Privacy Policy

Last updated 25 September 2026
This explains what ZEST collects when you order food, why we need it, and exactly who it is shared with. It is written to be read, not to be skimmed past.

Who we are

ZEST is a food delivery service operating around the Federal University Oye-Ekiti, Ikole campus in Ekiti State, Nigeria. We connect customers with restaurants, local kitchens and food sellers nearby, and arrange delivery of their orders.
This policy explains what we collect, why we collect it and who we share it with. You can reach us at aransiolaolayinka6@gmail.com.

What we collect

We only collect what an order actually needs:
Your name and email address. Your email is confirmed with a six-digit code, and it is how you sign in.
Your phone number. We do not verify it, because it exists so the rider can call you when they reach your area.
Your delivery address as you write it, along with the landmark and any directions you add for the rider.
Your orders, including what you bought, what you paid and the seller you bought from.
Basic technical information your browser sends, and a session token that keeps you signed in.
Your device location, only if you choose to share it, and only to help you write an accurate address. The written address is what we actually use.

What we never see

Payments are handled entirely by Paystack. Your card number, PIN, CVV and bank details are entered on Paystack's own screens and never reach ZEST. We only learn whether a payment succeeded, its reference and the amount.
We do not store passwords, because ZEST does not use them. Signing in works by sending a code to your email.

Counting visits

We count how many people open getzest.ng and which page they landed on, using Cloudflare Web Analytics. It is how we tell whether anyone saw a post we made, which nothing else would tell us.
It sets no cookies and asks you for nothing. It does not identify you, does not follow you to other websites, and there is no profile of you anywhere in it. What we see is a count of visits to a page, roughly which country they came from, and which link sent them.

Who we share it with

Delivery is not possible without passing some details on. We share only what each party needs:
The seller preparing your order receives your name, your order and your delivery address.
The rider delivering it receives your address, landmark, directions and phone number.
Paystack receives the payment information required to charge you.
Supabase hosts our database and accounts, Resend delivers our emails, and Cloudflare hosts the site and counts visits to it.
Google receives nothing extra. If you choose to sign in with Google, Google tells us your name, email address and profile picture.

What we do not do

We do not sell your personal information.
We do not share it for advertising.
We do not send marketing email unless you ask us to. The emails we send are about signing in and about your orders.

How long we keep it

We keep your account details for as long as your account exists. We keep order records after that, because we need them for our own accounting and to settle payments with sellers and riders.
If you want your account deleted, email aransiolaolayinka6@gmail.com from the address on the account and we will remove it. Order records that we are required to keep will be separated from your identity.

Your rights

Under the Nigeria Data Protection Act 2023 you may ask what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it.
Write to aransiolaolayinka6@gmail.com and we will respond. There is no charge for asking.

Keeping it safe

Your data is held in Supabase with row-level security, which means the database itself enforces that you can only read your own orders and addresses. Order prices are calculated on our server rather than trusted from your browser. Traffic is encrypted in transit.
No system is perfectly secure. If a breach ever affects you, we will tell you.

Children

ZEST is intended for university students and adults. It is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date at the top of this page. Substantial changes will be announced in the app.