Privacy Policy — Nugezza

Last updated: 18 October 2026

Nugezza ("we", "our", "us") operates the Nugezza platform, the Nugezza mobile application and the website at nugezza.com (together, the "Service"). This Privacy Policy describes what information we collect, how we use it, and the choices you have.

1. Information we collect

When you use the Service we collect:

Account information — name, email address, phone number, password (stored hashed) and profile photo.
Delivery addresses — addresses and coordinates you add to your profile for delivery orders.
Order data — items ordered, prices, business, status history, your notes.
Payment data — handled by our payment processor (Stripe). We store only a record of the transaction; we do not store full card numbers.
Location — your approximate or precise device location, only when you grant permission, to show nearby shops and pre-fill delivery addresses.
Notification tokens — your Firebase Cloud Messaging (FCM) token, so we can send order status updates and notifications you opt in to.
Device and usage data — app version, OS version, IP address, crash and performance logs.
Messages and calls — messages you send in the Social tab, and anything attached to them: photos, files, voice messages, locations and contact cards you choose to share. These are end-to-end encrypted. We store them only as sealed data that we cannot open, and we never hold the keys. Voice and video calls go directly between the two phones; when a direct connection is not possible the audio and video pass through a relay we run, which forwards them without being able to read them. A Nich (a status that disappears after a day) is not end-to-end encrypted, because it goes to everyone you are connected to — the app says so on the screen where you post one.

1a. Your phone’s contacts

The Android app can check which of the people in your phone already use Nugezza. This is worth setting out in full, because it is the part people most want to know about.

It happens only when you ask for it, by pressing a button on the New chat screen. There is no background sync, and nothing is read when the app starts.
The app tells you what it will do before Android asks you for permission, and you can decline at either point.
Only the phone numbers are sent to us, and only to look them up. Names never leave your phone.
We do not store them. The numbers are compared against accounts and the answer is returned; nothing is written down, and we keep no record of who is in your address book.
We never write to your contacts. The app does not ask for permission to change them.
If you would rather not, everything still works — you can find anyone by their username, phone number or email in the same search box.

1b. Nugezza Team

Nugezza Team (team.nugezza.com and its desktop and phone apps) is where a business’s team works together. If you are in a team:

What the team keeps — your name, the email you give the team and your role in it; the tasks, chat messages, ideas, votes, whiteboards, prompts, files and pictures you add; the hours you record and the shared expenses you take part in.
Who sees it — the people in that team, and no one else. A team belongs to a business, and its owner decides who is in it.
Not end-to-end encrypted — unlike messages in the Social tab, a team’s messages and files are kept readable on our servers, so that everyone in the team can read its history on every device. They travel over HTTPS.
Calls — audio, video and shared screens go between the people in the call, through a relay we run when a direct connection is not possible. Calls are never recorded.
Notifications — the phone app keeps its Firebase (FCM) token with your sign-in, and it is deleted when you sign out.
How long — a file shared on a task is removed 30 days after it was shared; a photo or file uploaded but never sent is removed after a day. The rest is the team’s record of its work and stays while the team exists. If you leave a team, or delete your Nugezza account, what you made stays with the team under your name, and your sign-ins end. Deleting your account also deletes your email address, username and phones in every team: the full list is on Delete account.
For a team’s content, the business that owns the team decides what it keeps: ask its owner, or write to us at the address below.

2. How we use your information

To create and operate your account.
To accept and fulfil orders you place with businesses on the platform.
To process payments through Stripe.
To send transactional notifications (order accepted, ready, out for delivery, etc.) and notifications you opt in to.
To show shops near you, when you enable location.
To carry your messages and calls to the people you send them to.
To run the teams you are in on Nugezza Team, for the people in each team.
To tell you which of your contacts already use Nugezza, when you ask.
To investigate fraud, abuse and security incidents.
To comply with applicable law.

Businesses you order from — they receive your name, contact details, delivery address and order contents in order to prepare and deliver your order.
Delivery riders — for delivery orders, the assigned rider receives your name, contact number and address.
Service providers — Stripe (payments), Google Firebase (push notifications, crash reporting), our hosting providers.
Authorities — when required by law or to protect legal rights.

We do not sell your personal information.

We cannot share the contents of your messages with anyone, including if we were asked to: they are end-to-end encrypted and we do not hold the keys. We also share nothing from your phone’s contacts, because we keep nothing from them.

4. Retention

Account data is kept while your account is active. Order records are kept for as long as required for tax, accounting and dispute purposes (typically 5 years). You can request deletion at any time — see section 6.

5. Security

We use HTTPS for all traffic, hashed passwords and access controls on our infrastructure. No system is perfectly secure; we encourage you to use a strong unique password.

6. Your rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information (from the Profile page).
Request deletion of your account and personal data — see our account deletion page for the one-click in-app flow, or email us.
Withdraw consent to push notifications at any time (from the Profile page).
Object to processing or request portability of your data.

To exercise these rights, email info@nugezza.com.

7. Children

Nugezza is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. International transfers

Your information may be processed in countries other than the one you live in, including in the European Union and the United States. We apply appropriate safeguards when transferring data across borders.

9. Changes

We may update this Privacy Policy. We will post the new version here and update the "Last updated" date.

10. Contact

Nugezza
Email: info@nugezza.com
Website: nugezza.com