This Privacy Policy explains how the Shazi mobile application and related services ("the App", "we", "us") collect, use, share and protect your personal information when you order food, manage a restaurant, or deliver orders through Shazi. By creating an account or using the App you agree to this Policy. If you do not agree, please do not use the App.
1. Who we are
Shazi is a food ordering and delivery marketplace that connects customers, restaurants and delivery drivers. The App is operated by PayGala Limited ("the Operator"), Dar es Salaam, Tanzania.
Questions about this Policy or your data can be sent to paygalalimited@gmail.com.
2. Information we collect
What we collect depends on how you use Shazi — as a customer, a restaurant partner, or a driver.
| Category | Examples |
|---|---|
| Account | Full name, email address, phone number, password (stored encrypted), profile photo. |
| Orders & menu | Items ordered, order value, special instructions, order history, restaurant menus and prices (for restaurant partners). |
| Location | Delivery address, and — while a delivery is in progress — the driver's live location, so customers and restaurants can track the order. |
| Payment | Mobile-money number or card details processed by our payment partner, and transaction/payment status. We do not store full card numbers. |
| Driver & restaurant verification | National ID, driving licence, vehicle details, and business/registration documents, for drivers and restaurant partners who apply to join Shazi. |
| Device | Push-notification token (Firebase Cloud Messaging), device type and app version, used to deliver order updates. |
| Support & reviews | Messages you send us, and ratings/reviews you leave for restaurants, drivers or orders. |
3. How we use your information
- Create and secure your account, and verify drivers and restaurant partners.
- Process and fulfil orders — from placement, through preparation, to delivery.
- Share delivery location with the relevant customer, restaurant and driver for an order in progress.
- Process payments and payouts through our payment partner.
- Send order confirmations, status updates, promotions and support responses.
- Show ratings and reviews, and improve restaurant and driver quality on the platform.
- Prevent fraud and abuse, and comply with applicable laws.
4. Device permissions
- Location — to set your delivery address, match nearby drivers and restaurants, and track deliveries in progress.
- Notifications — to send order and delivery status updates.
- Camera / Photos — to upload a profile photo, restaurant menu photos, or verification documents (drivers and restaurants).
- Internet — to communicate with our secure servers.
You can disable location and notifications at any time in your device settings, though this may limit some features (for example, live order tracking).
5. How we share information
We do not sell your personal information. We share it only as needed to run the marketplace:
- Restaurants and drivers: order details, delivery address and contact information needed to prepare and deliver your order.
- Customers: a driver's name, photo, vehicle details and live location while delivering their order.
- Payment processor — PayGala: to process payments and driver/restaurant payouts.
- Google Firebase: to deliver push notifications to your device.
- Regulators, courts or law enforcement: where required by Tanzanian law or to protect our rights, users or the public.
6. Data retention
We keep your information for as long as your account is active and as long as needed to provide the service, then for any further period required to meet legal, accounting, tax or regulatory obligations. When no longer required, data is securely deleted or anonymised.
7. Security
We protect your data using encryption in transit (HTTPS), access controls and secure credential storage. No method of transmission or storage is completely secure, but we work to protect your information and limit access to authorised personnel only.
8. Your rights
Subject to applicable law, you may request to:
- Access the personal information we hold about you;
- Correct information that is inaccurate or incomplete;
- Delete your account and associated personal data (see below);
- Withdraw consent, where processing is based on consent.
9. Account & data deletion
You can request deletion of your account and personal data by emailing paygalalimited@gmail.com from your registered email or phone, with the subject "Delete my account". We will verify your identity and delete your data within 30 days, except information we are legally required to retain (for example, completed-order and transaction records kept for tax and accounting purposes). See our Delete Account page for details.
10. Children
The App is intended only for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18.
11. Changes to this Policy
We may update this Policy from time to time. The "Effective date" above shows the latest version. Significant changes will be communicated in the App. Continued use after an update means you accept the revised Policy.
12. Contact us
Shazi · PayGala Limited
Email: paygalalimited@gmail.com
Dar es Salaam, Tanzania