Privacy Policy

Roro Technologies Limited (trading as “Ryze”) is the data controller for personal data processed through Ryze (Roro Technologies Limited). Contact our Data Protection Officer through the contact details below.

• Account details: full name, phone number, email (optional), business name, password (stored only as a secure hash).
• Orders: products, quantities, delivery state and hub or address, pickup codes, bank-transfer references and receipts you upload, refund bank details.
• Partners (resellers & pickup centers): legal name, National Identification Number (NIN), date of birth, home and business addresses, CAC number, identity and ownership documents, photos of premises, payout bank details, and notes from our verification visits.
• Customers booked by a reseller: the name and phone number the reseller gives us, so we can send pickup updates.
• Device & usage: push-notification tokens, app version, error reports (without personal details), and basic logs needed to keep the service secure.

• To provide the service (contract): pooling orders into trucks, confirming payments, delivery and pickup, refunds, partner commissions and fees.
• To verify partners and prevent fraud (legitimate interests and legal obligations): checking NIN and documents, site inspections, detecting duplicate identities.
• To keep you updated (contract / consent): SMS, WhatsApp, email and push messages about your orders. You can switch SMS and WhatsApp off in your account.
• To meet legal duties: accounting, tax and responding to lawful requests.

We never sell your data. We share only what is needed with:

• Partner factories, warehouses, pickup centers and delivery staff — only the details needed to fulfil your order.
• Service providers that process data for us: cloud hosting and storage, SMS/WhatsApp (e.g. Termii), email (e.g. Resend), push notifications (Expo, Apple, Google), error monitoring (Sentry), and identity-verification providers when enabled.
• Authorities when the law requires it.

Some providers store data outside Nigeria. Where they do, we rely on the safeguards permitted by the NDPA.

Passwords are hashed; identity and ownership documents are kept in private storage and opened only through links that expire within 30 minutes; NINs are masked on screen; staff access is limited by role and logged.

• Account data: while your account is open.
• Order, payment and commission records: up to 6 years for accounting and tax.
• Partner verification records: for the life of the partnership and up to 6 years after, to prevent fraud.
• Rejected partner applications: up to 12 months.

Under the NDPA you can ask to access, correct, delete or port your data, object to or restrict processing, and withdraw consent. Email ; we reply within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).

Delete your account any time in Account → Delete my account (web or app), or see how to delete your account. We remove your personal details and keep only anonymised order records we are required to retain.

Ryze is for people aged 18 and over. We don't knowingly collect data from children.

We'll post updates here and tell you in the app when changes are significant.