D'House · Last updated 26 August 2026
This policy explains what D'House collects when you use the mobile app, why we collect it, and what control you have over it. It applies to the D'House Android application and the services behind it.
D'House is operated by D'House. If you have a question about this policy or about your data, contact us at support@holyziki.xyz.
| Data | Why we collect it |
|---|---|
| Name, email address, phone number | To create and secure your account, and so a rider or our support team can reach you about an order. |
| Sign-in identifier from Google (if you use social sign-in) | To let you sign in without a separate password. We receive an account identifier and email, not your password. |
| Precise device location | Used while you are choosing a delivery address, so the map can centre on where you are. Collected only when you grant the permission, and only while the app is in use. |
| Delivery addresses and their coordinates | Saved to your account so you can reuse them, and sent to the rider assigned to your order. |
| Orders, cart contents, and reviews | To process, deliver, and support your orders, and to show your order history. |
| Payment references | Payments are handled by Pesapal. We store the transaction reference, amount, currency, and status returned to us. We never receive or store your card number, mobile-money PIN, or bank credentials. |
| Push notification token | To send you order and delivery updates. You can turn notifications off in your device settings. |
| Basic technical logs | Request timestamps and error diagnostics, kept to keep the service running and to investigate abuse. |
We use the data above only to:
We do not sell your personal data, and we do not use it for third-party advertising.
We share only what a given party needs to do its job:
We keep your account data for as long as your account is open. Order and payment records are retained after that where we need them for accounting, tax, or dispute-resolution purposes. When data is no longer needed for any of these purposes, we delete it or irreversibly anonymise it.
Traffic between the app and our servers is encrypted in transit using HTTPS. Passwords are stored hashed, never in plain text. Access to production data is limited to staff who need it. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data we hold.
D'House is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
If we make a material change, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use of D'House after a change means you accept the updated policy.
Questions, requests, or complaints: support@holyziki.xyz.