EzDine is a food delivery platform that connects customers, restaurant owners, and delivery agents in Zimbabwe. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have.
1. Who We Are
EzDine is operated by EzDine Zimbabwe (Pvt) Ltd, registered in Zimbabwe. References to "EzDine", "we", "us", or "our" in this policy mean EzDine Zimbabwe (Pvt) Ltd.
If you have questions about this policy, contact us at: ezdinehelpdesk@gmail.com
2. Information We Collect
2.1 Information You Provide
- Phone number – used for authentication via OTP (one-time password) and to allow delivery agents to contact you during delivery.
- Email address – collected from restaurant owners and delivery agents at sign-up.
- Full name – collected during KYC (Know Your Customer) verification for restaurant owners and delivery agents.
- Date of birth – collected during KYC to confirm minimum age requirements.
- National ID or passport number – collected during KYC for identity verification purposes only. Not used for any other purpose.
- Residential and business address – collected during KYC for verification purposes.
- Vehicle information – collected from delivery agents (type, make, registration number).
- Profile photo – optional, uploaded to Firebase Storage.
- Delivery address – entered or pinned by customers when placing an order.
- Payment method selection – e.g., EcoCash, OneMoney, Cash on Delivery. We do not store your mobile money PIN or card CVV.
- Special delivery instructions – any notes you add when placing an order.
2.2 Information Collected Automatically
- GPS location – used when you place an order (to calculate delivery fee and show your location to the delivery agent) and during active deliveries (agent location streamed to customer). We do not track your location continuously in the background.
- Device token (FCM token) – a unique identifier used to send push notifications about your orders. Stored securely in Firebase.
- Order history – all orders you place, including items, prices, timestamps, and statuses.
- App usage data and crash reports – collected via Firebase Crashlytics to fix bugs. Does not include your order details or personal messages.
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Process and fulfill your food orders | Name, phone, delivery address, GPS, order contents |
| Authenticate your account securely (OTP) | Phone number |
| Verify restaurant owners and delivery agents (KYC) | Full name, ID number, DOB, photos, address |
| Send order status notifications | FCM token, order status |
| Calculate delivery fees and show live delivery tracking | GPS coordinates (restaurant + customer + agent) |
| Calculate and record restaurant commissions | Order subtotals, commission rates |
| Improve the app and fix crashes | Crash logs (anonymised), usage patterns |
| Comply with legal obligations (tax, fraud prevention) | Transaction records, identity data |
4. Data Sharing
We do not sell your personal information. We share it only as follows:
- Delivery agents – when you place an order, the assigned delivery agent can see your first name, phone number, delivery address, and GPS pin so they can find you.
- Restaurant owners – can see order contents, your name, and phone number for the orders placed at their restaurant.
- Firebase / Google – our backend infrastructure. All data is stored in Firebase (Firestore, Storage, Authentication). Google's privacy policy applies to this infrastructure.
- Firebase Crashlytics – receives anonymised crash diagnostics.
- Payment processors – when you pay via EcoCash or OneMoney, the payment is processed by those platforms under their own privacy policies. We do not receive your mobile money PIN.
- Law enforcement – we may disclose information if required by Zimbabwean law or a valid court order.
5. Data Storage and Security
Your data is stored in Google Firebase data centres. Firebase provides industry-standard encryption at rest and in transit (TLS 1.2+).
We apply the following additional protections:
- Firestore security rules restrict who can read and write each document — customers can only see their own orders, agents can only see their assigned deliveries.
- KYC documents (ID numbers, DOB) are stored in a restricted Firestore sub-document accessible only to EzDine administrators.
- Your cart data is stored in encrypted secure storage on your device (Android Keystore / iOS Keychain), not in plaintext.
- FCM tokens (notification identifiers) are stored securely and are not exposed to other users.
6. Data Retention
- Order records – retained for 7 years for tax and legal compliance, even after account deletion. Order details are anonymised after 2 years.
- KYC documents – retained for 5 years after the account is closed, as required by Zimbabwean financial regulations.
- Live agent GPS data – deleted from order documents immediately when the delivery is completed or cancelled.
- Notification tokens (FCM) – deleted when you sign out or delete your account.
- Account data – deleted within 90 days of a confirmed account deletion request (see Section 8).
7. Children's Privacy
EzDine is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, contact us at ezdinehelpdesk@gmail.com and we will delete the account.
8. Your Rights and Choices
- Access – You can view your profile, order history, and saved addresses inside the app at any time.
- Correction – You can update your name, phone, and delivery addresses in the Profile screen.
- Deletion – You can delete your account from Profile → Delete Account. This submits a deletion request; your data is permanently removed within 90 days. Transaction records required for legal compliance are anonymised and retained (see Section 6).
- Notifications – You can disable push notifications in your device settings at any time.
- Location – You can deny location permission; you will still be able to manually enter delivery coordinates.
- Data portability – Contact ezdinehelpdesk@gmail.com to request a copy of your personal data.
9. Cookies and Tracking
The EzDine mobile app does not use cookies. The web version uses Firebase's standard session tokens stored in browser local storage for authentication only. We do not use any third-party advertising or analytics cookies.
10. Third-Party Services
EzDine uses the following third-party services. Their privacy policies apply to your interactions with them:
- Google Firebase (database, authentication, notifications, crash reporting)
- PesePay (payment gateway processing EcoCash, OneMoney, Visa/Mastercard transactions on behalf of EzDine; PesePay receives your payment method details when you pay online — EzDine does not store your card number, mobile money PIN, or CVV)
- EcoCash / Econet Wireless Zimbabwe (mobile money network)
- OneMoney / NetOne (mobile money network)
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via a push notification or in-app message before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes your acceptance of the updated policy.
12. Contact Us
For privacy questions, data requests, or complaints:
- Email: ezdinehelpdesk@gmail.com
- WhatsApp / Phone: +263 77 921 5300
- Support: In-app Support screen → Send Message
- Address: EzDine Zimbabwe (Pvt) Ltd, Harare, Zimbabwe