Also covers the Pata website. On pata.enzz.co.ke, the details in section 2.4 are kept in your browser instead of on your phone, and are removed when you sign out, clear the site's data, or delete your account. To delete your account on the website, open Profile and choose Delete account.
Privacy Policy — Enz-Z Pata
Effective date: 14 October 2026
This Privacy Policy explains what information the Enz-Z Pata mobile app ("the app") collects, why we collect it, who we share it with, and the choices you have. The app is operated by Enzz Technologies Limited ("Enz-Z", "we", "us"), based in Kenya.
- App: Enz-Z Pata (Android package
ke.co.enzz.pata) - Website: https://enzz.co.ke
- Contact: customer@enzz.co.ke
By using the app you agree to this policy. If you do not agree, please do not use the app.
1. Who this policy covers
Pata helps shoppers find local shops, see their products and offers, and place orders for pickup or delivery. This policy covers people who use the app as shoppers.
The shops you see in Pata are independent businesses. They manage their pages and receive orders through our separate app for businesses, Enz-Z Biashara, which has its own privacy policy.
2. Information we collect
2.1 Information you give us
| Information | Examples | When it is collected |
|---|---|---|
| Contact details | Your email address or your phone number. You do not create a password; we send a 6-digit code to your email, or to WhatsApp on your phone number, to check it is yours. | When you sign in |
| Google account details | Your Google email address and a sign-in token that proves it is you | Only if you choose "Sign in with Google" |
| Your area | County, sub-county and ward | When you choose where to look for shops |
| Orders | The shop, the items and quantities, the total, and whether you want pickup or delivery | When you place an order |
| Delivery details | The delivery address and any note you type for the shop | Only when you choose delivery |
| Reviews | Star ratings (overall, response, readiness, delivery, service, quality) and any comment you write | When you rate a shop after an order |
| Assistant questions | What you type to the shopping assistant | When you use the assistant |
| Offer alerts | Which shops' offers you asked to be told about | When you switch offer alerts on or off |
2.2 Information collected automatically
| Information | Purpose |
|---|---|
| Push notification token (Firebase Cloud Messaging) | Sending order updates and the offer alerts you asked for to your device |
| An app-generated identifier | If you use the assistant without signing in, the app creates a random identifier so the assistant can keep your conversation together and limit misuse. It is not your device's hardware ID or advertising ID. |
| Network connection status | Telling you when you are offline |
| IP address and basic request data | Received by our servers and service providers whenever the app connects to them; used for security and to deliver the service |
The app does not include advertising SDKs or third-party analytics SDKs, and it does not collect an advertising ID.
2.3 Device permissions
The app asks for a permission only when the feature that needs it is used. You can refuse any permission and still use the rest of the app.
| Permission | Why it is used |
|---|---|
| Location (precise and approximate) | Showing shops near you and how far away they are, working out a shop's delivery fee to where you are, and letting the assistant suggest nearby shops. Your location is read only while you are using these features. The app does not track your location in the background. |
| Notifications | Telling you when an order changes status and about offers you asked to hear about. |
| Internet and network state | Connecting to our servers and detecting when you are offline. |
The app does not request access to your camera, microphone, contacts, call logs, SMS, or your photos and files.
2.4 Information stored on your device
To work quickly, the app keeps some data on your device: your email address or phone number, your chosen area, your cart, your favourite shops, the last delivery address you typed, and your notification token. This data is removed when you uninstall the app or clear its storage. Signing out removes your sign-in details from the device.
3. How we use information
We use the information above to:
- sign you in and recognise your orders;
- show you shops, products and offers in your area and near your location;
- send your orders to the shop you chose and show you their progress;
- work out delivery fees based on distance;
- show your ratings and comments on the shop's page;
- answer your questions through the shopping assistant, including reading replies aloud when you ask;
- send notifications about your orders and the offers you asked for;
- provide support, fix problems, and prevent fraud or misuse;
- comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
4. Legal basis
We process personal data under the Kenya Data Protection Act, 2019 on these bases: performance of our contract with you (providing the app and passing on your orders), your consent (for example, location access and notifications), our legitimate interests (security and improving the service), and compliance with legal obligations.
5. Who we share information with
5.1 The shop you order from
When you place an order, the shop's owner and the employees handling it see your email address or phone number, the items you ordered, whether you chose pickup or delivery, and, for delivery, your address and note. They need this to prepare and hand over your order. Shops are independent businesses and are responsible for how they use the details they receive.
Reviews you write are shown on the shop's page in Pata, on the Pata website and to the shop. They are shown without your name, email address or phone number. Do not put personal details in a review comment.
5.2 Service providers
We share information with service providers that help us run the app, and only as needed for the purposes below.
| Recipient | What is shared | Purpose |
|---|---|---|
Our backend servers (api.enzz.co.ke) | The information described in section 2 | Running the service |
| Google Firebase (Authentication and Cloud Messaging) | Your Google sign-in details if you use Google sign-in; push notification token and notification content | Signing you in and delivering notifications |
| Google Sign-In | Your choice of Google account | Only if you choose "Sign in with Google" |
| WhatsApp (Meta) | Your phone number and the sign-in code | Sending your sign-in code, only if you sign in with a phone number |
| Email delivery provider | Your email address and the sign-in code | Sending your sign-in code, only if you sign in with an email address |
| AI service providers | Your questions to the assistant, your area and, if you allowed it, your location, plus the reply text when you ask for it to be read aloud | Providing the shopping assistant on our behalf |
| Cloudinary | IP address | Delivering shop and product images and videos |
| OpenStreetMap | IP address and the map area being viewed | Showing a shop's location on a map |
| Google Fonts | IP address | Downloading the app's fonts the first time they are needed |
5.3 Social media posts and videos on shop pages
Shops can show their own public posts from Facebook, Instagram, TikTok and YouTube on their page. A post is loaded only when you tap to show it. It then plays in that platform's own player, so the platform receives your IP address and device details and may set cookies, under its own privacy policy:
- YouTube (Google): https://policies.google.com/privacy
- Facebook and Instagram (Meta): https://www.facebook.com/privacy/policy
- TikTok: https://www.tiktok.com/legal/privacy-policy
If you do not tap a post, nothing is sent to that platform.
5.4 Links that leave the app
Buttons such as Call, WhatsApp, Get directions, a shop's website or "View on Instagram" open another app or your browser. What you share there is covered by that service's privacy policy, not this one.
5.5 Other cases
Information is also shared:
- When required by law, or to protect the rights, safety and property of our users or ourselves.
- In a business transfer, such as a merger or sale, in which case this policy continues to apply to your data.
6. Payments
The app does not take payments and never asks for your card or mobile money details. You pay the shop directly when you collect or receive your order.
7. Security
Data sent between the app and our servers is encrypted in transit using HTTPS. No system is completely secure. Anyone holding your unlocked phone can see your orders in the app, so keep your phone locked.
8. How long we keep information
We keep your account details and order history for as long as you use the app. When you delete your account, we delete your account, notification tokens, offer alerts, notifications and assistant conversations, and we remove your email address, phone number, delivery address and delivery note from your past orders and your reviews. The orders and reviews themselves stay with the shop without your details. Shops keep their own sales records. We may keep limited records for longer where the law requires it (for example, tax or financial records) or to resolve disputes, and backups are overwritten on a rolling schedule.
9. Your choices and rights
You can:
- Use the app without location by refusing the permission; you then pick your area by hand.
- Turn off notifications in your device settings, and switch off offer alerts for a shop in the app.
- Hide an order from your order list in the app.
- Sign out in the app, which removes your sign-in details from the device.
- Delete your account and data in the app: open the menu and tap Delete Account. Deletion is immediate and cannot be undone. If you have an order in progress, you can delete your account once it is completed or the shop has cancelled it.
- Request deletion without the app by emailing customer@enzz.co.ke from the email address you signed in with, or stating the phone number you used. We act on the request within 30 days.
- Withdraw permissions at any time in your device settings.
Under the Kenya Data Protection Act, 2019 you also have the right to be informed about how your data is used, to access it, to object to or restrict processing, to have inaccurate data corrected, to have data erased, and to receive your data in a portable format. To use any of these rights, contact customer@enzz.co.ke. We respond within 30 days.
You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke).
10. International transfers
Some of our service providers store or process data outside Kenya. Where this happens, we rely on safeguards permitted under the Kenya Data Protection Act, 2019.
11. Children
The app is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will change the effective date above and, for significant changes, notify you in the app. Continuing to use the app after a change means you accept the updated policy.
13. Contact us
Enzz Technologies Limited Email: customer@enzz.co.ke Website: https://enzz.co.ke