Privacy Policy

Relay (“we”, “us”, “our”) operates the Relay mobile application and website (relayapp.ng). This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Nigeria Data Protection Regulation (NDPR) and other applicable laws.

1. Information We Collect

Account information: When you sign up, we collect your phone number and full name. Authentication is handled via one-time password (OTP) sent to your phone — we do not collect or store passwords or email addresses.

Business information: For fulfillment centers, we collect business name, address, city, state, delivery zones, fee structures, and operational settings (e.g., whether payment on delivery or pickup orders are enabled). For merchants, we collect business name and phone number.

Order data: Customer names, phone numbers, delivery addresses, order items, quantities, and amounts submitted through the app by merchants. Every order status change is logged in an audit trail recording who made the change, when, and from which role.

Inventory data: Product names, SKUs, prices, stock levels, units, low-stock thresholds, and product images uploaded by merchants. Stock levels per fulfillment center are tracked separately.

Rider information: Vehicle type, license plate number, assigned area of operation, online/offline status, delivery statuses, and optional proof-of-delivery photos and notes.

Photos and media: Product images uploaded by merchants, proof-of-delivery photos taken by riders, and optional profile avatars. Photos are compressed and stored securely in our cloud storage.

Device information: Device type, operating system, app version, and push notification tokens (Expo, Firebase Cloud Messaging, or Apple Push Notification Service) to deliver real-time notifications.

Location data: We do not continuously track GPS location. Delivery addresses include optional latitude/longitude coordinates for mapping. Riders may share their location when using the “Open Maps” feature, which opens a third-party maps application on their device.

Locally stored data: The app may temporarily store pending actions (e.g., delivery status updates) on your device when you are offline. This data is synced to our servers when connectivity is restored and then removed from local storage.

2. How We Use Your Information

We use your information to:

• Provide and operate the Relay coordination service
• Authenticate your identity via phone-based OTP verification
• Process and track orders between merchants, fulfillment centers, and riders
• Send push notifications for order updates, new assignments, and inventory alerts
• Send SMS messages for OTP codes and team invite codes
• Calculate delivery fees, pickup fees, and manage payment-on-delivery records
• Track inventory levels and generate low-stock alerts
• Deliver real-time updates via push notifications and in-app notifications
• Queue and sync data when your device is offline
• Improve the app and develop new features

3. How We Share Your Information

We share data only as necessary to operate the service:

• Within your fulfillment center: FC admins can see orders, rider assignments, and merchant information for their center only.
• Between roles: Merchants see their own order statuses. Riders see delivery details for orders assigned to them. No cross-tenant access.
• Service providers: We use Supabase for database hosting, authentication, file storage, and real-time infrastructure. Push notifications are delivered via Expo and Firebase Cloud Messaging (FCM) / Apple Push Notification Service (APNS). Your data is encrypted in transit and at rest.

We do not sell your personal information to third parties. We do not share data with advertisers.

4. Data Security

We implement appropriate technical measures to protect your data:

• All data is encrypted in transit (TLS) and at rest
• Row-level security ensures each fulfillment center only accesses their own data
• Authentication is handled via secure phone-based verification
• Access controls enforce role-based permissions (admin, staff, merchant, rider)

5. Data Retention

We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal information within 30 days, except where we are required by law to retain it.

Order records may be retained in anonymized form for business analytics.

6. Your Rights

Under the NDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@relayapp.ng.

7. Cookies & Analytics

Our website (relayapp.ng) uses cookies and similar technologies for analytics purposes. These help us understand how visitors use our site so we can improve it.

• Analytics cookies: We use analytics tools to collect anonymized data about page views, traffic sources, and user behavior on our website. No personally identifiable information is collected through these cookies.
• Essential storage: We store your cookie consent preference in your browser’s local storage.

You can decline analytics cookies via the banner shown on your first visit. You can also clear your preferences at any time by clearing your browser’s local storage for relayapp.ng.

The Relay mobile app does not use cookies.

8. Third-Party Services

The app may link to third-party services (e.g., Apple Maps, Google Maps for navigation). These services have their own privacy policies, and we are not responsible for their practices.

9. Children’s Privacy

Relay is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the app or via SMS. Your continued use of Relay after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: hello@relayapp.ng
Relay
Lagos, Nigeria