This explains what KwikOrda does with personal information — both the restaurants who subscribe to KwikOrda and the people who order food from them. The two are treated differently, and each section says which one it is about.
The short version
We hold a restaurant's account details because they are our customer. We hold a diner's WhatsApp number and order history on behalf of the restaurant they ordered from — that restaurant decides what happens to it, and we act on their instructions.
We never see a full mobile money number or card number. We do not sell anything to anyone, and we do not use one restaurant's data to help another.
Information we hold about your restaurant
When you apply and while you use KwikOrda we hold:
- Your account — business name, your name, login email, a hashed password (we cannot read it), and the WhatsApp number customers message.
- Your application — the city, cuisine and any note you wrote, plus any documents you sent to show the business is yours.
- Your business content — menu, prices, photos, delivery zones, opening hours, and the numbers that receive order tickets.
- Billing — which plan you are on, invoices, and payment references. Card and mobile money details are handled by our payment provider and never reach us.
- Settlement — the mobile money number you asked to be paid on, and the account name your network returned for it.
- Usage — sign-in times, actions taken in the console, and error logs.
For all of this we are the controller: we decide why we hold it. We hold it because we need it to run your account, to bill you, to keep the platform secure, and to satisfy a tax or regulatory request if one comes.
Documents you send during approval
If you attach a registration certificate, licence or ID while applying, we use it only to check the business is yours. It is visible to the people reviewing applications and to nobody else, and we delete it once your application has been approved or declined and any dispute period has passed.
Information the restaurant holds about you
When you order through WhatsApp, the restaurant you messaged holds:
- Your WhatsApp number and the name on your WhatsApp profile.
- The messages of that conversation, so the order can be assembled and looked up again.
- What you ordered, when, what it cost, and any delivery address or note you gave.
- A masked mobile money number — for example
024 *** 4567. The full number is used to raise the charge and is never written to our records.
The restaurant is the controller of that information, not us. We are their processor: we store and handle it on their instructions and for no purpose of our own. If you want your data corrected or deleted, ask the restaurant — and if you cannot reach them, write to us at support@kwikorda.app and we will pass it on and act on their answer.
Your conversation also passes through WhatsApp, which is operated by Meta under its own privacy terms. Nothing in this policy changes what Meta does with it.
Who else sees any of this
| Who | What they get | Why |
|---|---|---|
| Meta (WhatsApp) | The messages, and the numbers in the conversation | It is the channel the order happens on |
| Our payment provider | Amount, reference, and the mobile money number for a charge | To take the payment and settle it to the restaurant |
| Our email and SMS provider | The address or number a message goes to, and its contents | Verification codes, receipts and account email |
| Our hosting provider | Everything, at rest and in transit | The servers this runs on |
That is the whole list. We do not sell personal information, we do not share it for anyone else's advertising, and a restaurant on KwikOrda can never see another restaurant's customers, orders or menu.
How long we keep things
- Orders and invoices — seven years, because tax law expects them to exist.
- Conversations and carts — while they are live, then for as long as the restaurant keeps the account, so a repeat customer is recognised.
- Verification codes — minutes. They are deleted the moment they are used.
- Application documents — until the application is decided and any dispute is over.
- A closed restaurant account — deleted or anonymised within 90 days, except records tax law requires us to keep.
What you can ask for
Under Ghana data protection law you can ask for a copy of the personal information held about you, ask for it to be corrected, ask for it to be deleted, object to a particular use of it, or withdraw consent you gave for marketing messages. Withdrawing marketing consent never affects a message about an order you actually placed.
Write to support@kwikorda.app. We answer within 30 days. If your request is about an order, say which restaurant — they are the ones who decide, and we will tell you what they say.
Security, honestly stated
Passwords are hashed with argon2id and cannot be read by us or recovered by anyone. Restaurant data is isolated at the database level, so one account's queries cannot reach another's rows. Full mobile money numbers are masked before they are stored and card details never touch our servers at all. Traffic is encrypted in transit.
None of that is a promise that nothing can go wrong. If a breach happens that puts you at risk, we will tell the affected restaurants and, where the law requires it, the regulator — promptly, and with what we actually know rather than a holding statement.
Changes to this policy
If we change something that matters, we will email restaurant account owners before it takes effect and update the date at the top. Continuing to use KwikOrda after that is how the new version is accepted.
Who we are, and how to reach us
- KwikOrda
- Accra, Ghana
- support@kwikorda.app
A person reads that address. If something here is unclear, or you think we have handled your information wrongly, write to us before you go anywhere else — most of it we can simply fix.