Your data,
in plain words.
Not to advertisers, not to data brokers, not to anyone. Full stop.
Readings from your watch or Health app are never sold, never used for ads, and never shared without your say.
Riders collect at the cook’s gate. Only your rider sees where to drop off, and only during delivery.
Our assistant can plan and fill your basket. Paying always takes your tap.
Get a copy of everything in a day, or delete your account in two taps.
Registered with the ODPC under the Data Protection Act 2019, and GDPR-ready.
Replies within 3 working days
You tell us: your name, phone number, email, delivery address, household members you add, allergies and food preferences.
When you use PikaBox: what you order, cook, save and post; payment confirmations from M-Pesa or your card provider (never your PIN or full card number); and your approximate location while you’re ordering.
Only if you turn it on: health readings from Apple Health or Health Connect, your contacts (to find friends), and your camera (for Sahani and reels).
To get food to your table: matching you with cooks, chefs, farms and riders near you, taking payment and sending updates. To make PikaBox better for you: suggestions in For you, Tonight’s pick and Pika’s ideas. To keep everyone safe: checking kitchens, preventing fraud and handling refunds.
We send marketing only if you say yes, and you can switch it off in Notifications at any time.
Health features are for wellness, not medical diagnosis. If you share a plan with a nutritionist such as Dr. Amina K., they see only what you choose, and you can stop sharing at any time.
| Who | What they see | When |
|---|---|---|
| Home cooks | Your first name and your order. Never your address. | While cooking |
| Riders | Your first name, drop-off point and gate notes | During delivery only |
| PikaChefs | Your address and kitchen notes | After you confirm a booking |
| Payment partners | Amount and phone number, to process payment | At checkout |
| Your circles | Only the plates and posts you share with them | When you post |
We may share data when the law requires it, for example a valid court order. If that happens, we’ll tell you unless we’re legally not allowed to.
Pika uses your saved preferences, household and recent orders to make suggestions. You can see and edit everything Pika remembers in Pika’s memory, and clear it with one tap. We don’t use your private messages or health data to train AI models.
Our website uses essential cookies to keep you signed in, and, only if you agree, cookies that help us understand what’s working. You can change your choice at any time from the link in the footer.
Account data: for as long as you have an account. Order and payment records: 7 years, as Kenyan tax law requires. Health readings: 12 months, or less if you choose. Deleted accounts are fully erased within 30 days.
Data is encrypted in transit and at rest. Staff access is limited, logged and reviewed. You can add 2-step login and see every device signed in to your account.
You can see, correct, download or delete your data, object to how we use it, and complain to the Office of the Data Protection Commissioner. Most of this you can do yourself in Settings → Privacy & security.
PikaBox accounts are for adults. Little chefs profiles are created and managed by a parent, show no ads, and are never visible to the public.
PikaBox Ltd, 4th floor, Kilimani Court, Argwings Kodhek Road, Nairobi, Kenya. Email our Data Protection Officer at privacy@pikabox.co.