Privacy Policy

1. Who this policy covers

This policy explains how Daylimeal ("Daylimeal", "we", "us") collects, uses, shares and protects personal information when you join our waitlist, apply as a Founding Captain, create an account, order a meal plan, or otherwise use daylimeal.com and our related services in Ghana.

2. Information we collect

• Account details — full name, phone number (your primary sign-in identifier), email address, delivery address and location coordinates, dietary preferences and allergies
• Waitlist & Founding Captain applications — WhatsApp number, work and home area, employer or school, role, typical lunch spend and days per week, meal preferences, team size, who referred you, and your reasons for applying
• Payment information — handled directly by our payment processor, Paystack; we receive confirmation that a payment succeeded but do not store your full card or mobile money number
• Order & delivery data — the meals and add-ons you choose, delivery instructions, and order history
• Communications — messages you send our support team, and records of SMS or WhatsApp messages we send you
• Technical data — IP address, browser and device information, the page you landed on, and campaign parameters (such as which link or ad brought you to the site) recorded when you submit a form

3. How we use your information

• Create and secure your account, and verify your phone number by SMS one-time code
• Process, prepare and deliver your meal plan or order
• Route waitlist and Founding Captain applications to the right team member and open delivery zones by demand
• Calculate and pay Founding Captain referral rewards, and prevent fraud in the referral program
• Send order confirmations, delivery updates, and service messages by SMS, WhatsApp, or email
• Provide customer support and respond to your enquiries
• Improve our menu, delivery operations and service quality
• Send promotional communications, only where you have agreed to receive them

4. Who we share information with

We share personal information only where necessary to run the service, and we never sell your personal data. The parties we share with:

• Paystack — to process card and mobile money payments securely
• Arkesel — to deliver SMS verification codes and order updates to your phone
• Partner kitchens — receive only what they need to prepare and label your order (name, meal choice, delivery location), not your payment or contact details
• Amazon Web Services (AWS) — our infrastructure provider, which hosts our application and database in a secured environment
• Delivery riders — receive your name, phone number and delivery location to complete your delivery

5. Phone number & SMS verification

Your phone number is your primary account identifier. We send a one-time verification code by SMS (via Arkesel) when you sign up or sign in, and may send order and delivery updates the same way. Standard message charges from your network operator may apply. We do not use your phone number for marketing without your consent.

6. Data security

We use industry-standard measures to protect your personal information — encryption in transit, authentication via Amazon Cognito, a private database with least-privilege access, and secured infrastructure on AWS. No system is completely immune to risk, but we work to keep your data safe and will notify you if a breach affects you, as required by law.

7. Your rights

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data, subject to records we must keep by law
• Opt out of marketing communications at any time
• Request a portable copy of your data
• Lodge a complaint with Ghana’s Data Protection Commission if you believe your rights have been infringed

8. Cookies & tracking

We use essential cookies to keep you signed in and remember your preferences. We do not currently use third-party advertising or analytics trackers. When you submit a waitlist or Founding Captain form, we record the campaign parameters in that link (for example, which social post or partner referred you) so we understand which channels are working — this is read once from the page URL, not tracked across other sites.

9. Data retention

We retain personal data for as long as needed to provide the service, service you as a Founding Captain or referral partner, or as required by law — for example, payment records are kept for the period Ghanaian tax and financial regulations require. Inactive accounts may have their data deleted after two years of inactivity, and you may request earlier deletion at any time.

10. Children’s privacy

Daylimeal is a paid subscription service intended for adults. It is not directed at, and we do not knowingly collect personal information from, anyone under 18.

11. Changes to this policy

We may update this policy as our service changes. We will update the date below when we do, and will let you know directly if a change materially affects how we handle your data.

12. Contact us

For privacy questions or to exercise your rights, contact us at privacy@daylimeal.com or through customer support.