Skip

Privacy

Last updated: 12 November 2026 · Version 2026-11-12-d1

We collect the minimum data needed to prepare and deliver your meal. This page explains which data, why, who sees it and how to use your rights.

Copy the link to this page

1. Who is responsible

Data controller: Kapeje Solutions Inc. Registration: 1182775438.

Contact: privacy@kolis.delivery.

The restaurant also processes some of your data (your order, first name, notes) to prepare the meal; it is responsible for that use.

2. The data we collect

  • Account: first name, phone number, email, language, country.
  • Delivery address and instructions for the courier.
  • Your order history: dishes, amounts, restaurants, dates.
  • Allergies or dietary restrictions that you choose to declare (see the dedicated section).
  • Restaurant: business identity, trade register, or the owner's identity card for a small restaurant, bank or payout details, menu and sales.
  • Payment: amounts and references. We do not keep your card or mobile account numbers.
  • Delivery: courier GPS position during the delivery, order status.
  • Support and reviews: messages, photos, ratings and comments.
  • Technical: security logs, IP address, device type.

3. Why we use it

  • Pass on and prepare your order, deliver it and keep you informed: performance of the contract.
  • Payment, refunds, daily payouts to restaurants, accounting: performance of the contract and legal obligation.
  • Check restaurants and couriers, prevent fraud, keep the service safe: legitimate interest and legal obligation.
  • Support, disputes, reviews: performance of the contract and legitimate interest.
  • Declared allergies: your explicit consent, given when you order.
  • Promotional messages: only with your consent, which can be withdrawn at any time.

We do not sell your data and we do not use it for targeted advertising.

4. What the other person sees

  • The restaurant sees your first name, your order contents and, if you gave them, your notes and declared allergy. It does not see your phone number or full address.
  • The courier sees your first name and the address needed for delivery. They do not see your phone number: calls and messages go through Kolis.
  • You see the restaurant's name, the courier's first name and their position during the delivery only.
  • A restaurant for on-site pickup sees the first name and the order code.

5. Declared allergies: sensitive data

An allergy or dietary restriction may reveal information about your health or beliefs. We treat it with care.

  • You declare it voluntarily, with your explicit consent, and you can choose to declare nothing.
  • It is used only to inform the restaurant for that order.
  • It is not used for profiling, advertising or individual statistics.
  • It is never sent to the AI assistant.
  • It is removed from the order after 30 days by default, or earlier on request. This period is adjustable.

6. Retention periods

Default periods, adjustable. After that, deletion or anonymisation.

  • Account: while active, then 30 days after closure.
  • Order history: 12 months, then anonymised.
  • Declared allergies: 30 days (see above).
  • Financial transactions and accounting records: 10 years.
  • Restaurant file (trade register or owner's ID): during activity, then 12 months after the relationship ends.
  • GPS positions: off by default; 30 days if turned on.
  • Support and disputes: 24 months; security logs: 12 months.

7. Providers, AI and transfers

We use providers for hosting and database (Supabase, Vercel), email (Resend, Brevo), SMS and WhatsApp (Twilio, Brevo) and, later, payment and mobile money.

The AI assistant is optional and off by default. We never send it personal data, or allergies.

Your data may be processed outside your country. We frame these transfers with safeguards and, if the law requires, an authorisation.

For delivery, your data is also processed by Kolis under the Kolis Privacy policy, available at kolis.delivery.

8. Security, rights and minors

We protect your data: encrypted connections, role-based access, access logs. In case of an incident, we notify people and the authority as the law requires.

You can ask for access, correction or deletion of your data, object to a processing or withdraw your consent, by writing to privacy@kolis.delivery. Reply within 30 days.

You can complain to the data protection authority of your country (in Cameroon: the authority created by Law No. 2024/017, art. 53).

We do not knowingly collect their data.

9. Changes and contact

We may update this policy; the date is at the top of the page. Questions: privacy@kolis.delivery. Help: support@kolis.delivery. Legal: legal@kolis.delivery.

See the terms of use