Nibi is operated by:

Nibi Ltd

Company Number: 17377423

Registered Office: London

Email: help@usenibi.com

Throughout this Privacy Notice:

• Nibi, we, us and our mean Nibi Ltd.
• you and your mean the person using the Service.

For the purposes of applicable data protection law, Nibi is the data controller of the personal information described in this Privacy Notice.

Certain terms used in this Privacy Notice, including Account, Merchant, Order, Rewards and Service, have the meanings given to them in our Terms and Conditions.

The information we collect depends on how you use Nibi.

Information You Provide Directly

When you create an Account, place an Order, contact support or otherwise interact with the Service, you may provide information including:

• your name;
• email address;
• telephone number;
• login credentials;
• profile photo, if you choose to upload one;
• customer support enquiries;
• special instructions, support, refund or dispute information;
• preferences saved within your Account; and
• any other information you choose to provide.

If you upload a profile photo, it is stored privately using our platform provider's file-storage service. Access is provided through short-lived links and is limited to authorised use within Nibi. If you remove or replace a photo, Nibi clears the profile reference. The underlying private file may require platform-side removal because programmatic file deletion is not currently available.

Order Information

When you place an Order, we may collect information including:

• the Merchant you selected;
• products ordered;
• Order value;
• Order timing and status;
• Rewards or promotional offers used;
• refund information; and
• support or dispute information.

Payment Information

Payments are securely processed by our Payment Provider.

At the Effective Date of this Privacy Notice, our Payment Provider is Stripe.

Your full card number, expiry date and security code are entered into Stripe's payment interface and sent directly to Stripe. Nibi does not receive or store your full payment card details.

We may receive limited payment information including:

• transaction reference numbers;
• payment status;
• payment method type; and
• billing information necessary to support your transaction.

Device and Technical Information

Nibi uses limited product analytics to understand how selected features are used. These events are not intentionally sent with your name, email address or other direct account identifiers. Nibi does not currently use third-party advertising, behavioural tracking or dedicated crash-reporting SDKs. Our platform and infrastructure providers may process technical information necessary to deliver, secure and operate their services, including ordinary network and service logs.

Location Information

Some optional Nibi features may use your device location where you've chosen to grant permission, including showing nearby Merchants and automatically sending an Order when the relevant conditions are met.

Location access is entirely optional.

If you enable location services, we may use location information to:

• support automatic Order sending;
• show nearby Merchants;
• improve location-based features; and
• help provide the Service more effectively.

We don't continuously track your location.

Location information is only accessed when reasonably necessary to provide relevant features and in accordance with:

• your device permissions;
• your settings;
• this Privacy Notice; and
• applicable law.

We do not provide your precise location coordinates to Merchants. A Merchant may receive limited timing information needed to prepare your Order, such as an estimate that you are a certain number of minutes away.

Nibi does not currently collect location in the background. Precise location may be stored by our platform provider and associated with your Account and, where relevant, your Order.

We collect and use personal information to:

• create and manage your Account;
• provide the Service;
• process Orders;
• process payments;
• provide customer support;
• send service-related communications;
• provide automatic Order-sending features;
• prevent fraud and misuse;
• improve the Service;
• analyse performance and reliability;
• keep the Service secure; and
• comply with legal obligations.

We'll only use your personal information where we have a valid legal basis for doing so.

Depending on the circumstances, we may rely on one or more legal bases.

Contract

We process personal information where it's necessary to provide the Service you've asked us to provide.

For example:

• creating your Account;
• processing Orders;
• arranging refunds;
• delivering customer support; and
• managing payments.

Legitimate Interests

We may process personal information where it's reasonably necessary for our legitimate interests, including:

• improving the Service;
• preventing fraud;
• maintaining security;
• understanding platform performance;
• resolving complaints; and
• operating our business efficiently.

Whenever we rely on legitimate interests, we balance those interests against your rights and freedoms.

Consent

We rely on your consent where required.

For example:

• location permissions;
• certain marketing communications; and
• optional notifications.

You can withdraw consent at any time.

Legal Obligations

We may process personal information where necessary to:

• comply with legal requirements;
• respond to lawful requests;
• prevent unlawful activity; or
• establish, exercise or defend legal claims.

We do not sell your personal information. We do not share it with data brokers or use it to track you across other companies' apps or websites for advertising.

We only share information where it's necessary to operate the Service, fulfil Orders or comply with legal obligations.

Participating Merchants

When your Order is sent to your Merchant, we may share information necessary to prepare and fulfil that Order, including:

• Order details;
• collection information;
• customer notes associated with the Order; and
• other information reasonably required to prepare or fulfil the Order.

Merchants do not receive your telephone number through the current Nibi Order flow, your precise location coordinates, your billing postcode or your payment card details.

Payment Providers

Payments are securely processed by Stripe.

Stripe processes payment information in accordance with its own privacy and security practices.

Service Providers

We work with trusted service providers that help us operate Nibi. These include Base44 for platform services such as authentication, database, hosting, email, push notifications, file storage and limited product analytics; Stripe for payments and payment security; and location, mapping and technical-content providers used to support relevant app features.

These providers may assist with:

• cloud hosting;
• analytics;
• customer communications;
• fraud prevention;
• security; and
• technical infrastructure.

They may only use information for authorised purposes connected with the Service.

Legal and Regulatory Requirements

We may disclose information where reasonably necessary to:

• comply with legal obligations;
• respond to lawful requests;
• investigate fraud;
• enforce our Terms and Conditions;
• protect users, Merchants or Nibi; or
• protect our legal rights.

From time to time, we may send information about:

• Nibi features;
• Rewards;
• promotions;
• participating Merchants; and
• Service updates.

Where required by law, we'll only send marketing communications where you've chosen to receive them.

You can update your preferences or unsubscribe at any time.

Choosing not to receive marketing communications won't affect important communications relating to your Account, Orders or the operation of the Service.

Some features of Nibi depend on location information.

If you've chosen to enable location permissions:

• we may determine when automatic Order-sending conditions have been met;
• we may show nearby Merchants; and
• we may improve the relevance of location-based features.

You can withdraw location permissions at any time through your device settings.

Disabling location permissions may prevent certain location-based features, including automatic Order sending, from operating as intended. Where available, you may still use supported manual ordering or sending functionality.

We take security seriously.

We use appropriate technical and organisational measures designed to protect personal information from:

• unauthorised access;
• misuse;
• alteration;
• disclosure; and
• loss.

While no online service can guarantee absolute security, we continually monitor and improve our systems to help keep information protected.

We only keep personal information for as long as reasonably necessary.

Retention periods depend on factors including:

• legal obligations;
• accounting requirements;
• fraud prevention;
• customer support needs;
• dispute resolution; and
• operational requirements.

When an account-deletion request is completed, we delete personal information that is no longer needed, including profile and preference information, favourites, stored precise-location records and other customer-only convenience data. Order and financial records may need to be retained where necessary for legal, accounting, payment, fraud-prevention or dispute-resolution purposes. Where appropriate, retained records are anonymised so information that is no longer needed to identify you is removed. When information is no longer required, we'll delete or anonymise it where appropriate.

You can request deletion of your Nibi Account from the Privacy section of the app or by contacting help@usenibi.com.

Account-deletion requests are reviewed before processing and are normally handled within 30 days. Submitting a request does not immediately erase all information. Once approved, Nibi deletes customer profile, preference and stored precise-location data that is no longer needed, and anonymises retained transaction records where appropriate. Some transaction information may be retained where required for legal, payment, accounting, fraud-prevention, security or dispute-resolution purposes. After completion, the Nibi user account is deleted so it can no longer be used to sign in.

Some information held by service providers, including payment records held by Stripe, may be retained independently where required by law or the provider's compliance obligations. Private profile-photo files may also require platform-side removal because our current file-storage service does not provide Nibi with a programmatic file-deletion method.

Depending on your circumstances, you may have rights to:

• access your personal information;
• correct inaccurate information;
• request deletion of personal information;
• object to certain processing;
• restrict certain processing;
• request transfer of information; and
• withdraw consent where processing relies on consent.

These rights are subject to certain legal limitations and exceptions.

Requests relating to access, correction, deletion or other privacy rights can be submitted to:

help@usenibi.com

We'll respond in accordance with applicable law.

Nibi is intended for users aged 16 and over.

We do not knowingly allow individuals under 16 to create an Account or use the Service.

If we become aware that personal information has been collected from someone under the age of 16, we may remove that information and close the associated Account.

Some of our trusted service providers may store or process personal information outside the United Kingdom.

Where this occurs, we'll take appropriate steps to ensure that personal information remains protected and that any international transfers comply with applicable data protection laws.

We hope we'll always be able to resolve any concerns directly.

If you have questions or concerns about how your personal information is handled, please contact us:

help@usenibi.com

We'll always do our best to investigate and respond fairly and promptly.

You also have the right to complain to the Information Commissioner's Office (ICO):

www.ico.org.uk

As Nibi develops, we may update this Privacy Notice from time to time.

This helps ensure it continues to reflect:

• how the Service works;
• changes in the law;
• new features; and
• improvements to Nibi.

Where changes materially affect how we use personal information, we'll provide reasonable notice through the Service, by email or through another appropriate method.

The latest version will always be available through Nibi.