Privacy Policy
Last updated 30 August 2026
This policy explains what personal data DrippleX collects, why we collect it, who we share it with and what you can do about it. It covers the DrippleX app and website, whether you use them as a customer, a driver, a delivery rider or a merchant.
Who is responsible for your data
DrippleX is operated by AFNAN HOMES LTD (RC 9387949), a company registered in Nigeria. AFNAN HOMES LTD (“DrippleX”, “we”) is the data controller for the personal data described in this policy.
For any question about this policy, or to exercise any of the rights described below, contact privacy@dripplex.com.
What we collect, and why
DrippleX is a single app serving customers, drivers, riders and merchants. Not all of the below applies to you — a customer who never becomes a partner never provides bank details or a guarantor’s identification. What is listed is everything the app can collect, across all of those roles.
- Your name, email address and phone number
- To create and secure your account, and to reach you about an order, a trip or a payment. Your phone number is your primary identity on DrippleX — there are no usernames.
- Your delivery and business addresses, including their precise coordinates
- To deliver orders to the right place, to set a pickup point for a ride, and to match you with nearby merchants, drivers and riders.
- Photos you upload — profile picture, store and product images
- To display your profile and, for merchants, your storefront and listings.
- Identity documents and a verification selfie, where you complete identity checks
- To verify who you are. Required of drivers, riders and merchants before they can be approved, and of customers who choose to raise their wallet limits.
- Your government identification number and date of birth
- To complete those same identity checks.
- Your bank account details, if you are a merchant, driver or rider
- To pay you. This is a payout destination — see below on card details, which are different and which we do not hold.
- Your order, trip and wallet history
- To show you what you bought, where you travelled and what you were charged, to settle payouts, and to resolve disputes and refunds.
- Live audio while you are on an in-app call
- To carry a voice call between you and the driver, rider or merchant on a live job. Nothing is recorded and nothing is stored — your microphone is used only while a call is connected, and the audio passes straight through to the other person. What we keep is who called whom, when, and for how long.
- A push notification token for your device
- To send you order, delivery and trip notifications. It identifies the device, not you personally, and it is used for nothing else.
What we do not collect
- Your card number, CVV or expiry date. When you pay by card, our payment providers collect those details directly and we never receive or store them. What we keep is a record that a payment succeeded or failed, and for how much.
- Any advertising or attribution data. DrippleX carries no advertising SDK, no attribution SDK and no third-party analytics.
- Your location in the background. Location is read only while the app is open and in use — the app has no background-location capability and does not ask for one.
- Crash or performance telemetry. No crash-reporting service is enabled on the production apps.
Device permissions
The app asks for these only when the feature that needs them is used, and it works without them wherever that is possible.
- Location
- Setting a delivery address, choosing a pickup point, and — for drivers and riders who are online — sharing position with dispatch so trips can be assigned and tracked. Only while the app is open.
- Camera
- Photographing an identity document, a vehicle or a product listing, when you choose to take a new photo rather than pick an existing one.
- Photo library
- Choosing an existing photo for your profile, your store, or an identity document.
- Microphone
- Speaking on an in-app voice call with the driver, rider or merchant on a live job. Requested only when a call starts, and used only while it is connected.
- Notifications
- Order updates, trip updates, payment confirmations and — for partners — job offers. You can turn these off in your device settings at any time.
Who else sees your data
We do not sell your personal data, and we do not share it for advertising.
We use the service providers below to operate DrippleX. They act on our instructions, under contract, and may use your data only to provide their service to us.
- Paystack, Flutterwave and Peyflex
- Processing payments and payouts
- Termii
- Sending one-time verification codes by SMS
- Resend
- Sending transactional email
- Firebase Cloud Messaging
- Delivering push notifications
- Cloudflare R2
- Storing uploaded files, including identity documents and product images
- Google Maps
- Converting addresses into coordinates
- LiveKit
- Carrying in-app voice calls between you and a driver, rider or merchant. It relays the call; nothing is recorded
Some of these providers process data outside Nigeria. Where that happens we rely on the transfer safeguards required by the Nigeria Data Protection Act 2023.
Other people on the platform see only what a transaction requires. A driver sees your first name, your pickup and your destination. A merchant sees your name, your delivery address and what you ordered. Neither sees your identity documents, your wallet balance or your payment details.
We may also disclose data where the law requires it, or to investigate fraud, abuse or a threat to someone’s safety.
How your data is protected
All traffic between the app and our servers is encrypted in transit. The app will not load unencrypted content. Access to identity documents is restricted to the Operations staff who review them, and administrative actions on your account are recorded in an audit log.
Your wallet and other sensitive actions are protected by a PIN that you set. Never share it, and never share a one-time verification code — no member of DrippleX staff will ever ask you for either.
How long we keep it, and deleting your account
We keep your personal data for as long as your account is open, and after that only for as long as we are required to. Financial and transaction records in particular must be retained under Nigerian law even after an account is closed.
You can ask us to delete your account at any time. The account deletion page sets out exactly what is erased, what we must keep and why, and what has to be settled first — an outstanding wallet balance, an order or trip still in progress, or a payout still owed to you all have to be resolved before an account can be closed.
Children
DrippleX is not intended for children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact privacy@dripplex.com and we will remove it.
Your rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- Ask what personal data we hold about you, and get a copy of it
- Have inaccurate data corrected
- Ask us to erase your data, subject to the exceptions described below
- Object to or ask us to restrict a particular use of your data
- Withdraw a consent you previously gave, without affecting what was done before you withdrew it
- Complain to the Nigeria Data Protection Commission
To exercise any of these, email privacy@dripplex.com. We will respond within the time the law allows.
Changes to this policy
If we change how we use your data we will update this page and change the date at the top. Where a change is significant we will tell you in the app before it takes effect.