Melu Privacy Policy

Thank you for choosing Melu ("Melu", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you install, register with, or use the Melu mobile application, website, and related services (collectively, the "Service").

If you have any questions or concerns about our practices, please contact us at support@kloud45.tech.

1. Scope

This Policy applies to users who access and use the Service within the Federal Republic of Nigeria. It covers all five verticals available in the Melu super‑app: Courier, Restaurant Delivery, Supermarket/Grocery, Pharmacy, and Bus Hire.

2. Information We Collect

3. How We Use Your Information

We use personal data to:

• Provide and maintain the Service – create orders, process payments, dispatch drivers, issue bus tickets.
• Improve and personalise – recommend restaurants, pre‑fill addresses, remember frequent items.
• Communicate – send order confirmations, delivery updates, security alerts, promotional offers (unless you opt out).
• Ensure safety – verify accounts, detect fraud, screen riders, and monitor trip safety.
• Comply with law – respond to lawful requests, enforce our Terms of Service, file taxes, and meet pharmacy regulations.

4. Lawful Bases for Processing

Melu processes personal data in line with the Nigeria Data Protection Regulation (NDPR 2019). The lawful bases we rely on are:

You may withdraw consent at any time via in‑app settings or by emailing support@kloud45.tech. Withdrawing consent does not affect processing that has already occurred.

5. Sharing & Disclosure

We share data only as described below:

• Delivery riders & bus operators – name, phone, pick‑up/drop‑off addresses, parcel or passenger details.
• Merchants – order details necessary to prepare your food, groceries, or medicines.
• Payment partners – to process transactions securely.
• Cloud providers – data is hosted on Google Cloud (Firebase) and Amazon Web Services.
• Analytics & crash reporting tools – Firebase Analytics, Crashlytics, Sentry.
• Authorities – when required by law, court order, or to protect rights, safety, or property.
• Business transfers – in case of a merger, acquisition, or asset sale, we will notify you before your data is transferred.

We never sell your personal data for monetary consideration.

6. Cookies & Similar Technologies

Cookies and local storage help us keep you signed in, remember preferences, and measure website traffic. You can disable cookies in your browser, but some features may not work correctly.

7. Data Retention

We retain account data for as long as your account remains active. Order and payment records are kept for at least 5 years to meet tax and regulatory requirements. Location data is stored for 90 days unless needed to resolve a dispute. Crash logs are retained for 24 months.

8. International Transfers

Your data may be stored and processed on servers outside your country of residence, including in the United States, the European Union, and Singapore. We rely on Standard Contractual Clauses and other safeguards for cross‑border transfers.

9. Security

We implement industry‑standard safeguards: TLS/HTTPS in transit, AES‑256 encryption at rest, role‑based access controls, and regular penetration testing. Despite our efforts, no method of transmission or storage is 100% secure.

10. Your Rights

Under the NDPR you have the right to:

• Access, correct, or delete your personal data;
• Object to or restrict processing;
• Withdraw consent at any time;
• Receive a copy of your data (data portability);
• Lodge a complaint with your data protection authority.

To exercise these rights, email support@kloud45.tech or use the in‑app Privacy Center.

11. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

12. Health & Pharmacy Information

Melu partners with licensed pharmacies to fulfil over‑the‑counter and prescription orders. Prescription images are encrypted at rest and shared only with the assigned pharmacist. Melu does not provide medical advice; content is for information only. Consult a qualified professional for diagnosis or treatment.

13. Third‑Party Links & Services

The Service may contain links to third‑party websites or services that are not operated by Melu. We are not responsible for their privacy practices. We encourage you to review their policies before providing any data.

14. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes via email or an in‑app alert and update the "Last updated" date above. Continued use of the Service after such updates constitutes acceptance of the revised Policy.