Last updated 31 July 2026

Privacy

OneRun lets someone you know collect orders from one vendor so everyone shares a single delivery. To do that we handle your name, your phone number and what you ordered. This page says exactly who sees what.

What we collect

• Your name and phone number. Needed so the organizer can hand you the right bag and so we can text you when your food arrives.
• Your email, if you give us one. Always optional.
• What you ordered and what you paid.
• Answers to the organizer’s own questions — spice level, office floor, whatever they asked.
• A record of what you agreed to when you checked out: the exact wording, its version, the time, and the IP address it came from. This exists so that if there is ever a dispute, both of us can see what was actually agreed rather than argue about it.

We do notcollect your Mobile Money PIN, your card number, or your card details. Those are entered on your network’s prompt or on the payment processor’s page, never in OneRun. We never see them.

Who sees it

The organizer

The person running the order sees your name, your phone number, what you ordered, what you paid and your answers to their questions. They need all of it to buy your food and hand it to you.

The vendor

By default the vendor gets quantities only — how many khebabs, how many bowls of waakye. No names, no phone numbers, and never any amounts.

An organizer can ask for a little more, such as names so bags can be labelled, but only if the platform permits it. Both have to agree, and the run page tells you before you pay exactly what the vendor will see for that run. If it says quantities only, that is what the printed sheet contains.

The payment processor

Paystack processes the charge and receives what it needs to do so. They are the ones holding your payment details, not us.

Nobody else

We do not sell your data, we do not share it with advertisers, and we do not build profiles of you across runs.

How it is stored

Names, phone numbers, email addresses and your answers to custom questions are encrypted in the database. Somebody who obtained a copy of the database would not be able to read them without a key that is kept separately.

Because of that encryption we cannot search those columns directly. Looking you up by phone number works through a one-way keyed fingerprint, which allows an exact match and nothing else — no partial search, no browsing.

Passwords are hashed with Argon2id. We cannot read your password, and neither can anyone who takes the database.

Ordering without an account

You can order as a guest with just a name and a number. When you do, we give your browser a short-lived pass that opens that one order and nothing else. It expires. After that, getting back to your order needs your reference and a code texted to the number on the order.

How long we keep it

Orders and the accounting records behind them are kept for as long as we are required to keep financial records, and they cannot be edited after the fact — the ledger is append-only by design. Corrections are recorded as new entries, never by rewriting history.

If you close your account we remove your personal details. The financial record of an order that actually happened stays, without your name attached to it.

What you can ask for

• A copy of what we hold about you.
• A correction, if something is wrong.
• Deletion of your personal details, subject to the record-keeping above.

Ask by replying to any message we send you, or at the contact address below, and we will confirm it is you before we act.

Texts we send

We text you about things you did: a code to sign in, a confirmation that your order went through, a note when your food has arrived, and a note if a payment did not complete. We do not send marketing.

Cookies

Only what the app needs to work: a signed-in session, the pass to your own order, and the basket you are part-way through. No analytics or advertising cookies.

Changes

If this page changes in a way that affects what happens to your data, the date at the top changes and the acknowledgements you tick at checkout are re-versioned. What you agreed to before stays what you agreed to.

Contact

Questions about any of this: privacy@onerun.app.