Privacy Policy

The Bottle House · Last updated: November 2026

Who we are

The Bottle House sells and delivers drinks in Kenya through this app. This policy explains what personal data we collect from customers and riders, why, who we share it with, and the choices you have. We handle personal data in line with the Kenya Data Protection Act, 2019.

Information we collect from customers

To create and run your account we collect your phone number, name, email address (optional), date of birth (to confirm you are 18 or older) and your password, which we store only in hashed form. When you add a delivery address we keep the address, building name, flat or house number, your drop-off choice (for example meet at the door or at the gate), any delivery note and the map pin. We keep your orders, payment references, tips, loyalty points, coupons used, favourites, product reviews and the ratings you give riders. If you complete age verification, we keep a photo of the ID you upload. If you save a card, our card processor keeps the card itself; we keep only its brand, last four digits, expiry date and a token to charge it again.

Location

Customers: we use your phone's location only when you choose to, to place your delivery pin on the map. Riders: while you have a delivery, the app shares your location with us, including when the phone is locked or another app is open; an ongoing notification shows while this happens, and sharing stops when the delivery is finished or cancelled. We keep the route ridden on each delivery to show arrival times, plan routes, calculate kilometres ridden and resolve disputes. Your customer sees the rider's location on a map until the order arrives.

Information we collect from riders

To verify riders and pay them we collect name, phone number, a profile photo, national ID (front and back), driving licence, insurance documents with their numbers and expiry dates, number plate and motorbike details, and an emergency contact. We also keep each rider's deliveries, kilometres ridden, earnings, tips and the ratings customers give.

Information collected automatically

We keep a notification token for your device so we can send order updates and, for riders, delivery requests. If the app crashes or hits an error, it sends a report (device model, Android or iOS version, app version and what the app was doing) with names, phone numbers and addresses removed. We also record how customers use the app: the screens you open, what you search for, the products and categories you view, and what you add to your cart and check out. We use this only to improve the shop, for example to stock what people look for, and it is never used for advertising. Your appearance setting (light or dark) is stored only on your phone.

How we use it

We use your information to process, pay for and deliver orders; confirm you are old enough to buy alcohol; send order and account notifications, including one-time login codes; match orders with riders and show arrival times; verify riders and pay their earnings; prevent fraud and abuse; keep records the law requires; and fix problems and improve the service. We do not sell your personal information.

Who we share it with

Your rider sees your name, phone number, delivery address and drop-off instructions so they can hand over your order. Our staff see the order details needed to prepare, dispatch and support it, and review rider documents to verify riders. We use service providers who process data only to provide their service to us: Safaricom (M-PESA payments: your phone number and the amount), Paystack (card payments), Africa's Talking (text messages and login codes), Resend (email), Google (Firebase push notifications; and Google Maps, which receives addresses, search text and map coordinates to find places and plan routes), Render (hosting for our servers and database), Cloudflare (storage for photos and documents) and Sentry (crash reports). We may also disclose information where the law requires it, including to verify legal drinking age.

Transfers outside Kenya

Some of these providers store or process data outside Kenya, for example in the European Union and the United States. We use providers that protect personal data with appropriate safeguards.

Data retention & security

We keep your account information for as long as your account is open. Order and payment records are kept for as long as tax and alcohol-licensing laws require, including after an account is deleted. Records of how you use the app are deleted after 12 months. A rider's location points are deleted after 90 days; the kilometres ridden stay with the delivery record. Rider documents are kept while the rider delivers for us and afterwards only as long as the law requires. We protect stored data with industry-standard measures, including encrypted connections, hashed passwords and restricted staff access.

Your rights and choices

You can see and update your details under Account > Personal details, and choose which notifications you get under Account > Notification settings. You can delete your account at any time with Delete my account at the bottom of the Account page. This removes your name, phone number, email, date of birth, password, ID photos, saved addresses, saved cards, favourites, cart, loyalty points and records of how you used the app; order records we must keep by law stay with your name removed. Riders can ask us to close their account by contacting us. Under the Kenya Data Protection Act you may also ask for a copy of your data, ask us to correct it, or object to how we use it, and you can complain to the Office of the Data Protection Commissioner.

Children

The Bottle House is only for people aged 18 and over. We do not knowingly collect information from anyone under 18,.

Changes to this policy

We may update this policy from time to time. We will change the date at the top and, for significant changes, tell you in the app.

Contact us

Questions about this policy or your data can be sent to support@thebottlehouse.app.