Privacy Policy

1. Who We Are

iShop4You is a market shopping and delivery platform operated by Akilidex Ltd ("we", "us", "our"), registered in Ghana. We connect customers with personal shoppers who buy fresh ingredients from Ghanaian markets and riders who deliver them to your door.

Contact: support@akilidex.com | Accra, Greater Accra Region, Ghana

2. Information We Collect

Information you provide:

• Account information: Name, email address, phone number, password (encrypted)
• Delivery addresses: Street address, landmarks, GPS coordinates
• Payment information: Mobile money number, card details (processed by Paystack — we never store card numbers)
• Order details: Items ordered, budget allocations, delivery preferences, customer notes
• Communications: Messages sent through in-app chat, support emails
• Profile photo: If you choose to upload one
• Referral information: Referral codes shared and used

Information collected automatically:

• Device information: Browser type, operating system, device type
• Location data: GPS coordinates (only when you grant permission for delivery address or rider tracking)
• Usage data: Pages visited, features used, time spent on the platform
• IP address: For security, fraud prevention, and approximate location
• Cookies and local storage: As described in our Cookie Policy

Information from third parties:

• Payment providers: Transaction status and confirmation from Paystack
• Map services: Address geocoding from AWS Location Service and OpenStreetMap

3. How We Use Your Information

• Provide our service: Process orders, coordinate shoppers and riders, calculate delivery fees
• Payments: Process payments, issue refunds, track earnings for shoppers/riders
• Communications: Send order updates via SMS, email, WhatsApp, and in-app notifications
• Security: Detect fraud, prevent unauthorized access, enforce rate limits
• Improvement: Analyze usage patterns to improve the platform, fix bugs, add features
• Price intelligence: Aggregate market price data (anonymised) to show price trends
• Referrals: Track referral codes and issue credits
• Legal compliance: Respond to legal requests, enforce our terms of service

4. Who We Share Your Information With

• Shoppers: Your name, phone number, delivery address, and order items (so they can shop and communicate with you)
• Riders: Your name, phone number, and delivery address (so they can deliver and contact you)
• Payment processors: Paystack receives your payment details to process transactions
• Cloud providers: AWS (hosting, SMS, email), Cloudinary (image storage), Upstash (caching)
• Law enforcement: Only when required by valid legal process under Ghanaian law

We never sell your personal data to advertisers or data brokers.

5. Data Security

• Passwords are hashed with Argon2id (industry-leading algorithm) — we cannot read your password
• All data transmitted over HTTPS (encrypted in transit)
• Database hosted on AWS RDS with encryption at rest
• Access tokens expire after 30 minutes; refresh tokens after 30 days
• Account lockout after 5 failed login attempts (15-minute cooldown)
• Admin actions are logged in an audit trail
• Payment card data is never stored on our servers (handled entirely by Paystack)

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Order history: Retained for 2 years for dispute resolution and legal compliance.
• Payment records: Retained for 7 years as required by Ghanaian tax law.
• Chat messages: Retained for 90 days after order completion, then deleted.
• Location data: Rider GPS positions are ephemeral (not stored permanently). Delivery addresses are retained with your account.
• Audit logs: Retained for 1 year.

7. Your Rights

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Restriction: Ask us to stop processing your data in certain circumstances
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, email support@akilidex.com. We will respond within 30 days.

8. Children's Privacy

iShop4You is not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed on servers located outside Ghana (AWS servers in the US/EU). We ensure appropriate safeguards are in place, including encryption and access controls, to protect your data regardless of where it is processed.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact & Complaints

For privacy-related questions or complaints:

• Email: support@akilidex.com
• Address: Akilidex Ltd, Accra, Greater Accra Region, Ghana

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ghana.