Last updated: August 15, 2026
1. Introduction
This Privacy Policy explains how MirusBuy ("MirusBuy", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our website, mobile application, and related services (collectively, the "Service"). By creating an account or using the Service, you agree to the practices described in this policy.
2. Information we collect
We collect information in the following ways:
- Account information — your name, email address, phone number, delivery address, state and city, and password (stored in encrypted/hashed form).
- Order information — items ordered, order value, delivery address, special instructions, and order history.
- Payment information — when you pay by card or transfer, your payment is processed by our payment partner, Paystack. MirusBuy does not store your full card number, CVV, or banking credentials.
- Location information — with your permission, we use your device's location to show nearby restaurants, calculate delivery distance and fees, and provide live order tracking.
- Communications — messages sent through in-app chat with restaurants or delivery riders, and messages sent through our contact form or support channels.
- Device and usage information — IP address, device type, operating system, browser type, and how you interact with the Service, collected automatically to help us improve performance and security.
3. How we use your information
- To create and manage your account and process your orders.
- To connect you with restaurants and delivery riders, and to facilitate in-app communication between them.
- To process payments securely through Paystack.
- To send order confirmations, delivery updates, and important account notifications by email, SMS, or push notification.
- To respond to support requests submitted through our contact form or in-app support.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To improve our Service, including analyzing usage trends and troubleshooting issues.
- To comply with legal obligations.
4. How we share your information
We share information only as necessary to operate the Service:
- With restaurants you order from, so they can prepare and fulfill your order.
- With delivery riders, so they can pick up and deliver your order, including your delivery address and contact number.
- With Paystack, our payment processing partner, to complete transactions.
- With Daily.co, our voice/video call provider, to enable in-app calls between customers and riders when initiated.
- With service providers who help us operate the Service, such as our email delivery provider, under confidentiality obligations.
- When required by law, such as in response to a valid legal request from a court or government authority.
We do not sell your personal information to third parties.
5. Data retention
We retain your account and order information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described in Section 8 below.
6. Data security
We use industry-standard safeguards to protect your information, including encrypted database connections, hashed passwords, and secure token-based session management. Persistent "remember me" sessions are secured using a selector/validator scheme so that no usable login token is ever stored in plain text. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your choices
- You can review and update your account information at any time from your profile settings.
- You can disable location permissions in your device settings, though this may limit certain features such as nearby restaurant discovery and live tracking.
- You can opt out of non-essential notifications from your account or device notification settings.
8. Your rights & account deletion
Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise any of these rights, including requesting deletion of your account and associated data, please contact us using the details in Section 10 or through our Contact page.
9. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a new "Last updated" date, and, where appropriate, through the Service or by email.
11. Contact us
If you have questions about this Privacy Policy or how we handle your information, please reach out through our Contact page or email us at support@mirusbuy.com.
