Privacy Policy

Everyone: name, email address, phone number, and what you do on Musika — orders, messages, notifications.

Buyers: delivery addresses, including any landmark you add, and the approximate location of an address you pick from the map. Payment is processed by Paynow; we store the method and a reference, never your card or PIN.

Sellers, couriers and recruiters: a government-issued identity document, a photograph of you holding it, your date of birth, home address, and the mobile money or bank account we pay you into. Couriers also give vehicle and licence details, and their device location while they are online.

Recruiters additionally: the position of your device when you submit a shop, which we use to check submissions are genuine.

To take and deliver orders; to pay you; to verify that the people receiving money are who they say they are; to detect fraud; to support you when something goes wrong; and to meet our legal obligations.

We do not use your data to build advertising profiles, and we do not sell it.

Sellers see the buyer’s name, phone number and delivery address for their own orders — nothing else, and nothing about your other purchases.

Couriers see the pickup and delivery addresses, both parties’ names and phone numbers, and what to collect, for the job they have accepted.

Buyers see a seller’s public store details and reviews. They never see a seller’s identity documents.

Identity documents are visible only to Musika’s operations team, and only while reviewing an application or investigating a dispute. They are held in private storage that ordinary accounts cannot read.

Shop owners recruited to Musika: a recruiter records your shop name, your name, your phone number, photographs of the shop and your prices, with your agreement. We phone you to confirm before your shop is listed.

Service providers who make Musika work: Supabase (database and accounts, hosted in Ireland), Vercel (hosting), Paynow (payments), Resend (email), Google Maps and OpenStreetMap (addresses and maps). Each receives only what its job requires.

The authorities, where the law requires it or where we have good reason to believe an account is being used for fraud or another crime. Our recruiter agreement says this explicitly, because bounty fraud is the case where it is most likely to arise.

Order and payment records for as long as tax and accounting rules require. Identity documents for as long as the account is active, and for a period afterwards where we may need them to answer a dispute or a legal request. Delivery-time courier locations are kept briefly and only for the job in hand.

Close your account and we delete or anonymise what we are not required to keep.

You can see and correct most of your details in your account settings. You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account. Notification preferences, including which emails you receive, are in your settings.

Access to data is restricted at the database level, per account, so one user cannot read another’s records. Identity documents sit in private storage reachable only by our operations team. Payment credentials are encrypted. We do not store card numbers.

No system is perfect. If a breach affects you, we will tell you.

Musika is not for anyone under 18, and we do not knowingly collect their data.

For anything about your data, including a request to delete it, see Help for our current contact details.