OYE MALI
Privacy policy
Last updated: 12 October 2026. This policy covers the OYE MALI plant shop and gardening services, including our customer app and website. Privacy contact: support@oyemali.com.
Information we use
We process account identifiers, name, email and phone; saved addresses and location coordinates; cart, purchase, booking, payment-status and wallet records; reviews and support messages; photos or videos you choose to submit; and device notification tokens. Our hosting and service providers may process technical information such as IP addresses, request logs and device information needed to deliver and protect the service.
Why we use it
We use this information to create and secure accounts, check service coverage, arrange delivery and gardening visits, process orders and payments, maintain wallet records, respond to support, send booking updates and improve service operations. Optional offers and plant updates may use your account and notification preferences. You can contact support to stop optional marketing; Android notification settings also control notification delivery.
Location, photos and notifications
The customer app requests foreground location permission to detect a service address and nearby availability. You may decline and enter an address manually. Photos are provided by you for reviews or support; do not include unrelated people or private information. Notification permission lets us send booking and order updates. You can change permissions in device settings. Customer location is not continuously tracked in the background by the customer app.
Who receives information
Relevant delivery and service details are shared with assigned Malis and fulfilment staff. Administrators and support staff access information needed for their work. We use Supabase for database, authentication and file storage, Vercel for website hosting, Google Maps for map and address functionality, Expo and Google Firebase Cloud Messaging for app notifications, payment providers used at checkout, and our email provider for transactional email. These providers process information needed for their services. We may disclose information where required by law or necessary to address fraud and safety incidents.
Storage and security
Information is processed in our service providers’ infrastructure and may be processed outside your country. We use HTTPS, authenticated access and access controls. No system can guarantee absolute security. Do not share passwords or payment credentials in support messages.
Retention and deletion
We retain account information while needed to provide services. You can request account and associated-data deletion through the app’s Profile or our account deletion page. We verify ownership before acting. Information no longer needed is deleted. Invoices and related payment and wallet accounting records, and records necessary for legal obligations, fraud prevention or unresolved disputes, may be retained only for the applicable requirement or dispute period, with access restricted. Retained records are not used for optional marketing. We explain any applicable retention exception when handling your request.
Your choices
You can edit your profile and saved addresses in the app and change device permissions. You may request access to, correction of, or deletion of your account and associated personal information by emailing support@oyemali.com from your registered email address. Our support team will verify account ownership, review your request and explain the next steps, including any information that must be retained under applicable law. If you uninstall the app, your account is not automatically deleted. We may update this policy when our services change; the updated policy and date will appear here.