Privacy policy

BANAEATS PRIVACY POLICY

Last Updated: March 30, 2026

IMPORTANT NOTICE

This Privacy Policy ("Privacy Policy") constitutes a legally binding agreement between you ("User" or "you" or "your") and BanaEats ("BanaEats" or "we" or "us"). The following privacy policy governs your access to and use of BanaEats mobile applications for iOS and Android devices (collectively, the "Apps"), including the customer application, driver application, and restaurant application, and your access to and use of BanaEats' website located at www.banaeats.com (the "Website") including any content, functionality and services offered on or through the Website (the "Internet Services") (the Website, the Internet Services, and the Apps, are collectively referred to as the "BanaEats Platform"), whether as a guest or a registered User.

Please read this Privacy Policy carefully before you start to use the BanaEats Platform. By installing any of the Apps, by otherwise accessing or using any aspect of the BanaEats Platform, or by clicking to accept or agree to this Privacy Policy when this option is made available to you, you accept and agree that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service, found at https://banaeats.com/terms ("Terms of Service"), incorporated herein by reference (together herein referred to as this "Agreement"). If you do not want to agree to this Privacy Policy, you must not access or use the BanaEats Platform.

ABOUT BANAEATS

BanaEats is a web and mobile application‑based platform, accessible via www.banaeats.com and downloadable onto your mobile phone (the "Applications"), that connects individuals or organizations who require courier or food delivery services (the "Customers" or "Senders") with individuals or organizations who wish to offer their delivery service (the "Drivers") and restaurants who prepare food for delivery (the "Restaurant Partners"). Subject to applicable terms, Drivers can provide Customers with delivery services on demand or on a scheduled basis. BanaEats serves users in Addis Ababa, Ethiopia and surrounding areas.

BanaEats reserves the right to review and change this Privacy Policy at any time by updating this page. When BanaEats updates this Privacy Policy, it will use reasonable endeavors to provide you with notice of same, such as by posting the updated Privacy Policy on the Platform or notifying you via email or in‑app notification. Any changes to this Privacy Policy shall take immediate effect from the date of their publication. Your access and use of the Applications and/or Services after BanaEats makes any changes constitute your acceptance of any such changes, and you will be bound by those changes.

INFORMATION WE COLLECT

The information we collect depends on how you use the BanaEats Platform and the type of account you have. We collect information in three ways: information you provide to us directly, information we collect automatically when you use the Platform, and information we receive from third parties.

Information You Provide to Us

We collect information you provide directly to us when you register for an account, create or update your profile, use the Services, communicate with us or with other users, or otherwise submit information through the Platform.

For All Users: This information may include, but is not limited to, your name, email address, phone number, password, profile photo, and any other information you choose to provide.

For Customers: When you register as a customer or sender, we may collect your delivery addresses, payment information (for cash on delivery transactions), order history, delivery preferences, and photographs of items or packages you wish to have delivered, which you may upload to the Platform for verification and identification purposes.

For Drivers: When you register as a driver, we may collect your government‑issued identification (such as your ID card or passport), driver's license information and images, vehicle registration documents, vehicle information including vehicle type, make, model, color, license plate number, and vehicle photos, bank account details or mobile money information for payment purposes, tax identification number, background check information (if applicable), proof of insurance (if you choose to obtain your own), and your current location when you are available to accept deliveries.

For Restaurant Partners: When you register as a restaurant partner, we may collect your business registration documents, tax identification numbers, business address, bank account information for settlement purposes, menu information including item names, descriptions, prices, and photographs, operating hours, estimated preparation times, and owner or manager information including name and contact details.

Information We Collect Automatically

When you access or use our Platform, we may automatically collect information about you, including:

Location Data: We collect precise or approximate location data from your mobile device if you enable location services. This is essential for Customers to find nearby restaurants and track deliveries, for Drivers to optimize routes and receive order assignments, and for Restaurants to verify service areas. Drivers may have location data collected even when the app is running in the background to enable delivery tracking and order assignment.

Device Information: We collect information about the devices you use to access the Platform, including device model, operating system, unique device identifiers (including Advertising ID), mobile network information, and app version.

Usage Information: We collect information about how you interact with our Platform, including features you use, pages viewed, time spent, referral URLs, orders placed or received, vehicle selections, acceptance and cancellation rates, and customer ratings.

Transaction Information: We collect details about orders, deliveries, payments, earnings, and customer ratings associated with your account.

Communications Records: We may collect records of communications between users through our Platform, such as in‑app chat messages and call logs, for quality assurance and dispute resolution purposes.

Analytics Data: We collect crash reports, performance metrics, and error logs to help us identify and fix technical issues and improve the Applications.

Information from Third Parties

We may also receive information from third parties, including Google Maps and Google Earth for mapping and navigation services, analytics providers who help us understand how users interact with our Platform, and social media platforms if you choose to connect your account. We may combine information we collect from you with information obtained from such third parties and use it in accordance with this Privacy Policy.

LEGAL BASIS FOR PROCESSING (FOR EEA & SIMILAR JURISDICTIONS)

To the extent that data protection laws in your jurisdiction require a legal basis for processing personal information, BanaEats relies on the following:

  • Performance of a Contract: Processing is necessary to provide the services you request, including order fulfilment, matching Customers with Drivers and Restaurants, real‑time tracking, and payment processing.

  • Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving and developing our Platform, fraud prevention, security, dispute resolution, and analytics.

  • Compliance with Legal Obligations: Processing is necessary to comply with Ethiopian laws and regulations, including tax, financial reporting, and law enforcement requests.

  • Consent: For certain processing activities, such as marketing communications, optional photo uploads, and background checks (where required), we will obtain your explicit consent, which you may withdraw at any time.

HOW WE USE YOUR INFORMATION

We use the information we collect for various purposes, including:

  • To Provide and Improve Our Services: Process and fulfil orders, match Customers with Drivers and Restaurants, calculate delivery fees and distances, provide real‑time order tracking, enable communication between users, verify items and packages through uploaded photographs to ensure accurate delivery and prevent fraud, and improve and develop new features and services.

  • To Maintain Safety and Security: Verify user identities (especially Drivers and Restaurants), detect and prevent fraud, unauthorized transactions, and other illegal activities, monitor for prohibited or dangerous goods, ensure compliance with our Terms of Service, and conduct background checks for Drivers as permitted by law (with explicit consent where required).

  • To Communicate with You: Send order confirmations, updates, and delivery status notifications, respond to customer support inquiries, send important account and service updates, send promotional offers and marketing communications (with opt‑out option), and contact you about disputes or delivery issues.

  • To Comply with Legal Obligations: Comply with Ethiopian laws and regulations, respond to legal requests from government authorities in Addis Ababa and Ethiopia, and enforce our Terms of Service.

  • For Research and Analytics: Analyze usage patterns to improve user experience, conduct market research, and develop new features and services.

  • For Payment and Settlement: Use Driver and Restaurant Partner information to calculate earnings, process payments, and facilitate settlements.

HOW WE SHARE YOUR INFORMATION

We may share the information we collect with various parties for the purposes described in this Privacy Policy, including:

  • Between Platform Users: We share information necessary to facilitate deliveries. When a Customer places an order, we share the Customer’s name, phone number, and delivery address with the assigned Driver, and we share the Driver’s name, photo, vehicle details, and real‑time location with the Customer. We share Customer order details and contact information with the Restaurant Partner to prepare the food. We share photographs of items or packages with the assigned Driver to assist in identifying and verifying the correct items for pickup and delivery. We share necessary information between Drivers and Restaurant Partners to coordinate pickup. We share Driver and Restaurant information with Customers for rating and review purposes.

  • With Service Providers: We share information with third‑party service providers who help us operate our business, including cloud hosting providers, SMS and notification services, analytics providers, customer support tools, mapping services (Google Maps), and payment processors. A current list of our key service providers (sub‑processors) is available at https://banaeats.com/third-party-providers.

  • For Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as court orders or law enforcement requests in Ethiopia.

  • In the Event of a Business Transfer: If BanaEats is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and choices you may have.

  • With Your Consent: We may share your information for other purposes with your explicit consent.

  • Aggregated or De‑identified Information: We may share aggregated or de‑identified information that cannot reasonably identify you for research, marketing, or other purposes.

IMPORTANT: BANAEATS DOES NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES FOR ADVERTISING OR MARKETING PURPOSES. We do not rent, trade, or sell your information to advertisers or other companies for their independent marketing purposes.

YOUR CHOICES AND RIGHTS

Account Information and Deletion

You may review and update your account information by logging into the appropriate App and accessing your account settings. You may also request deletion of your account by visiting https://banaeats.com/account-deletion or by contacting us at [email protected].

When you request deletion of your account, the following will occur:

  • Your account will be deactivated and permanently deleted from our active systems.

  • Your personal information will be deleted.

  • Your order or delivery history will be anonymized and no longer linked to your identity.

  • Photographs you have uploaded will be deleted in accordance with our retention policy.

  • Location data associated with your account will be deleted.

Information that may be retained for legal purposes includes:

  • Records of transactions retained for a period to comply with tax and financial reporting obligations.

  • Information necessary to resolve disputes or enforce our Terms of Service may be retained until such disputes are resolved.

  • Information requested by law enforcement or required by Ethiopian law may be retained as required.

If you wish to delete specific information without closing your account (such as removing a saved address or deleting uploaded photos), you may do so through the App settings or by contacting us at [email protected], and we will accommodate such requests where technically feasible.

Location Information

You can enable or disable location services through your device settings at any time. However, please note that disabling location services may affect certain functionality of the Platform. Customers may not be able to find nearby restaurants or track deliveries. Drivers may not receive delivery requests or be able to navigate to pickup and delivery locations.

Push Notifications

You can opt out of receiving push notifications through your device settings. However, even if you opt out of push notifications, you may still receive important account‑related notifications through the App or via email.

Marketing Communications

You can opt out of receiving promotional emails from us by following the unsubscribe instructions provided in those emails. Please note that even if you opt out of marketing communications, you will still receive non‑promotional messages related to your account and activities, such as order confirmations, delivery updates, payment information, and account notifications.

Your Privacy Rights

Under Ethiopian law, you may have certain rights regarding your personal information, including the right to:

  • Access the personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your information subject to certain legal obligations.

  • Object to or restrict certain processing activities.

To exercise these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable law.

DATA SECURITY

We take reasonable measures to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include:

  • Encryption of data in transit using SSL/TLS technology.

  • Secure storage of passwords using hashing algorithms.

  • Access controls and authentication procedures.

  • Limited access to Driver and Restaurant partners who receive only the information necessary to complete deliveries.

  • Regular security assessments.

However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security of your information.

DATA RETENTION

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • Personal Information (name, email, phone, address): Retained for as long as your account is active and for a period of ninety (90) days thereafter to comply with legal obligations, resolve disputes, and enforce our agreements.

  • Location Data: Real‑time GPS location information collected during deliveries is retained for a period of thirty (30) days to facilitate delivery tracking, resolve disputes, and improve our services.

  • Photographs of Items/Packages: Images uploaded for delivery verification are retained for a period of thirty (30) days after completion of the delivery to verify transactions, resolve disputes, and for quality assurance purposes.

  • Driver and Restaurant Business Information: Business documents, identification, financial information, and associated identification photos (e.g., ID cards, driver’s licenses, business licenses) are retained for as long as the account is active and for a period of ninety (90) days thereafter to comply with tax and financial reporting obligations.

  • Background Check Information (if applicable): Background check reports are retained for as long as the Driver’s account is active and for a period of ninety (90) days thereafter, or as required by law. Such information is processed with explicit consent and used solely for safety and compliance purposes.

  • App Activity and Usage Data: Information about how you interact with our Platform is retained for a period of ninety (90) days for analytics and service improvement purposes.

  • Device Information and Analytics Data: Crash reports, performance metrics, and error logs are retained for a period of ninety (90) days to identify and fix technical issues.

When we no longer need your information for the purposes for which it was collected, or when you request deletion of your account, we will delete it or anonymize it so that it no longer identifies you, subject to legal requirements for retention.

COOKIES AND TRACKING TECHNOLOGIES

We use analytics tools and software development kits (SDKs) within our Applications to understand app performance, user behavior, and to identify and fix technical issues. These tools may collect information such as how you use the Application, crash reports, and performance metrics. This information is used solely to improve our services and user experience. We do not use cookies or tracking technologies for advertising purposes, and no personal information collected through these tools is sold or shared with advertisers. Third‑party analytics providers we work with are contractually obligated to protect your information and use it only for the purposes we specify.

CHILDREN’S PRIVACY

Our Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take steps to delete such information. Our Platform is intended for users who are 18 years of age or older. Users between the ages of 13 and 17 may use the Platform only with the supervision and consent of a parent or legal guardian, and such parent or guardian agrees to be bound by this Privacy Policy and our Terms of Service on behalf of the minor.

THIRD‑PARTY SERVICES

Our Platform integrates with certain third‑party services that are governed by their own privacy policies and terms of use. These include:

We are not responsible for the privacy practices or content of such third‑party services. We encourage you to review the privacy policies of any third‑party services you access or use through our Platform.

INTERNATIONAL DATA TRANSFERS

BanaEats is based in Ethiopia, and your information will be collected, processed, and stored in Ethiopia. Ethiopian data protection laws may differ from those of other jurisdictions. By using our Platform, you consent to the transfer of your information to Ethiopia and the collection, processing, and storage of your information in Ethiopia. If you are accessing our Platform from outside Ethiopia, please be aware that your information may be transferred to, stored, and processed in Ethiopia where our servers are located, and our central database is operated. We will take appropriate measures to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update this Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws. Changes will be posted on our website at www.banaeats.com and within the Applications, and will take effect immediately upon posting. You can see when this Privacy Policy was last updated by checking the “Last Updated” date displayed at the top of this Privacy Policy. Your continued use of our Platform after any changes to this Privacy Policy constitutes your acceptance of such changes.

CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

BanaEats
Email: [email protected]
Website: www.banaeats.com
Account Deletion Requests: https://banaeats.com/account-deletion
Addis Ababa, Ethiopia

You may also contact us through the App or Website for any privacy‑related inquiries.