Privacy Policy

Cross Technologies ("we," "our," or "us") operates the CoolChop mobile applications (CoolChop, CoolChop Partner, and CoolChop Rider) and the website coolchop.crosstechghana.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, do not access or use our Services.

1. Information We Collect

1.1 Information You Provide

• Account information: Phone number (used for authentication via Firebase Phone OTP), name, email address, and profile photo.
• Delivery addresses: Saved addresses you add for food delivery.
• Payment information: Payment details processed securely through our third-party payment providers (Paystack, MTN Mobile Money). We do not store your full payment card or mobile money credentials on our servers.
• Vendor & rider information: If you register as a vendor or rider, we collect business information, KYC documents (government-issued ID, driver's license), vehicle details, and bank or mobile money account details for payouts.
• Reviews and communications: Ratings, reviews, and any messages you send through in-app chat or support.

1.2 Information Collected Automatically

• Device information: Device type, operating system, unique device identifiers, and FCM push notification tokens.
• Location data: With your permission, we collect precise location data to show restaurants near you, enable real-time delivery tracking, and optimise rider dispatch. Riders' locations are tracked during active deliveries.
• Usage data: Pages and features you access, timestamps, interactions with the app, and crash reports.
• Log data: IP address, browser type, referring/exit pages, and API request metadata.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Process and deliver food orders, including matching you with nearby restaurants and riders.
• Process payments through Paystack and MTN Mobile Money and handle refunds when applicable.
• Send push notifications about order status, delivery updates, promotions, and account activity.
• Provide real-time delivery tracking and estimated arrival times.
• Enable in-app communication between customers, vendors, and riders during active orders.
• Verify vendor and rider identities through KYC document review.
• Improve our Services, including personalising your experience and analysing usage trends.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We may share your information with:

• Restaurants and riders: Your name, delivery address, and order details are shared with restaurants to prepare your food and with riders to deliver it.
• Payment processors: Paystack and MTN Mobile Money receive necessary payment information to process transactions.
• Service providers: Google Cloud Platform (hosting, databases), Firebase (authentication, notifications, analytics), and other service providers that help us operate our platform.
• Legal requirements: When required by law, regulation, legal process, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

4. Data Storage and Security

• Your data is stored on secure servers hosted on Google Cloud Platform with encryption at rest and in transit.
• We use PostgreSQL databases with regular backups and point-in-time recovery.
• Authentication is secured via Firebase Phone OTP and server-side JWT tokens stored in HttpOnly, Secure cookies.
• API endpoints are protected with rate limiting, input validation, and security headers (Helmet).
• Payment webhook signatures are verified using HMAC to prevent tampering.
• Sensitive actions are recorded in audit logs for accountability.

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Order history: Retained for up to 3 years for accounting and dispute resolution purposes.
• Location data: Rider location data during deliveries is retained for 90 days. Customer location data is not stored after an order is completed.
• KYC documents: Retained for the duration of the vendor or rider relationship, plus 1 year after account closure as required by regulations.

6. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete the personal information we hold about you.
• Withdraw consent for location tracking at any time through your device settings.
• Opt out of promotional push notifications through your app or device settings.
• Request a copy of your data in a portable format.
• Delete your account through the app (available for vendors and riders) or by contacting support.

7. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately and we will delete it.

8. Third-Party Services

Our Services integrate with the following third-party services:

• Firebase (Google) — Authentication, push notifications, analytics, and cloud storage.
• Paystack — Payment processing.
• MTN Mobile Money — Mobile money payment processing.
• Google Maps — Location services and navigation.
• Google Cloud Platform — Hosting, database, and infrastructure services.

Each of these services has its own privacy policy. We encourage you to review their policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our Services after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@crosstechghana.com
• Address: Cross Technologies, Accra, Ghana