Back to home

Privacy Policy

Your privacy matters to us. This policy explains how Fasta collects, uses, and protects your personal information.

Last updated: April 2, 2026

1. Introduction

Doxizzo Vending ("Fasta," "we," "us," or "our") operates the Fasta food delivery platform, including our website at fasta.rw and our mobile applications for Android and iOS. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.

By using Fasta, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, and delivery address(es). If you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Order Information

We collect details about the orders you place, including items ordered, order amounts, delivery addresses, and order history.

Location Data

With your permission, we collect your device's GPS location to help you find nearby restaurants, provide accurate delivery tracking, and improve our delivery services. You can disable location access through your device settings at any time, though this may limit certain features.

Device Information

We collect device identifiers and push notification tokens (via Firebase Cloud Messaging) so we can send you order updates and delivery notifications. We also collect basic device information such as device type and operating system version.

Payment Information

Payments are processed by our third-party payment provider, Urubuto Pay. Fasta does not directly collect, store, or have access to your payment card details or mobile money PINs. Please refer to Urubuto Pay's privacy policy for information on how they handle your payment data.

3. How We Use Your Information

We use the information we collect to:

  • Process and deliver your orders
  • Send you order confirmations, delivery updates, and notifications
  • Provide customer support and respond to your inquiries
  • Improve our platform, services, and user experience
  • Communicate important updates about our services or this policy
  • Prevent fraud and ensure the security of our platform
  • Comply with legal obligations

4. How We Share Your Information

We share your information only as necessary to provide our services:

  • Restaurant vendors: We share your name, delivery address, and order details with the restaurant preparing your food so they can fulfill your order.
  • Delivery drivers: We share your name, phone number, and delivery address with drivers so they can complete your delivery.
  • Urubuto Pay: We share necessary transaction details with our payment processor to facilitate your payment.
  • Firebase (Google): We use Firebase Cloud Messaging to send push notifications. Device tokens are stored by Firebase.
  • Legal requirements: We may disclose your information if required by law or in response to valid legal requests by public authorities.

We do not sell your personal information to third parties.

5. Cookies and Tracking

Our website uses essential cookies to keep you signed in and maintain your session. These are necessary for the platform to function and cannot be disabled.

We do not currently use analytics or advertising cookies. If this changes in the future, we will update this policy and notify you accordingly.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or regulatory purposes (such as transaction records).

7. Your Rights

In accordance with Rwanda's Data Protection Law (Law No. 058/2021), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Delete your personal data (subject to legal retention requirements)
  • Object to the processing of your personal data in certain circumstances
  • Withdraw consent for data processing where consent is the basis

To exercise any of these rights, please contact us using the details in Section 11 below.

8. Children's Privacy

Fasta is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The "Effective Date" at the top of this page indicates when the policy was last updated. Your continued use of Fasta after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

  • Company: Doxizzo Vending
  • Location: Kigali, Rwanda
  • Email: support@fasta.rw