Lori Purified Drops ("we", "our", "us") operates the Lori Purified Drops mobile application (the "App"). This Privacy Policy explains how we collect, use, share and protect your information when you use the App to order purified drinking-water refills and related products for delivery.
By creating an account or placing an order you agree to the practices described here. If you do not agree, please do not use the App.
1. Information we collect
Account information
When you register or sign in we collect your email address, full name and phone number, together with an account role (customer, delivery driver, store manager or administrator).
Sign in with Google
If you choose "Continue with Google", we receive the basic profile information Google shares (such as your name and email) to create and sign you into your account. You can revoke this consent at any time from your Google account settings.
Order and delivery information
When you place an order we collect your delivery address, contact phone number, chosen delivery window, delivery notes and the items you order (quantity, bottle size, refill or new bottle, and totals).
Payment information
For M-PESA payments we initiate a Safaricom Daraja STK Push to the phone number you confirm at checkout. We store the M-PESA receipt number, amount and payment status so we can reconcile your order. We do not collect, store or process debit/credit card numbers.
Notifications
We create and store order-status notifications (for example "order accepted", "dispatched", "payment received") tied to your account so we can show them in the App and keep your order history accurate.
Support and diagnostic data
If you contact us for support we may keep a record of that communication. We collect only the minimal technical details needed to operate the service and troubleshoot issues.
2. How we use your information
- To create and manage your account and authenticate you.
- To process, fulfil and deliver your orders, including assigning them to a delivery rider.
- To process M-PESA payments and reconcile them with orders.
- To send you order-status notifications.
- To provide customer support and respond to your requests.
- To comply with legal obligations and protect against fraud or abuse.
3. How we share your information
We share information only as needed to operate the service:
- Safaricom (M-PESA / Daraja) — to initiate and confirm your M-PESA payments.
- Our cloud infrastructure provider (Supabase) — to store and serve your account, order and notification data.
- Assigned staff — delivery riders and store managers see the order and delivery details required to fulfil your order, subject to their access level.
We do not sell, rent or trade your personal information, and we do not share it for advertising purposes. We may disclose information where required by law or to protect our rights and safety.
4. Data storage and security
Your data is stored on Supabase's managed cloud infrastructure and is protected by industry-standard encryption in transit and at rest. Access to your data is enforced through Row Level Security, so by default only you — and the authorised staff needed to fulfil your order — can read the information tied to your account.
5. Data retention and deletion
We keep your information while your account is active and as needed to provide the service and comply with legal obligations. You can delete your account and associated personal data at any time from Settings → Delete account in the App, or by contacting us below. After deletion we retain anonymised order records (with no personal identifiers) for financial and inventory records, as permitted by law.
6. Your rights and choices
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your personal data.
- Withdraw Google sign-in consent via your Google account settings.
- Uninstall the App to remove data stored locally on your device.
To exercise any of these rights, contact us using the details below.
7. Children's privacy
The App is not intended for children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we revise the effective date above and notify you of material changes through the App or by other reasonable means.
9. Contact us
Questions or requests about this policy or your data:
- Email: info@lori.co.ke
- Website: https://lori.co.ke