What we collect
In plain words: what you tell us, what you order, and where to deliver it. Nothing hidden.
You tell us: your name, phone number, email, delivery address, household members you add, allergies and food preferences.
When you use PikaBox: what you order, cook, save and post; payment confirmations from M-Pesa or your card provider (never your PIN or full card number); and your approximate location while you’re ordering.
Only if you turn it on: health readings from Apple Health or Health Connect, your contacts (to find friends), and your camera (for Sahani and reels).
How we use it
To get food to your table: matching you with cooks, chefs, farms and riders near you, taking payment and sending updates. To make PikaBox better for you: suggestions in For you, Tonight’s pick and Pika’s ideas. To keep everyone safe: checking kitchens, preventing fraud and handling refunds.
We send marketing only if you say yes, and you can switch it off in Notifications at any time.
Health data
Never sold. Never used for ads. Never shared with insurers or employers. Health readings are used only to suggest what to eat and do, on your phone and in your account.
Health features are for wellness, not medical diagnosis. If you share a plan with a nutritionist, they see only what you choose, and you can stop sharing at any time.
Who sees what
| Who | What they see | When |
|---|---|---|
| Home cooks | Your first name and your order. Never your address. | While cooking |
| Riders | Your first name, drop-off point and gate notes | During delivery only |
| PikaChefs | Your address and kitchen notes | After you confirm a booking |
| Payment partners | Amount and phone number, to process payment | At checkout |
| Your circles | Only the plates and posts you share with them | When you post |
We may share data when the law requires it, for example a valid court order. If that happens, we’ll tell you unless we’re legally not allowed to.
Pika & AI
Pika uses your saved preferences, household and recent orders to make suggestions. You can see and edit everything Pika remembers in Pika’s memory, and clear it with one tap. We don’t use your private messages or health data to train AI models.
Pika’s AI provider is Anthropic (the Claude models). Before your first message Pika asks your permission to send your conversation to Anthropic, and nothing goes until you agree. What is shared is only the conversation itself and the context Pika needs to answer it, such as your diets and allergies, your household’s needs or the recipe or basket you are asking about. Never your payment details, your password or your contacts. Health readings are never shared; a short wellness hint from them goes only if you separately let Pika use your health insights. Anthropic processes it to give Pika’s answer on our behalf and does not use it to train its models. You can turn Pika off, or withdraw your permission, at any time in Settings.
How long we keep it
Account data: for as long as you have an account. Order and payment records: 7 years, as Kenyan tax law requires. Health readings: 12 months, or less if you choose. Deleted accounts are fully erased within 30 days.
Keeping it safe
Data is encrypted in transit and at rest. Staff access is limited, logged and reviewed. You can add 2-step login and see every device signed in to your account.
Your rights
You can see, correct, download or delete your data, object to how we use it, and complain to the Office of the Data Protection Commissioner. Most of this you can do yourself in Settings → Privacy & security. To delete your account from the web, start here.
Children
PikaBox accounts are for adults. Little chefs profiles are created and managed by a parent, show no ads, and are never visible to the public.
Contact us
PikaBox Ltd, Nairobi, Kenya. Email our Data Protection Officer at hello@pikabox.co.