Privacy Policy
AZMERA Express · Last updated: 16 October 2026
This policy explains, in plain words, what personal data AZMERA collects when you use our customer app, why we collect it, who sees it, and what you can do about it.
1. Who we are
The app is run by [[PLACEHOLDER: legal business name]], trading as AZMERA, registered at [[PLACEHOLDER: registered address, Hawassa]].
- Contact for any privacy question: azmerasupport@gmail.com or [[PLACEHOLDER: privacy contact phone]]
- Data protection contact: the same address, marked "Privacy"
2. What we collect
- Account details: your name, and how you sign in. You can sign in with your phone number and a password, or with Google ("Continue with Google"), or look around as a guest. We store a password only in a scrambled form that nobody can read.
- If you use Continue with Google: Google tells us your name, your email address and a Google account ID, and confirms that the sign-in is yours. We never see your Google password. We use the email address to recognise your account when you sign in again.
- If you use the app as a guest: we create an account with a random ID and no personal details. Before your first order we ask for your name and phone number so that the store and the rider can reach you.
- Phone number: needed for every order, so the rider can call you. It is your sign-in name if you use phone and password.
- Delivery addresses: the addresses and landmarks you save or type when you order.
- Precise location: only while you use the app and you allow it, to find your delivery address. We do not track you in the background. To turn your position into a street name, the coordinates alone (no name or phone number) are sent to your phone's own address service and, when that cannot name the street, to OpenStreetMap's public lookup service (Nominatim).
- Orders: what you ordered, from which store, the amount, how you paid and when.
- Payment screenshots: when you pay by bank or mobile transfer you can upload a screenshot or photo of your transfer receipt. It can show your name, an account or phone number, the amount and the time. Our staff and finance team use it to confirm that your payment arrived.
- Personal preferences (optional): your answers about diet, household, pets and age group, if you choose to give them.
- Your choices: your privacy settings and which version of our Terms and this policy you accepted.
- Device and notification details: a push-notification token for your phone, so we can send you order updates.
- Usage and crash data: the app does not use an analytics or crash-reporting service today. If that changes, we will update this policy first.
3. Why we use it, and on what basis
- To run your orders (delivery, payment checks, support, refunds). Basis: the contract between you and us.
- To keep the service safe and prevent fraud (for example, checking that a payment screenshot is real), and to keep accounting records. Basis: our legal obligations and our legitimate interest in running a safe service.
- To send order and security messages. Basis: the contract, and your safety.
- To send promotions and to personalise what you see. Basis: your consent. These are switched off until you switch them on in Profile > Privacy Settings, and you can switch them off at any time.
4. Who receives your data
- Stores and riders get only what they need to prepare and deliver your order: your name, phone number, delivery address and the order contents.
- Payment: we do not run an online card or payment gateway. You pay by transfer to the CBE Birr account or Telebirr number shown in the app. Your bank or Telebirr handles the transfer under its own privacy rules. We only see the receipt screenshot you choose to upload.
- Hosting: our database is hosted by Supabase (Ireland, EU) and our server by Render.
- Image storage: payment screenshots and product pictures are stored with Cloudinary. Payment screenshots are kept in a folder of their own for your account and are used only by our staff, to confirm your payment.
- Sign-in: Google, if you choose Continue with Google.
- Push notifications: Google Firebase delivers notifications to your phone. It receives your device token and the notification text.
- Address lookup: OpenStreetMap receives map coordinates only, as described in section 2.
- Authorities: only where the law requires it.
We do not sell your data. Your personal preferences are never shared with stores, riders or advertisers.
5. Transfers outside Ethiopia
The services in section 4 run on servers outside Ethiopia, in Europe and other regions where Google, Cloudinary and Render operate. We only choose providers that publish data-protection commitments, and all connections are encrypted. We send them only the data each service needs to do its job.
6. How long we keep it
- Account details, addresses, favorites, preferences and settings: until you delete your account.
- Guest accounts that never placed an order or subscribed: removed automatically after 30 days.
- Payment screenshots: deleted when your account is deleted.
- Order and payment records: kept without your name, phone number or address for [[PLACEHOLDER: retention period]], because accounting and tax law and fraud prevention need them.
7. How we protect it
Connections are encrypted. Passwords are stored scrambled. Only the people who need it can open the data, and what they do is logged. No system is perfectly safe. If a breach puts your data at risk we will tell you and the authority within the time the law requires: [[PLACEHOLDER: notification time limit under the law]].
8. Your rights, and how to use them in the app
Under Ethiopia's Personal Data Protection Proclamation No. 1321/2024 you have the right to:
- Be informed about how your data is used: this policy.
- Access your data: Profile > Account Management > Download My Data (once every 24 hours).
- Correct your data: Profile > Account & Preferences > Name. You can correct your phone number until your first order; after that, contact Customer Service.
- Erase your data: Profile > Account Management > Delete My Account.
- Restrict or object to use: Profile > Privacy Settings (promotions, personalisation).
- Take your data with you (portability): Download My Data gives you a file you can keep.
- Withdraw consent at any time: Profile > Privacy Settings. Withdrawing does not affect what was done before.
- Complain to the supervisory authority: [[PLACEHOLDER: name and contact of the supervisory authority]]. You can also write to us first.
9. Deleting your account
You can delete your account in the app. We wait 7 days after your request. During that time you can sign in and cancel. After that your personal data is deleted for good, including your payment screenshots and, for Google sign-in, your Google account ID and email address. We keep only the anonymised order and payment records described in section 6. You cannot delete the account while an order is in progress or a refund is not finished.
You can also ask for deletion on our web page: https://legal.azmera.et/delete-account. We only act on a web request after we have checked that the account is yours.
10. Children
AZMERA is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has an account, tell us and we will delete it.
11. Changes to this policy
When we change this policy we publish the new version here and, for important changes, ask you to accept it again in the app. The date at the top shows when it was last updated.
12. Contact
azmerasupport@gmail.com · [[PLACEHOLDER: privacy contact phone]] · [[PLACEHOLDER: postal address in Hawassa]]