued use after changes constitutes acceptance.