HomeRestaurantsGroceriesSign in
Legal & Trust

Privacy Policy

Last Updated: June 15, 2026

At XchangeDeliveries ("we", "us", or "our"), your privacy is not just a policy—it is a priority. This document outlines how we collect, use, and protect your personal data across all five of our services — Food Delivery, Package & Parcel Delivery, Errand Services, Grocery Delivery, and Ride-Hailing — in compliance with the Nigerian Data Protection Regulation (NDPR) 2019 and other relevant Nigerian laws.


1. Information We Collect

To provide efficient delivery, errand, grocery, and ride services, we collect the following types of data:

  • Personal Identity: Name, phone number, and email address for account creation.
  • Geolocation Data: Real-time location data to facilitate accurate pickup and delivery addresses for food, packages, errands, and groceries — and live trip tracking for rides.
  • Trip & Order History: Pickup/dropoff points, routes, distances, durations, fares, order contents, and ratings for completed orders and trips.
  • Transaction Data: Order history and payment references (processed securely via Paystack). Note: We do not store your full credit card details on our servers.
  • Device & Usage Data: Device type, operating system, IP address, app version, and general usage patterns, collected automatically via cookies and similar technologies.
  • Communication: Records of your interactions with our support team, riders, drivers, or runners.

2. How We Use Your Data

We use your information strictly to:

  • Process and fulfil your food orders, package deliveries, errands, grocery orders, and ride requests.
  • Connect you with nearby Riders, Drivers, Errand Runners, Restaurants, and Grocery Merchants.
  • Send real-time updates and push notifications regarding the status of your orders and trips (e.g., "Rider has arrived").
  • Personalize your experience, such as suggesting nearby restaurants, frequently ordered items, or saved addresses.
  • Improve our platform's safety, routing, and fraud-detection algorithms.

3. Information Sharing

We do not sell your personal data. However, to fulfil our services, we must share limited data with:

  • Riders, Drivers & Runners: Your name, phone number, and relevant pickup/delivery address or route are shared with the individual assigned to your order, errand, or ride.
  • Vendors & Grocery Merchants: Your order details are shared with the relevant Vendor or Merchant to prepare your meal or grocery order.
  • Co-Passengers (Shared Rides): If you opt into a shared ride, your first name, pickup/dropoff points, and route may be shared with your co-passenger(s) for coordination purposes.
  • Payment Processors: Transaction data is shared with Paystack solely to process payments. We do not receive or store your full card number.
  • Legal Authorities: If required by Nigerian law or to protect the safety of our users.

4. Cookies & Tracking Technologies

We use cookies and similar technologies (including local storage and app identifiers) to keep you logged in, remember your preferences, and understand how you use our platform. These fall into three categories:

  • Essential: Required for core functions such as login, checkout, and session security.
  • Functional: Remember your preferences, such as saved addresses or display settings.
  • Analytics: Help us understand usage patterns so we can improve the platform.

You can disable non-essential cookies through your browser or device settings. Disabling essential cookies may prevent you from using core features such as checkout.

5. Data Retention

We retain your personal data for as long as your account remains active, and for a reasonable period afterward where necessary to comply with our legal, accounting, and tax obligations under Nigerian law (typically up to 6 years for financial transaction records). If you request deletion of your account, we will delete or anonymize your personal data except where retention is required by law, or is necessary to resolve disputes, enforce our agreements, or prevent fraud.

6. Data Security

We implement industry-standard encryption protocols (SSL) and secure servers to protect your data. While no digital platform is 100% invulnerable, we take every commercially reasonable step to prevent unauthorized access, loss, or misuse of your information.

7. Your Rights (NDPR)

Under the Nigerian Data Protection Regulation, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data ("Right to be Forgotten").
  • Object to or request restriction of certain processing of your data, and request a copy of your data in a portable format.
  • Withdraw consent for marketing communications at any time.

8. Children's Privacy

Our services are not directed to, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information promptly. If you believe a minor has provided us with personal data, please contact our Data Protection Officer using the details below.

9. Third-Party Services & Links

Our platform integrates with trusted third-party services to deliver core functionality, including Paystack (payments), Google (maps, location, and sign-in), and push-notification services for order and trip updates. These providers process limited data strictly to perform their function and are governed by their own privacy policies. Our platform may also contain links to external websites; we are not responsible for the privacy practices of those third-party sites.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via email, an in-app notification, or a notice on this page, along with an updated "Last Updated" date. Continued use of our services after such changes take effect constitutes your acceptance of the revised policy.

Contact Data Protection Officer

If you have questions regarding this policy or wish to exercise your rights, please contact us:

12 School Road, Ikot Akpaden,
Mpat Enin, Akwa Ibom State