Privacy Policy

This Privacy Policy explains how Nimeshiba Eateries ("we", "us", or "our") collects, uses, discloses, and protects personal information when you use Nimeshiba Eateries (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy. We act as the data controller for information we process about you.

• Account Information (via Clerk): When you sign up or sign in using email/password or social providers (Google, Facebook, TikTok, X/Twitter) through Clerk, we receive identifiers such as name, email address, avatar, and a unique user ID. We reference Clerk's user model and do not request more data than necessary.
• Usage Data: Pages viewed, actions taken, device and browser metadata, timestamps, IP-derived approximate location, and referrers.
• Cookies & Local Storage: Used for authentication (session cookies via Clerk), preferences, and basic analytics.
• Support Communications: Content of messages you send us and related metadata (e.g., contact details, time of request).

• Authenticate users, create and manage accounts, and secure sessions.
• Operate, maintain, and improve the Service and user experience.
• Personalize content and remember preferences.
• Monitor for fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms and policies.
• Communicate important notices (service updates, security alerts).

• Contract: Processing necessary to provide the Service (e.g., account creation and sign‑in).
• Legitimate Interests: To secure and improve the Service and prevent fraud.
• Consent: For optional features (e.g., marketing communications or certain analytics). You can withdraw consent at any time.
• Legal Obligation: To comply with applicable laws and regulatory requirements.

We use essential cookies for authentication and security, and (optionally) analytics cookies to understand usage. You can manage cookies in your browser settings. Some features may not function without essential cookies.

• Service providers that help operate the Service (under confidentiality obligations).
• Legal or safety reasons (e.g., comply with law or protect rights and safety).
• Business transfers (e.g., merger or acquisition) under safeguards preserving this policy.
• With your consent or at your direction.

Your information may be processed in countries other than Kenya. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

We retain personal information only as long as necessary to provide the Service and for legitimate business purposes (e.g., security, fraud prevention, legal compliance). If you delete your account or request deletion, we will delete or anonymize your data unless we are required to retain it by law.

We implement administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure.

The Service is not directed to children under the age of 13 (or as defined by local law), and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Material changes may be communicated by additional notice.