What we collect#
If you book laundry:
- Account details: your name, email address, phone number, and password (stored securely by our login provider; we never see it). If you sign in with Google, we receive your name, email, and profile picture from Google.
- Your profile photo, if you have one: the picture on your Google account, or a photo you upload yourself (which Google sign-in never replaces). It appears on your account and to the Stelloo team. You can change or remove it at any time from your profile.
- Pickup details: your addresses, landmarks, preferred pickup and delivery times, and laundry preferences or special instructions you give us.
- Orders: what you ordered, from which laundry, prices, dates, and each order’s status history.
- Payments: the amount, status, and reference of each payment. Card and bank details are entered on Paystack’s checkout and handled by Paystack; Stelloo never receives or stores them.
If you apply as a laundry partner or runner, we also collect what the application asks for:
- Laundries: business name and registration details, owner name and contact details, shop address, operating details, bank account for payouts, and documents such as a valid ID, CAC certificate, utility bill, and shop photos.
- Runners: full name, phone, date of birth, residential address, next of kin, work area and availability, vehicle details, bank account for payouts, and documents such as a valid ID, driver’s licence, passport photograph, and utility bill.
- Runner availability: when you switch online or offline in the runner app.
From your device: if you turn on notifications, a push notification token for that browser or device. We also keep basic technical logs (such as IP address and request times) to keep the service secure and prevent abuse. We don’t track your location with GPS.
Why we use it#
- To provide the service you asked for: taking bookings and payments, arranging pickup and delivery, and keeping you updated (performance of our contract with you).
- To verify laundry partners and runners and pay them (contract, and our legitimate interest in keeping customers safe).
- To send push notifications about your orders, only if you turn them on. You can turn them off any time (consent).
- To prevent fraud, keep Stelloo secure, and resolve disputes (legitimate interests).
- To keep financial records and meet other legal obligations (legal obligation).
We don’t sell your personal data, and we don’t use it for advertising.
Where your data is stored#
Our database and files are hosted on Google Cloud in the European Union (Belgium and the Netherlands). This means your data is transferred outside Nigeria. We rely on Google’s contractual and security safeguards for these transfers, as the Nigeria Data Protection Act allows. Paystack processes payment data under its own privacy policy.
How long we keep it#
- Account and profile data: while your account is open. When you ask us to delete your account, we delete or anonymise it, except what we must keep.
- Orders and payment records: as long as tax and accounting law requires, generally six years.
- Partner applications and documents: while you’re a partner, and for a limited time afterwards where needed for legal, safety, or dispute reasons.
- Push notification tokens: until you turn notifications off, sign out, or the token stops working.
Your rights#
Under the Nigeria Data Protection Act 2023, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that’s wrong or incomplete (you can also edit your details in the app);
- delete your data or your account;
- restrict or object to how we use your data;
- send your data to you or another service in a common format;
- withdraw consent you’ve given, such as for notifications.
To use any of these rights, email akinlarab1@gmail.com from the address on your account. We’ll reply within 30 days. If you’re not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).
Security#
Data is encrypted in transit and at rest on Google Cloud. Access is limited to the Stelloo team members who need it, and every request is checked against the signed-in user’s permissions. No system is perfectly secure, but if a breach affects your data, we’ll tell you and the NDPC as the law requires.
Children#
Stelloo isn’t meant for children under 18, and we don’t knowingly collect their data.
Changes and contact#
If we change this policy, we’ll update the date at the top and tell you about important changes in the app or by email. For any privacy question, email akinlarab1@gmail.com or write to us in Ikeja, Lagos, Nigeria.
