Privacy policy
Freshli connects you with local farms. To do that we need a little about you: who you are, where to deliver and what you ordered. This page sets out exactly what we collect, why, who sees it and how to make us delete it.
Last updated Read our terms of service
Who we are
This policy covers the Freshli mobile app, the website at getfreshli.com and the services behind them. They are run by Pila Studio UG (haftungsbeschränkt), trading as Freshli, registered in the commercial register of the Amtsgericht Charlottenburg under HRB 289822 B, of Borner Straße 11, 13051 Berlin, Germany (“Freshli”, “we”, “us”), which is responsible for your personal data as its data controller.
One policy covers every market Freshli operates in. Where a law gives you more, its own section says so - see Your rights under the GDPR and Nigeria. For anything about your data, write to hello@getfreshli.com.
The short version
- You sign in with a one-time code we email to you. We never ask for a password.
- We collect what we need to take, pay for and deliver your order, and to run the app.
- Farms see your first name, what you ordered from them and any note you leave. They do not get your email, phone number or address.
- Card details go to our payment provider. We never see or store your full card number.
- We use your location only while the app is open, to show farms near you. It is not stored in your account.
- We do not sell your personal data, and we do not use it for third-party advertising.
- You can delete your account in the app, or by emailing us - see Deleting your account.
Information we collect
What you give us
- Account details: your email address (which is how you sign in) and your name. Accounts created before we moved to email sign-in may also hold a phone number; we keep it only as a contact detail, and it goes when the account is deleted.
- Your town or city: taken from your location when you set up the app, or typed by you. You can change it at any time.
- Delivery addresses: the addresses you save, with a label you choose.
- Orders: what you bought, from which farms, the delivery window you picked, the delivery address at the time, prices paid, and any note you leave for the farmers.
- What you choose in the app: farms you follow, products you save, restock alerts you ask for, the kinds of food you cook with, your notification settings, and promotional codes you redeem.
- Reviews: the stars, tags and comments you leave after a delivery.
- Messages to us: anything you send to our support team.
What we collect automatically
- Sign-in sessions: when you sign in we record the session's IP address and device type (user agent), so we can keep your account secure and sign you out everywhere when you ask.
- Push notification token: if you allow notifications, the token your phone issues for the app and whether it is iOS or Android.
- Approximate location: only while the app is open and only if you allow it - see Location.
- Usage and diagnostics: which screens and steps you use in the app, and crash reports - see Analytics and cookies.
On our website
The website has no accounts. If you register interest in an offer (a weekly box, a picking day, gifting, or selling as a farm), we keep your email address, which offer it was for and the wording you agreed to. A farm applying to sell with us may also give a farm name, contact name, location and what it grows.
We do not collect your date of birth, government ID, or any special-category data such as health or religion.
How we use it
- To provide the service: sign you in, show what is available near you, take and route your order to the right farms, take payment, deliver, refund, and keep your order history.
- To keep you informed: order confirmations, packing and delivery updates, refunds, and the other messages described in Notifications and email.
- To keep Freshli safe: prevent fraud and abuse, secure accounts, and keep the records the law requires of us.
- To improve Freshli: understand which parts of the app work and which do not, and fix crashes.
- To support you: answer questions and put right problems with orders.
We do not make decisions about you that have legal or similarly significant effects by automated means alone.
Location
The app asks for location permission “while using the app” only. It never tracks you in the background. When you allow it, the app reads your position once, works out your town on your phone, and keeps that on your device.
To show farms near you and their distance, the app sends approximate coordinates with its requests for the catalogue - those of your default delivery address if you have one, otherwise your phone's position. We use them to sort and measure distances and do not save them to your account, though like any web request they may appear in our hosting provider's server logs.
When you save a delivery address, we look up its map coordinates from the address you typed (using a mapping provider) and store them with the address, so the right farms and delivery windows can be offered.
You can turn location off at any time in your phone's settings. The app still works: it shows the market's farms from a central point instead.
Payments
Card payments are handled by our payment provider - Paystack in Nigeria and Flutterwave where a market uses it. You enter your card details on their secure checkout, not ours. We never receive your full card number or security code.
We send the provider the amount, the order reference and the email address on your account. When a card can be saved for later, the provider gives us a token that stands for it, along with the card brand, the last four digits and the expiry month and year, so you can recognise it in the app. We keep the payment reference with each order so refunds go back to the right place.
Notifications and email
We send email only to the address on your account, from hello@getfreshli.com, and push notifications only if you allow them on your phone. The same settings control both, under Notifications & preferences in the app:
- Order updates (on unless you turn them off) - confirmation, packing, on the way, delivered, and refunds.
- Harvest updates (on unless you turn them off) - new drops from farms you follow.
- Weekly digest (off unless you turn it on) - an email on Monday mornings about what is fresh at the market that week. We only send it if you switch it on; nobody is signed up to it by default.
- Restock alerts (off unless you turn them on) - when something you asked about is back.
Turn any of them off at any time in the app, or write to us and we will do it for you. We also send the sign-in codes you ask for, a one-off welcome email when you create your account, and messages you cannot opt out of while you have an account, such as a refund notice.
Where your data is stored
Our servers and database are in the United States. Website analytics are processed in the European Union, and some of the providers above operate in other countries. That means your personal data leaves the country you live in.
When it does, we rely on the safeguards the law provides - contracts with each provider that require them to protect it to the standard of this policy and of the law where you live - and we send only what each provider needs. For data covered by the GDPR, see Transfers outside the EU.
How long we keep it
- Your account and what you save in it: for as long as your account is open, then deleted as described in Deleting your account.
- Orders and payment records: for as long as tax and accounting law requires (up to seven years). After your account is deleted they are kept with your name, email, any phone number, street address and delivery notes removed - only the city, region and postcode stay, because tax records need them.
- Sign-in codes: expire after 10 minutes, or after five wrong tries, and cannot be used again.
- Push tokens: removed when your phone reports the token is no longer valid, or when your account is deleted.
- Website interest sign-ups: until you ask us to remove them, or the offer closes.
Security
Everything between the app, the website and our servers is encrypted in transit. Sign-in uses one-time codes sent to your email rather than passwords, so keep your email account secure; sessions can be ended from the server, and payment cards stay with the payment provider. Access to our systems is limited to the people who need it. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the regulator as the law requires.
Your rights
Wherever you live, you can ask us to:
- give you a copy of the personal data we hold about you, in a portable format;
- correct anything that is wrong (you can edit your name and addresses in the app yourself);
- delete your data - see Deleting your account;
- stop or restrict a particular use of it, or object to it;
- withdraw consent you have given, such as for notifications, without affecting anything done before.
Write to hello@getfreshli.com from the email address on your account, so we can confirm the request is yours - if you write from another address, we will check with the address on the account first. We reply within 30 days and do not charge for it.
Deleting your account
You can delete your Freshli account at any time, in the app or by email. You do not need the app installed to ask.
In the app
- Open your profile from the Account tab.
- Under Danger zone, tap Delete my account, then confirm.
By email
Write to hello@getfreshli.com with the subject “Delete my Freshli account”, from the email address you sign in with. If you write from another address, include the one you sign in with, and we will email it to confirm the request is yours before we act.
What happens next
- Your account is closed straight away and you are signed out on every device.
- We stop sending you notifications and emails at once, and switch off your restock alerts.
- After 14 days we permanently delete your profile, addresses, saved cards, push tokens, follows, saved products, preferences and notifications, and remove your name from your reviews. If an order is still on its way, we wait until it is delivered or cancelled.
- Changed your mind? Write to hello@getfreshli.com within those 14 days and we can restore your account. After that it cannot be undone.
- We keep records of past orders and payments only where tax and accounting law requires, with your name, email, any phone number, street address and delivery notes removed, as described in How long we keep it.
- Cancel any order still on its way before you delete, or ask us to - deleting your account does not by itself refund an order.
Your rights under the GDPR
Freshli is run by a company established in Germany, so the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act apply to everything we do with personal data - wherever you live and shop. Where the GDPR and your local law both apply, you get the protection of both.
Our lawful bases (Article 6(1) GDPR)
- Contract (point b) - to provide what you ask for: your account, sign-in, orders, payment, delivery and support.
- Consent (point a) - for location, push notifications and optional emails, including the weekly digest. You can withdraw it at any time in the app or your phone's settings; that does not affect anything done before.
- Legitimate interests (point f) - to keep Freshli secure, prevent fraud and abuse, and understand which parts of the app work so we can improve it, balanced against your rights.
- Legal obligation (point c) - to keep tax and accounting records and to respond to lawful requests.
Your rights
You have the right to access your data, to have it corrected, to have it erased, to restrict how we use it, and to receive it in a portable format. You can withdraw consent at any time. You are not subject to decisions based solely on automated processing that have legal or similarly significant effects on you - we make none. To use any of these rights, see Your rights.
You can object at any time to our use of your data based on legitimate interests, on grounds relating to your situation. You can always object to direct marketing - such as the weekly digest - and we will stop.
Transfers outside the EU
Some of our providers process data in countries outside the European Economic Area, including the United States, and our market operations are in Nigeria. We make these transfers only under Chapter V of the GDPR: to a country the European Commission has found adequate (for the United States, a provider certified under the EU-U.S. Data Privacy Framework), or under the Commission's Standard Contractual Clauses. Write to us for a copy of the safeguards that apply.
Complaints
Please tell us first at hello@getfreshli.com. You also have the right to complain to a data protection supervisory authority - in particular the one where you live or work, or ours: the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Alt-Moabit 59-61, 10555 Berlin, Germany.
If you are in Nigeria
If you use Freshli in Nigeria, the Nigeria Data Protection Act 2023 (NDPA) applies to how we handle your personal data, together with the rules of the Nigeria Data Protection Commission (NDPC).
Our lawful bases
- Contract - to provide what you ask for: your account, orders, payment, delivery and support.
- Consent - for location, push notifications and optional emails, which you can withdraw at any time in the app or your phone's settings.
- Legitimate interests - to keep Freshli secure, prevent fraud and improve the service, balanced against your rights.
- Legal obligation - to keep tax and accounting records and to respond to lawful requests.
Your rights under the NDPA
You have the right to be informed; to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; to withdraw consent; and not to be subject to a decision based solely on automated processing that significantly affects you. To use any of them, see Your rights.
Transfers outside Nigeria
Your data is stored and processed outside Nigeria, as Where your data is stored explains. We transfer it only with the protections the NDPA requires for transfers out of Nigeria.
Complaints
Please tell us first at hello@getfreshli.com - we would like the chance to put it right. You also have the right to complain to the Nigeria Data Protection Commission.
Children
Freshli is for adults buying food for their households and businesses. You must be 18 or older to create an account, and we do not knowingly collect personal data from children. If you believe a child has given us their data, tell us and we will delete it.
Changes to this policy
When we change this policy we update the “last updated” date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
Contact us
For any question or request about your privacy, write to hello@getfreshli.com. Pila Studio UG (haftungsbeschränkt), trading as Freshli, registered in the commercial register of the Amtsgericht Charlottenburg under HRB 289822 B, of Borner Straße 11, 13051 Berlin, Germany is the data controller.