Privacy policy

Effective date: July 19, 2025

Data Controller: OPOOBO Global Services Company Limited

App name: OPOOBO Go

Services: Multi-vendor platform for food, grocery, eCommerce, pharmacy, parcel delivery, and related services (the “Services”), including the OPOOBO Go mobile app, web app (https://go.opoobo.com), and API.

By using OPOOBO Go, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

Account and profile: Name, email address, phone number, profile photo, and password when you register or update your profile.
Authentication: Login credentials; if you use social or Apple sign-in we receive identifiers (e.g. email, unique id) from Google, Facebook, or Apple as per their policies.
Addresses and delivery: Delivery and pickup addresses, contact person name, phone number, email, and optional details (e.g. street number, house, floor) for orders and parcel services.
Orders and payments: Order details, delivery instructions, payment method information, and for some payment flows, redirects to payment success/failure/cancel URLs. We do not store full card numbers; payment processing is handled by third-party payment providers.
Communications: Messages you send through in-app chat and any contact details you give when contacting support.
Referral and marketing: Referral code usage and, if you opt in, email or phone for newsletter and marketing.
Content you submit: Reviews, ratings, and any images or files you upload (e.g. profile picture, prescriptions or documents where the app allows).

1.2 Information Collected Automatically

Device and app: Device type, operating system, app version, and identifiers used for push notifications (e.g. Firebase Cloud Messaging token).
Location: With your permission, we collect location (e.g. latitude/longitude) to determine service zones, show nearby stores, enable delivery/parcel addresses, show your position on the map, and track delivery progress. Zone and coordinates may be sent to our servers with API requests.
Usage: Browsing and search history within the app (e.g. search history), cart contents, and how you use the app to operate and improve the Services.

1.3 Information From Other Sources

Third-party sign-in: When you use “Sign in with Google,” “Sign in with Facebook,” or “Sign in with Apple,” we receive the data they share (e.g. email, name, unique identifier) in line with your choices with those providers.
Backend and partners: We may receive information from our backend, vendors, delivery partners, and payment or analytics providers as needed to run the Services

2. How We Use Your Information

We use the information we collect to:

Create and manage your account, authenticate you, and provide guest checkout where available.
Process and fulfil orders (food, grocery, pharmacy, parcel, etc.), including delivery and pickup.
Send push notifications (e.g. order status, offers) using your FCM or similar token.
Show relevant content (e.g. stores and items by zone, distance, and preferences).
Process payments and prevent fraud.
Communicate with you (order updates, support, and, if you consented, marketing and newsletters).
Run referral and loyalty programmes (e.g. refer-and-earn, loyalty points).
Improve the app (e.g. analytics, fixing errors; we may use services such as Firebase; crash reporting may be enabled in some versions).
Comply with law and enforce our terms.

3. Legal Bases (Where Applicable)

If you are in the EEA/UK, we rely on:

Contract: Processing necessary to provide the Services (e.g. account, orders, delivery).
Consent: Where we ask for it (e.g. marketing, non-essential cookies, optional location features).
Legitimate interests: Improving the Services, security, analytics, and support.
Legal obligation: Where required by law.

4. Sharing of Information

We may share your information with:

Vendors and delivery partners: To fulfil orders and deliveries (e.g. name, address, phone).
Payment providers: To process payments; they have their own privacy policies.
Service providers: Such as Google (Maps, Sign-In, Firebase), Facebook (if you use Facebook login), and Apple (Sign in with Apple), each with their own privacy policies.
Authorities: When required by law or to protect rights and safety.

We do not sell your personal information to third parties for their marketing. We may share aggregated or de-identified data that does not identify you.

5. Data Retention

We keep your account and order data as long as your account is active and as needed for legal, tax, or dispute purposes. Push notification tokens and session data are retained as needed to provide the Services. You can request account deletion (see “Your Rights” below); we will delete or anonymise your data in line with our policies and legal obligations.

6. Security

We use technical and organisational measures (e.g. HTTPS, secure APIs, access controls) to protect your data. No system is completely secure; we encourage you to use a strong password and keep your login details private.

7. Your Rights and Choices

Depending on where you live, you may have the right to access your data, correct it, request deletion, object to or restrict certain processing, data portability, withdraw consent, and lodge a complaint with a supervisory authority.

In the app you can:

Turn off push notifications in device or app settings.
Update or delete addresses and profile information.
Use “Remove account” to request deletion of your account and associated data.
Accept or decline cookies when we show a cookie banner (e.g. “Yes, accept” / “No thanks”).

To exercise your rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law.

8. Cookies and Local Storage

Cookies (web): We use cookies and similar technologies for essential operation, preferences, and analytics. When you use the web app, you may see a cookie notice; you can accept or decline non-essential cookies as offered.

App storage: The app uses local storage (e.g. SharedPreferences and local databases) for tokens, cart, addresses, language, theme, and similar data to provide the Services and remember your choices.

9. Children

The Services are not directed at children under the minimum age required in their country (e.g. 13 in the US, 16 in the EEA where applicable). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can delete it.

10. International Transfers

Your data may be processed in the country where our servers or service providers (e.g. Google, Firebase) are located. If you are in the EEA/UK and data is transferred outside it, we use appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by law.

11. Third-Party Links and Integrations

The app may open third-party sites (e.g. payment pages, social networks, maps). Those have their own privacy policies. We are not responsible for their practices. We encourage you to read their policies when you leave our Services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version (with a new “Last updated” date) in the app or on our website and, where required by law, ask for your consent or notify you. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related requests, questions, or complaints, contact OPOOBO Global Services Company Limited:

Contact: [email protected]
Support: [email protected]
Data Protection & Compliance: [email protected]
In-app: Via support or contact options in the OPOOBO Go app.

We will respond in line with applicable data protection laws.