Privacy Policy

Information we collect

We collect the following, and only for the reasons given below.

• Account details. Your name, email address and phone number.
• University affiliation. The university you register under and your status as a student there.
• Identity verification. An image of your university ID card, and a face scan used to check that you are the person on that card. A NIN or passport is optional and only collected if you choose to provide it.
• Location. Precise device location while you are delivering an order or receiving one, so that a delivery can be routed and tracked. Delivery is regulated geographically, so we also use location to confirm an order stays within the area it is permitted to be delivered in.
• Listings and orders. Products you list, images you upload, orders you place or fulfil, and your transaction history.
• Device and usage data. Device type, operating system, the pages or screens you visit, and how long you spend on them.

Biometric data and identity checks

To sell on Andoma you must verify that you genuinely belong to the university you are registering under. To do this we ask for a photo of your university ID card and a face scan, and we compare the two.

A face scan is biometric data. We use it for one purpose only — confirming that the ID belongs to you, and we do not use it for advertising, profiling, or to identify you anywhere else in the app. We do not sell it, and we do not share it with other users.

We keep the scan and the comparison result only as long as your vendor account is active, and delete both when the account is closed. You can decline the check, but you will not be able to sell on Andoma without it. You may still buy.

Why we use your information

• To verify that a vendor genuinely belongs to a university.
• To match buyers with vendors on the same campus, and show which vendors are online.
• To route, track and confirm deliveries.
• To rank trusted vendors and show reporting warnings on accounts that have been repeatedly reported.
• To process payment for orders and delivery charges.
• To keep Andoma secure and investigate fraud or abuse.

Who we share it with

We do not sell your personal data. We share it only as follows.

• Delivery personnel see the delivery address and the information they need to complete the delivery.
• Vendors see the details of orders placed with them.
• Payment processors receive what they need to take payment.
• Google Firebase hosts our authentication, database and file storage as a service provider on our behalf.
• Law enforcement, where we are legally required to disclose information.

Reporting, trust and account suspension

Buyers can report a vendor. If a vendor is reported enough times, a warning is shown to buyers on that vendor's profile, and the account can be disabled and removed from Andoma.

If your account is disabled and you believe that was a mistake, you can appeal by emailing business@andoma.app. We will review the reports against your account and tell you the outcome.

Advertising and credit

Vendors can pay to advertise a product or to appear higher in search results. These are time-limited subscriptions and can be stopped at any time. Buyers and vendors who use Andoma regularly build up credit, which can be spent on purchases or on advertising plans. We use your order history to calculate credit; we do not use it to target third-party advertising.

How long we keep your data

We keep your account information for as long as your account is open. When you close your account we delete your personal data, including your ID image and face scan, except where we are required to keep transaction records for legal, tax or fraud-prevention reasons.

Your rights

You can ask us to:

• show you the personal data we hold about you;
• correct anything that is wrong;
• delete your data and close your account;
• stop using your data for a particular purpose.

Email business@andoma.app and we will respond. You can also turn off location access in your device settings at any time, though delivery features will not work without it.

Children

Andoma is intended for university students and vendors and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

Security

We use the security measures provided by our infrastructure provider, including encryption in transit, and we restrict who can access identity documents. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the relevant authority if a breach affects your personal data.

Changes to this policy

We may update this policy as Andoma changes. We will update the date at the top of this page, and where the change is significant we will tell you in the app.

Contact us

Questions about this policy or how we handle your data? Email business@andoma.app, or write to 1, Block 1 FCT JSC Quarters, Kubwa, FCT Abuja, Nigeria.