Privacy Policy
The short version: we collect what we need to run a beauty marketplace in Malawi — your bookings, your shop, your payouts — and not a sip more. No ad trackers. No selling your data. Ever.
Last updated: 2026-05-10 · Effective: 2026-05-10
⌁ Section 01 · Who we are
The team behind Odey.
Odey is a beauty and wellness marketplace operated out of Lilongwe, Malawi. We connect customers to salons, spas, barbers, and home-service providers — and we handle bookings, orders, and payouts in Kwacha.
This policy covers everything we run: the website you're reading, the customer app, and the provider app. Questions? Write to hi@odeymw.com.
⌁ Section 02 · What we collect
The bare minimum to make it work.
When you sign up — as a customer or a shop — we ask for the things we genuinely need:
- From everyone: name, email, phone number. Optionally: avatar, date of birth, gender.
- From shop owners: shop name, address, services and prices, plus bank or mobile-money details so we can pay you out.
- Location — only when you grant the permission, and only to power "shops near me." We don't track you in the background.
- Push notification tokens from your device, so we can send booking confirmations and order updates.
- Calendar event IDs, when you choose to add a booking to your phone's calendar. We store the ID so we can update or remove the event later — never the rest of your calendar.
⌁ Section 03 · How we use it
Bookings, orders, payouts. That's it.
Every piece of data has a job:
- Complete your bookings and route them to the right shop.
- Fulfil product orders from shops in your city.
- Process provider payouts via mobile money or bank transfer.
- Send you notifications about appointments, order status, cancellations, and reschedules.
- Diagnose bugs and improve the service — using aggregate, non-identifying signals where possible.
We don't profile you for advertisers. We don't build shadow lookalike audiences. We don't have the energy for that — we're building a booking app.
⌁ Section 04 · Sharing
Who sees what.
- The shop you booked sees your name, phone number, and the booking details — so they can prepare and serve you.
- Payment processors (mobile-money operators, card processors) handle the money movement under their own licensed terms.
- Convex, our backend host, stores and serves the data on our behalf.
- Nobody else. Your data is never sold to advertisers, data brokers, or "marketing partners."
⌁ Section 05 · Retention & deletion
Leave whenever you want.
- Customer accounts are deleted instantly when you tap Delete Account in the customer app.
- Provider accounts have a 7-day grace window before permanent deletion — so you don't lose your shop by mistake. Cancel anytime in that window.
- Bookings and orders belonging to a deleted account are removed with it.
- Password reset codes expire on their own — quickly, and on a timer.
⌁ How to delete your account
From the customer app — open Profile → Settings → Delete Account, confirm, done. Your data is removed straight away.
From the provider app — open Profile → Delete Account, confirm. Your shop is scheduled for deletion 7 days later so you can change your mind. Sign in again any time during that window and tap Cancel deletion to keep your account.
From the web — we don't yet have a self-serve Delete button on the website. Email hi@odeymw.com from the address on your account with the subject line "Delete my Odey account". We verify the request matches the account owner, then delete within 7 working days. We'll reply once it's done.
Provider deletions are still subject to the 7-day grace window regardless of the path you choose. Past financial records (completed bookings, orders, payouts) are retained as required by Malawi tax law even after the account itself is removed.
⌁ Section 06 · Your rights
Yours, not ours.
- Access — see the data we hold about you. Email hi@odeymw.com and we'll send a copy.
- Correct — most fields you can edit yourself in the app. For anything you can't, ask and we'll fix it.
- Delete — use Delete Account in Settings (customer app or provider app). Done in taps.
- Opt out of promotional pushes — head to Notification Settings in the app. Transactional alerts (your booking is in 30 minutes) stay on, because that's the whole point.
⌁ Section 07 · Cookies & analytics
Necessary only.
The website uses a small number of necessary cookies — the ones that keep you signed in and remember things like your preferred language. No third-party advertising trackers, no cross-site fingerprinting, no "engagement" pixels.
⌁ Section 08 · Children
16 and over.
Odey is built for adults and older teens — 16+. We don't knowingly collect data from anyone younger. If you believe a child has signed up, write to hi@odeymw.com and we'll remove the account.
⌁ Section 09 · Security
How we keep it safe.
- Passwords are hashed — we never see, store, or transmit them in plaintext.
- Mobile-money and card payments are handled by licensed processors. Odey doesn't see your full card numbers or wallet PINs.
- Data is stored on Convex — US-based, with regional replication and encryption in transit and at rest.
- No system is unbreakable. If something ever does go wrong, we'll tell you what happened, in plain language, fast.
⌁ Section 10 · Changes
When this policy moves.
Last updated: 2026-05-10. For meaningful changes, we'll post an in-app notice before they take effect — not buried in a footer update.
⌁ Section 11 · Contact
Talk to a human.
Privacy questions, data requests, or anything that looks off — email hi@odeymw.com, or use our contact page. A real person reads every message.
Tikuonana — see you soon.
⌁ End of policy · v.2026-05-10