Privacy Policy
The short version: we collect what we need to run a beauty marketplace in Malawi — your bookings, your shop, your payouts — and not a sip more. No ad trackers. No selling your data. Ever.
Last updated: 2026-05-10 · Effective: 2026-05-10
⌁ Section 01 · Who we are
The team behind Odey.
Odey is a beauty and wellness marketplace operated out of Lilongwe, Malawi. We connect customers to salons, spas, barbers, and home-service providers — and we handle bookings, orders, and payouts in Kwacha.
This policy covers everything we run: the website you're reading, the customer app, and the provider app. Questions? Write to hi@odey.mw.
⌁ Section 02 · What we collect
The bare minimum to make it work.
When you sign up — as a customer or a shop — we ask for the things we genuinely need:
- From everyone: name, email, phone number. Optionally: avatar, date of birth, gender.
- From shop owners: shop name, address, services and prices, plus bank or mobile-money details so we can pay you out.
- Location — only when you grant the permission, and only to power "shops near me." We don't track you in the background.
- Push notification tokens from your device, so we can send booking confirmations and order updates.
- Calendar event IDs, when you choose to add a booking to your phone's calendar. We store the ID so we can update or remove the event later — never the rest of your calendar.
⌁ Section 03 · How we use it
Bookings, orders, payouts. That's it.
Every piece of data has a job:
- Complete your bookings and route them to the right shop.
- Fulfil product orders from shops in your city.
- Process provider payouts via mobile money or bank transfer.
- Send you notifications about appointments, order status, cancellations, and reschedules.
- Diagnose bugs and improve the service — using aggregate, non-identifying signals where possible.
We don't profile you for advertisers. We don't build shadow lookalike audiences. We don't have the energy for that — we're building a booking app.
⌁ Section 04 · Sharing
Who sees what.
- The shop you booked sees your name, phone number, and the booking details — so they can prepare and serve you.
- Payment processors (mobile-money operators, card processors) handle the money movement under their own licensed terms.
- Convex, our backend host, stores and serves the data on our behalf.
- Nobody else. Your data is never sold to advertisers, data brokers, or "marketing partners."
⌁ Section 05 · Retention & deletion
Leave whenever you want.
- Customer accounts are deleted instantly when you tap Delete Account in the customer app.
- Provider accounts have a 7-day grace window before permanent deletion — so you don't lose your shop by mistake. Cancel anytime in that window.
- Bookings and orders belonging to a deleted account are removed with it.
- Password reset codes expire on their own — quickly, and on a timer.
⌁ Section 06 · Your rights
Yours, not ours.
- Access — see the data we hold about you. Email hi@odey.mw and we'll send a copy.
- Correct — most fields you can edit yourself in the app. For anything you can't, ask and we'll fix it.
- Delete — use Delete Account in Settings (customer app or provider app). Done in taps.
- Opt out of promotional pushes — head to Notification Settings in the app. Transactional alerts (your booking is in 30 minutes) stay on, because that's the whole point.
⌁ Section 07 · Cookies & analytics
Necessary only.
The website uses a small number of necessary cookies — the ones that keep you signed in and remember things like your preferred language. No third-party advertising trackers, no cross-site fingerprinting, no "engagement" pixels.
⌁ Section 08 · Children
16 and over.
Odey is built for adults and older teens — 16+. We don't knowingly collect data from anyone younger. If you believe a child has signed up, write to hi@odey.mw and we'll remove the account.
⌁ Section 09 · Security
How we keep it safe.
- Passwords are hashed — we never see, store, or transmit them in plaintext.
- Mobile-money and card payments are handled by licensed processors. Odey doesn't see your full card numbers or wallet PINs.
- Data is stored on Convex — US-based, with regional replication and encryption in transit and at rest.
- No system is unbreakable. If something ever does go wrong, we'll tell you what happened, in plain language, fast.
⌁ Section 10 · Changes
When this policy moves.
Last updated: 2026-05-10. For meaningful changes, we'll post an in-app notice before they take effect — not buried in a footer update.
⌁ Section 11 · Contact
Talk to a human.
Privacy questions, data requests, or anything that looks off — email hi@odey.mw, or use our contact page. A real person reads every message.
Tikuonana — see you soon.
⌁ End of policy · v.2026-05-10