Privacy Policy

We collect only what we need to run BillMe for you:

• Account data: your name, email address, phone number, password (stored only in hashed form), profile picture if you add one, preferred language and your role (customer, waiter, kitchen staff, manager, business owner or rider). If you sign in with Google or Apple, we receive your name, email address and an account identifier from them.
• Order data: the venues you order from, the items, notes, table or pickup point, order status and history, favourites and reviews you leave.
• Payment data: the amount, payment method, payment status, transaction references and, for Mobile Money, the phone number used to pay. Card details are handled by the payment provider; we do not store full card numbers.
• Receipt data: details needed to issue a fiscal (EBM) receipt, including your TIN or phone number if you ask for them to appear on the receipt.
• Delivery data: the delivery address and map point you choose, and the name and phone number needed to reach you.
• Location: with your permission, your device's location to show venues near you, distances and directions, and to help you pick a delivery point. If you work as a rider, your location is shared while you are online or on a delivery so deliveries can be assigned and followed.
• Messages: chats between you and a venue or its staff inside BillMe.
• Device data: a push notification token, app version, device type, language and technical logs (such as IP address and error reports) that keep BillMe secure and working.

The camera is used only to scan QR codes and, if you choose, to take a profile picture. We do not record audio. Your recent searches are kept only on your device.

• To create and secure your account, including two-factor authentication.
• To send your orders to the venue, let its staff prepare and serve them, and keep you updated on their status.
• To process payments, refunds and promotion codes.
• To issue fiscal receipts through the Rwanda Revenue Authority (RRA) EBM system, as the law requires.
• To organise deliveries between venues, riders and customers.
• To send notifications about your orders, payments and account.
• To answer support requests, prevent fraud and abuse, and keep BillMe secure.
• To understand how BillMe is used so we can fix problems and improve it.
• To meet our legal, tax and accounting obligations.

We rely on the performance of our contract with you, our legal obligations, your consent (for example for location and notifications, which you can turn off at any time in your device settings) and our legitimate interest in running a safe and reliable service.

We do not sell your personal data and we do not use it for third-party advertising.

• The venue you order from and its staff, so they can prepare, serve or deliver your order and contact you about it.
• Riders assigned to your delivery, who see your name, phone number and delivery point.
• Payment providers and mobile money operators (such as MTN Mobile Money and Airtel Money) that process your payments.
• The Rwanda Revenue Authority, for fiscal receipts.
• Service providers that run parts of BillMe for us, such as hosting, maps (Google Maps), push notifications (Google Firebase and Expo) and sign-in (Google and Apple). They may use your data only to provide their service to us.
• Authorities, when the law requires it or to protect the rights and safety of our users and of BillMe.

Some of these providers may process data on servers outside Rwanda. When that happens we rely on the safeguards the law requires.

We keep your account data for as long as your account is open. Order, payment and receipt records are kept for as long as tax and accounting law requires, even after an account is deleted. Other data is deleted or anonymised when it is no longer needed.

You can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete. You can edit most of it yourself in your profile.
• Delete your data, or restrict or object to how we use it.
• Withdraw a consent you gave, for example for location or notifications.

Send your request to info.billme@idservices.co from the email address on your account. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the National Cyber Security Authority (NCSA), which supervises data protection in Rwanda.

In the BillMe app, open Profile, then My Account, then Delete Account, and confirm with your password. You can also email us from your account's email address and ask us to delete it.

When your account is deleted we remove your profile, sign-in details, favourites, messages and push notification tokens. We keep only the order, payment and receipt records that the law requires us to keep, and they are no longer linked to an active account.

Data travels over encrypted connections (HTTPS), passwords are stored hashed, and access to personal data is limited to the people who need it. No system is perfectly secure, so please keep your password private and tell us right away if you think your account has been used without your permission.

BillMe is not meant for children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as BillMe changes. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.

For any question about this policy or your personal data, write to info.billme@idservices.co.