Privacy policy

Last updated: 2026

⚠ Draft document. This privacy policy is a placeholder and has not been reviewed by a legal professional. It must be reviewed and approved before Pedyo collects data from real users.

1. Who we are

Pedyo is a local-services marketplace operating in Zimbabwe. References to "we", "us" or "Pedyo" in this policy refer to the Pedyo platform.

2. What data we collect

Account data

When you register, we collect your name, email address and password (stored securely via Supabase Auth — we never store passwords in plain text).

Profile data

You may optionally provide a phone number, location and profile photograph.

Provider data

Providers may submit business information, service descriptions, work photographs and verification documents. Verification documents are stored privately and are never shown publicly.

Usage data

We collect standard server logs including IP addresses, browser type and pages visited. This data is used to operate and improve the platform.

3. How we use your data

To operate and improve the Pedyo platform
To connect customers with service providers
To verify provider identities where requested
To moderate content and enforce our terms
To send account-related notifications

4. Data sharing

We do not sell your personal data. We share data only with:

Supabase (our database and authentication provider)
Cloudflare (our hosting provider)
Law enforcement where required by law

5. Private information

The following information is never shown publicly:

Your email address
Your password
Private residential addresses
Verification documents
Private messages

6. WhatsApp numbers

A provider's WhatsApp number is only shown publicly if the provider has explicitly chosen to publish it on their profile.

7. Data retention

We retain your data for as long as your account is active. You may request account deletion at any time through your account settings. Deletion requests are processed by an administrator.

8. Security

We use Supabase Row Level Security to ensure users can only access their own private data. All data is transmitted over HTTPS.

9. Your rights

You have the right to access, correct or delete your personal data. To exercise these rights, please use the contact page or your account settings.

10. Changes to this policy

We may update this policy from time to time. We will notify users of significant changes.

11. Contact

For privacy questions, please use the contact page.