How we collect, use, and protect your personal data.
Digrocer Limited ("Digrocer", "we", "our", "us") operates the Digrocer mobile application on iOS and Android ("the App"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our App.
We are committed to complying with Ghana's Data Protection Act, 2012 (Act 843) and are registered with the Data Protection Commission of Ghana. By creating an account or using the App, you consent to the practices described in this Policy.
If you do not agree with this Policy, please do not use the App.
Digrocer Limited is the data controller for personal information processed through the App.
| Detail | Information |
|---|---|
| Company Name | Digrocer Limited |
| Registered in | Ghana (Office of the Registrar of Companies) |
| DPC Registration | Pending Registration |
| Data Protection Supervisor | To be appointed |
| Contact Email | privacy@digrocer.com |
| Physical Address | Accra, Ghana |
| Data | Purpose |
|---|---|
| First and last name | Account identification, delivery |
| Email address | Account login, order confirmations |
| Phone number | Delivery coordination, MoMo payments |
| Delivery address (street, city, region, GhanaPostGPS) | Order fulfilment |
| Ghana Card number (optional) | Identity verification |
| Password (hashed — never stored in plain text) | Account security |
| Payment method (MoMo number, provider) | Processing payments |
| Order history | Showing your past purchases |
| Data | Purpose |
|---|---|
| App usage data (screens viewed, features used) | Improving the App |
| Device type and operating system | Technical support |
| Session timestamps | Security monitoring |
We do not use your data for targeted advertising, sell it to third parties, or profile you for purposes beyond grocery delivery.
| Processing Activity | Legal Basis |
|---|---|
| Account creation and login | Consent (you agree at sign-up) |
| Processing your order | Performance of contract |
| Sending order updates | Consent / Legitimate interest |
| Fraud prevention | Legitimate interest / Legal obligation |
| Analytics (anonymised) | Legitimate interest |
| Compliance with tax/legal obligations | Legal obligation |
Important: Our App is powered by Supabase Inc., a US-based technology company. Your personal data is stored on Supabase servers which may be located in the United States or European Union.
By using Digrocer, you consent to your data being transferred to and processed in the United States and/or EU. We have ensured that Supabase maintains industry-standard security practices (SOC 2 Type II certified). For more information on Supabase's data practices, see supabase.com/privacy.
We do not sell your personal data. We share data only with:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Supabase Inc. (USA) | Database, authentication hosting | All account data |
| MTN Ghana | MoMo payment processing | Phone number, transaction amount |
| Vodafone Ghana | MoMo payment processing | Phone number, transaction amount |
| AirtelTigo Ghana | MoMo payment processing | Phone number, transaction amount |
| Delivery riders | Completing your delivery | Name, phone, delivery address |
| Ghana Revenue Authority | Tax compliance | Transaction records |
| Law enforcement | When required by law | As legally required |
You may delete your Ghana Card number from your profile at any time by editing your profile in the App.
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion, then 90 days |
| Order history | 7 years (required by Ghanaian tax law) |
| Payment records | 7 years (required by Ghanaian tax law) |
| Usage/analytics data | 24 months (anonymised after 6 months) |
| Support correspondence | 3 years |
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access | Request a copy of all data we hold about you | Email privacy@digrocer.com |
| Right of Correction | Correct inaccurate personal data | Edit in Profile, or email us |
| Right of Deletion | Request deletion of your account and data | "Delete Account" in Profile settings |
| Right to Object | Object to certain processing (e.g. marketing) | Toggle in Notifications settings |
| Right to Withdraw Consent | Withdraw consent at any time | Uninstall the App / contact us |
| Right to Complain | Complain to the DPC | dpc.gov.gh |
Account Deletion: When you request account deletion through the App, we will process your request within 30 days. Order history required for tax compliance will be retained for 7 years in anonymised form.
In the event of a data breach affecting your personal data, we will notify you and the Data Protection Commission within 72 hours of becoming aware of the breach.
Digrocer is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@digrocer.com and we will delete the account promptly.
The Digrocer App does not use browser cookies. We use anonymised in-app analytics to understand how users interact with the App. This data cannot identify you personally and is used solely to improve the App.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date, send an in-app notification, and require re-acceptance if changes affect how we use your data.
Digrocer Data Protection
Email: privacy@digrocer.com
Address: Accra, Ghana
Data Protection Commission of Ghana
Website: dpc.gov.gh
This Privacy Policy was prepared in compliance with Ghana's Data Protection Act, 2012 (Act 843) and the Electronic Transactions Act, 2008 (Act 772).