Data deletion

This page is Pal's official data-deletion instructions endpoint — the URL that app-store reviewers, payment processors and business platforms ask for when they check that a service offers a proper way out. It is also simply the honest answer to "how do I get my data off Pal?"

Everything here applies whether you hold a full account or you have only ever ordered as a guest with a phone number. No login is needed — the request form works for both.

• Your name, phone number and — if you registered — your email and password (stored only as a hash).
• Saved delivery addresses and past order history, including receipt confirmations and delivery code records.
• Cart items, favourites, group-buy participation, loyalty punch-cards and referral records.
• Wallet credit balance and its transaction records.
• Push notification subscription, if you enabled notifications.
• Payment status records (e.g. "card · paid") — never your card number itself.

The full inventory — what we collect, why, and who it is shared with — lives in our Privacy Policy.

Three ways — pick whichever is easiest:

• Use the request form at the top of this page. Your phone number identifies your data.
• Or email [email protected] from the phone number or email on your account, saying "delete my data" or "delete my account".
• Registered users can also close the account in the app: Profile → account settings → Close account — closure triggers the same deletion pipeline.

All three routes land in the same queue and get the same treatment.

Deletion is the one place we must be certain you are you, so an admin verifies every request before anything is deleted.

The key is the phone number that placed your orders. We match it against the orders on file; if anything is unclear we call you back on that number before touching a single record.

• The number is enough even if you never created an account — guest orders are keyed by phone.
• +234…, 0803… or spaced formats all match — we compare the last seven digits.
• If someone else asks for your data to be deleted, verification simply fails and nothing happens.

• We verify the request belongs to you (usually within a day or two).
• Your data is deleted or de-personalised within 30 days — usually within a week.
• You receive a written confirmation once it is done: by email if you gave us one, otherwise a call.
• Deletion takes your WhatsApp group membership and push notification subscription with it — the noise stops with the data.

Nigerian tax, accounting and consumer law requires us to keep transaction records — order values, payout and refund records — for a statutory period.

Those retained records are de-personalised: your name, phone number and addresses are stripped out; only the amounts and dates remain. After the statutory period they are destroyed too.

This is the only exception to "delete everything", and it protects the transaction, not your identity — nothing left on file points back to you.

You choose the scope when you file:

• Everything — your account and login, order history, saved addresses, wallet, referrals and loyalty punches.
• Specific data — for example your order history and saved addresses only, keeping your account and wallet alive.

You never need to delete your data just to get some peace:

• Turn push notifications off in your browser or phone settings — that stops them everywhere.
• Leave the WhatsApp groups — that is your right at any time, no explanation needed.
• Email-only receipts can be switched off with one line to [email protected].

Deleting data is for when you want it gone. For everything else about how we handle it, read the Privacy Policy and the Terms of Service.