Privacy

• Your phone number — this is your account. It is how you sign in and how we match an order to you.
• A delivery name, address, and contact number, when you choose delivery rather than collection.
• Your order history: what you bought, what you paid, and which organization it funded.
• An email address only if you signed in with Google, in which case we use it to send you a receipt.

• Card and wallet details. Payment happens on Chapa's systems; those details never reach Lebego.
• Full bank account numbers. For sellers and organizations receiving payouts we keep only the last four digits, enough to tell one account from another. The account itself lives with Chapa.
• Your sign-in codes. One-time codes are stored only as a salted hash, can be used once, and expire shortly after they are sent.

Only the parties that have to see it for an order to work:

• Chapa, to take the payment and route each share to the seller and the community organization.
• Our courier, to deliver the parcel — they receive the delivery name, address, and phone number, and nothing about what you paid.
• The seller of the item, to prepare and hand over your order.
• Our SMS provider, to send you sign-in codes and order updates.

We do not sell your information, and we do not share it for advertising.

Product reviews you write are shown publicly on the product page. Your orders, your address, and your phone number are not — an organization can see how much its projects raised, and a seller can see the orders they must fulfil, but neither gets a list of shoppers.

Signed seller agreements are archived as fixed PDFs in private storage with an integrity hash, reachable only through a short-lived link issued to someone entitled to see them. Product photographs uploaded by sellers are public, because they appear on the storefront.

Order and payment records are kept as long as we are required to keep them for tax and accounting, because they are the record of a real transaction with several parties to it. Sign-in codes are discarded on use or expiry.

You can ask what we hold about you, ask us to correct it, or ask us to delete what we are not legally required to keep. Reach us through contact. Because your phone number is your account, deleting it closes the account.