Privacy Policy

1. Who we are

("we", "us") runs an online marketplace that connects students with vendors around their campus. This policy explains what personal information we collect, why, who we share it with, and the choices you have. You can contact us at .

2. What we collect

• When you order: your name, phone number, email address, and, for delivery, your delivery location and any note you add. We also record what you ordered and your order and payment status.
• When you create an account: your name, email, phone number, the campus you choose, and password. Your password is handled by our sign-in provider; we can't read it.
• When you message a vendor: the messages you send. Phone numbers typed into a message are hidden from the other person.
• When you apply to sell: your store name, your name, phone and WhatsApp numbers, email, location and a description of your business. We also ask what you will sell, how you get your items, how customers receive their orders, how long an order takes you to prepare, and (if you choose to give it) a link to where else you sell. So that we can pay you, we ask for the bank account we should pay: the bank, the account name and the account number. You can change it in your store's Wallet. Only your store's logins and Runnit's admins can see it, and each withdrawal keeps a copy of the account it was sent to. If your store is verified and customers can pay you directly, your bank name, account name and account number are also shown to each customer who chooses to pay you directly, on their order page, so they can make the transfer.
• When you pay by bank transfer: your order's payment status, amount and reference, and whether you paid Runnit or paid a store directly. If you send a photo of your transfer receipt (to Runnit Admin, or to a store you're paying directly), we also keep that photo. A receipt can show your name, your bank and your account number. Runnit does not take card payments on the site.
• If you turn on phone notifications: a private push address for your phone, which is not your phone number. We use it only to send you alerts about new messages, and we delete it when you sign out or turn notifications off.
• Technical data: basic information your browser sends (such as your IP address) is handled by our hosting and database providers to run the service and keep it secure.

3. How we use it

• To take and fulfil your orders, confirm payments, arrange delivery or pickup, and handle refunds and disputes.
• To let vendors and customers message each other about an order.
• To review vendor applications and pay vendors for completed orders.
• To keep the service safe, prevent fraud and spam, and meet legal and accounting duties.
• To send service messages such as sign-in and order emails.

4. Who we share it with

• Vendors you buy from see your name, what you ordered, and (for delivery) your delivery location and order note. They do not see your phone number or email through the site; they contact you through in-site messages. If you pay a store directly, that store also sees the receipt you send it.
• Service providers that run the site for us: our database and sign-in provider (Supabase) and our hosting provider (Cloudflare). They process data only to provide those services.
• Your phone's notification service (Apple, Google or Mozilla, depending on your phone) carries message alerts to your phone, if you turn them on. Each alert is encrypted, so they can't read it.
• Google, only if you use Ask Runnit AI (see below).
• Authorities where the law requires it.

We do not sell your personal information. Our providers may process data in countries outside Nigeria.

5. Ask Runnit AI

Ask Runnit AI helps you find products. When you ask it a question, the words you type are sent to Google's Gemini service so it can work out what you are looking for (for example an item, a budget and a place). To understand follow-up questions it also sends the names of products already shown in your chat (not their prices), your last few messages in that same chat, the name of the product or store page you're on, and if you ask a question about one product, that product's public listing text. It never sends your name, phone, email, orders or account. The products and prices you see come from our own catalog, not from the AI.

Because we use Google's free service, Google may use what you type to improve its products, and people at Google may read it. Please don't type personal details into Ask Runnit AI. Your conversation with it is kept only on your own device for a few hours and then deleted. It is not saved on our servers.

6. Messages, photos and payment receipts

Messages are stored so both people can read them. Messages that appear to share contact details are flagged, and our team may read flagged messages to keep the platform safe and to investigate complaints.

Photos you send in a chat, including payment receipts, are kept in private storage: only the two sides of that chat (you and the store's team) and our team can open them. When you send a receipt to Runnit Admin, our team opens it to check your payment; when you send one to a store you're paying directly, the store's team opens it to check their account.

You can delete a message or photo you sent, within 48 hours (not a payment receipt): it then disappears from the chat for both people. We keep a private copy that only our team can open, so that we can look into a dispute or a report. An email alert that was already sent about a message can't be taken back.

When you report something, we save a copy of what you reported (for a message, it and the messages just before it) with your name and email, so our team can look into it. The person or store you report is not told who reported them. When you block a chat, we only record that the chat is blocked and by which side.

When you request something you can't find, the stores at your campus see what you asked for, your budget and note, and your first name with the first letter of your last name. They never see your phone number, email or full name, and phone numbers typed into a request or an answer are hidden automatically. Our team can see requests and answers to keep the platform safe.

Reviews you leave are public. They show your stars, your comment, your first name and the first letter of your last name, the date, and what you bought. Phone numbers in a comment are hidden automatically. Your full name, email and phone number are never shown.

7. Cookies and storage on your device

We use your browser's storage to keep you signed in, remember your cart, remember the phone number for an order you just placed (until you close the tab), and keep your Ask Runnit AI conversation for a few hours. We do not use advertising cookies.

8. How long we keep it

We keep order, payment, receipt and refund records for as long as needed to run the service, resolve disputes and meet legal and accounting requirements. Account details are kept while your account is open.

You can delete your account yourself, in My account → Delete my account, once none of your orders is still running. Your name, phone number and sign-in are deleted, together with your chats with vendors, your requests and the phones that get your notifications. Order, payment, receipt and refund records stay, no longer linked to an account, because vendors, payments and disputes depend on them. Reviews you wrote stay, showing only your first name and the first letter of your last name.

9. Your rights

Under the Nigeria Data Protection Act, 2023, you can ask us what personal data we hold about you, ask us to correct it, ask us to delete it where we no longer need it, object to certain uses, and complain to the Nigeria Data Protection Commission. To use any of these rights, email . We may need to confirm who you are first.

10. Security

Access to order and payment records, chat photos and receipts, and vendors' payout account details is limited to authorised staff and to the people they concern (for a chat photo, the two sides of that chat; for a store's bank details, its own logins and customers paying it directly), and protected by sign-in and access rules in our database. No system is perfectly secure, so please use a strong, unique password and keep it private.

11. Children

Runnit is meant for university students and other adults. If you are under 18, please ask a parent or guardian before using it, and don't use Ask Runnit AI.

12. Changes

We may update this policy. We will change the date at the top and, for important changes, tell you on the site.

13. Contact

Questions or requests: .