Privacy Policy

Last updated: 16 October 2026

Version française

In short

• Who we are: Camyamo is run by Phoenix Stack (PHOENIX INC SARL), a company registered in Cameroon. Contact: support@camyamo.com.
• What we collect: what you give us (your phone number or email address, your name, your orders and bookings, your messages, your reviews), what your phone tells us when you allow it (your location, only while the app is open), and records of how you use the app, including your IP address.
• Who sees it: the restaurant, hotel or delivery agency handling your order or booking, our staff when they help you, and the service providers that run Camyamo. Your reviews are public, with the first word of your name and an initial; signed-in users with a verified account also see your profile photo.
• What we never do: we never sell your data, we use no advertising trackers, and we never hold your money. You pay the merchant directly.
• Please know: photos uploaded to Camyamo sit at public links. Listing photos are shown to everyone; the others are not listed anywhere, but anyone who has a link can open the file. We do not yet delete uploaded photos. Identity and business registration documents are different: they are kept in private storage. Details in section 7.
• Your choices: you can decline location, turn the weekly notification off, ask us for a copy of your data, and delete your account in the app (guests: see section 8).

1. Who we are

Camyamo is a service of Phoenix Stack (PHOENIX INC SARL), a limited liability company (SARL) registered at the Trade and Personal Property Credit Register in Yaoundé under number RC/YAE/2023/B/1924, with its registered office at Efoulan (lieu-dit Pont), Yaoundé, Cameroon. Phoenix Stack decides how and why your personal data is used for Camyamo.

For any question about your data, write to support@camyamo.com.

2. Who this policy covers

• Customers who order food or book stays, including guests who order or book without signing up. Browsing without an account creates nothing on our side. Checking out or booking as a guest creates a simple account for you, tied to your phone; the contact details you give are saved with your order or booking. Older versions of the app also created this account when you chose "Browse without an account".
• Restaurant, hotel and guest-house owners, and the staff they added in earlier versions of the app.
• Delivery agencies, whether a company or a single rider.
• Visitors to camyamo.com.

3. Information we collect

Information you give us

• Account: your phone number or email address (you sign in with a one-time code sent by WhatsApp or by email), your name, and optionally a profile photo. If you use "Continue with Google", Google gives us your name, email address and profile photo.
• Guest orders and bookings: your name and the contact details you type, so the merchant can reach you. For a food order, a guest gives a phone number, which we confirm with a code sent by WhatsApp and then save on the guest account, so you can sign in with it later.
• Orders and bookings: what you order or book, notes you add, your delivery address (the text you type and, if you tap "Use my location", your phone's position at that moment), and the status history. Each order and booking keeps a copy of the name, phone number and email address you used, so the merchant can contact you about it.
• Saved addresses and favourites: delivery addresses saved on your account, with their label (a guest's delivery address is saved automatically), and the restaurants and hotels you save as favourites.
• Payment claims: when you tell us you have paid, we record that claim and any transaction reference you enter. We never receive your money, your Mobile Money PIN, or any card or bank details.
• Messages: your chats with restaurants and hotels (including questions to a hotel before you book), including photos you send. If you email our support team, we keep your email.
• Reviews and disputes: your ratings, your review text, any dispute you open with the evidence you attach (for example a screenshot of a Mobile Money message), and your answers when the app asks whether you visited a place or how an order went.
• Reports and blocks: if you report a review or a conversation, we record the reason you choose, any details you add, and a copy of what you reported as it was at that moment. For a review, that is the review with its rating and any reply. For a conversation, it is the last 30 messages between you and the other person, including photos. If you block someone, we record the block.
• Business owners and agencies: your business details (name, address, exact map location, phone number, photos, menu or rooms, opening hours), your Mobile Money and Orange Money collection numbers and merchant codes, your identity or business registration documents, and, for a delivery agency, its details (name, phone number, the cities it covers, its bikes and cars, its description and its rates as it writes them) and whether it is a company or a single rider.
• Photos: we store the photos you upload as we receive them. If your phone saved information inside a photo file, such as where it was taken, we do not remove it on our servers.

Information collected automatically

• Location (only if you allow it, and only while the app is open, never in the background). We use it to show what is near you, to switch to the right city when you travel, to ask whether you visited a place you were next to, to choose the city for the weekly notification if you turned it on, and, when you tap "Use my location" while adding an address, to save that position with the address, for your deliveries. Our server can also give a restaurant owner an approximate count of app users nearby (see section 5).
• Where we record it: only inside an area drawn around Cameroon. That area is a rectangle, so it also covers border areas of neighbouring countries, such as parts of Nigeria, Chad and Equatorial Guinea. Positions outside it are not recorded.
• Your last position, rounded to about 100 metres, kept for 30 days.
• A log of the areas you have been, rounded to about 1 kilometre, with the hour and the city, kept for 30 days.
• The places we asked you about, and your answer, kept for 90 days, so we do not ask you about the same place again within that time.
• The places you confirm you visited, kept until you delete your account.
• Your nearest region: the first time you allow location, the app adds the name of the nearest region and your rounded distance from it to our usage analytics. This is recorded wherever you are, and kept like other analytics events.
• Device and app information: a random identifier created by the app on your phone, the platform (Android or iOS), the app language, a session identifier, your IP address, and the technical user agent your app sends (it names the software library and is the same for every phone). We use them for security, to prevent abuse, and in our usage analytics.
• Usage analytics: events such as screens opened, searches run (we record how long the search was, not what you typed), orders placed and changes to an order's status. These events are linked to your account and to the app's identifier, and some also carry the order, booking, dispute, restaurant, hotel or dish they are about, a payment amount and method, and the user agent. We use them to understand and improve Camyamo, and to look into disputes and misuse. We do not use any advertising or third-party tracking tools.
• Notifications: a notification token from Google's Firebase service, which delivers our notifications on Android and on iPhone (on iPhone, through Apple). When you sign in, on Android and on iPhone, the app registers this token with us. Your phone shows our notifications only if you allow them (on iPhone, we may first deliver quietly to your notification centre).

Information from other people

• Owners could add staff members by phone number in earlier versions of the app.
• Google, if you choose "Continue with Google" (see above).
• Merchants and agencies may record things about you while handling your order or booking: a dispute about you, with its description and evidence; a note that a payment you claimed was not found; the reason an order was cancelled or a booking was declined; and a reply to your review.

Records we create about you

• Trust and safety: warnings, disputes and their outcomes, whether an account is flagged or suspended, and notes our staff write when they act on an account. If an account is flagged or suspended, the last phone it was used on can no longer be used to sign in to any account. An account with three active warnings (each lasts 90 days) is suspended automatically.
• Guest history: if you sign in on a phone that was used without an account, the app moves that guest account's history (orders, bookings, reviews, addresses, favourites, messages, notifications, disputes, warnings and referrals) into your account automatically. On a shared phone, this can join two people's histories.
• Referral code: every account, guest accounts included, gets a referral code. No version of the app lets anyone use a code yet.
• Uploads: which account uploaded each photo or document.

4. How we use your information

• To create your account, sign you in and keep it secure.
• To take your orders and bookings, send them to the merchant, and organise deliveries.
• To send you order and booking updates in the app, by push notification and on WhatsApp, and for stays also by email. Camyamo works through WhatsApp: your phone sign-in codes, your order updates and your booking confirmation are sent there. If you do not want any WhatsApp messages from us, you can delete your account.
• To let you chat with restaurants and hotels.
• To ask you for reviews (in the app about recent orders and stays, and in the WhatsApp message that tells you an order is complete), and to run reviews, the verification of merchants, and dispute handling.
• To ask your phone's app store (Google Play or the App Store) to show its own rating box for Camyamo, after a completed order or stay. What you enter there goes to Google or Apple, under their own terms.
• To prevent fraud and abuse, including blocking a phone used by a suspended account, and to enforce our Terms of Service.
• To understand how Camyamo is used and to improve it.
• Only if you turn it on: a weekly notification about new places near the city you were last in. It is off unless you say yes, and you can turn it off at any time with the "New places near you" switch in the app's Settings & Support.

Our legal grounds

Cameroon's Law No. 2024/017 on the protection of personal data applies to how we use your data. We rely on:

• our agreement with you, to run your account, orders, bookings, deliveries, messages, payment claims and the notifications about them;
• your consent, for location (to show what is near you) and the weekly notification; you can withdraw it at any time (section 9);
• our legitimate interests, to keep Camyamo secure, prevent fraud and abuse, settle disputes, improve the service, and for the other uses of location described in section 3 (the questions about places you visited, the nearby users count and the nearest-region analytics);
• legal obligations, where the law requires us to keep or share information.

5. Who we share it with

The merchants and agencies handling your order or booking

• Restaurants see your name, your phone number, the email address on the order if you gave one, your order and your notes, and your delivery address for a delivery. The delivery address is hidden from them 7 days after you place the order, and at once if the order is cancelled. They receive new-order alerts on WhatsApp. Restaurant and hotel owners can request a report of their orders or bookings that includes each customer's account identifier (not the name); no version of the app shows this report yet.
• Hotels and guest houses see your name, phone number, email address and profile photo on every booking. If you message a hotel before you book, it sees your name and your messages.
• Delivery agencies see your name, phone number, delivery address, order note and what was ordered, only for an order the restaurant sends them, and pass what is needed to the rider who delivers it. Your name, phone number, address and order note are hidden from them 7 days after the delivery is closed, and at once if the order is cancelled or when the restaurant and the agency stop working together (a delivery under way is finished first).
• Copies of messages a merchant receives on WhatsApp stay on their phone; we cannot delete them.

The other side of a dispute

Both sides of a dispute see each other's full name, phone number and profile photo, and all the evidence attached. The other side is told about a new dispute in the app and, when WhatsApp allows it, on WhatsApp.

Other users

• Reviews are public. They show your rating, your text, the first word of your name as you entered it, and the first letter of its last word. If you entered your family name first, your family name is what is shown. People signed in with a verified account also see your profile photo next to your review.
• Trust records: any signed-in user, guests included, can look up the trust record of a restaurant or hotel owner or a delivery agency. It shows the account's name, a trust score and level, active warnings, how many different customers or businesses it has completed orders and bookings with, its disputes and disputes lost, whether the account is suspended, and the date it joined. Customers have a trust record too; only you and our staff can see yours.
• Nearby users count: our server can tell a restaurant owner how many app users' location logs put them within 3 kilometres of their restaurant in the past week. They get a range (5 to 9, 10 to 24, 25 to 99, or 100 and over), nothing below 5, and never names. No version of the app shows this yet.
• Reports and blocks: the person you report is not told about the report or who made it. The person you block is not told either, but they can see that they can no longer send you messages. When a report arrives, our staff get an email that gives only its type and reason, with no names and no content. They read the report itself on the admin dashboard, with the names of both accounts.

Camyamo staff

Our support and moderation staff can see account details, orders, bookings, messages, disputes, uploaded documents and usage analytics when they need to help you, settle a dispute or stop abuse. Most changes staff make on the admin dashboard are logged in our server logs; what staff view is not logged.

Service providers

These companies run parts of Camyamo for us. All of them are outside Cameroon (see section 6).

• Railway: hosts our servers and database, and keeps our server logs.
• Cloudflare: stores the photos and documents uploaded to Camyamo, and encrypted backup copies of our database. Some older photos may still be stored by Cloudinary, the provider we used before.
• Infobip: sends WhatsApp messages and one-time codes (WhatsApp itself is run by Meta).
• Resend: sends emails, including one-time codes.
• Google: delivers push notifications on Android and iPhone (Firebase), translates the names and descriptions of listings, menu items and rooms between English and French, provides maps, and provides "Continue with Google".
• Apple: passes our notifications on to iPhones.
• Vercel: hosts the camyamo.com website.

We do not sell your personal information, and we do not share it for advertising.

When the law requires it

We may share information when the law requires it, or to protect the safety and rights of our users, merchants or Camyamo.

6. Where your data is stored

Your data is stored and processed outside Cameroon. Our servers and database are in the European Union (the Netherlands), and uploaded photos and documents are stored in Western Europe (some older photos may still be with Cloudinary, see section 5). Our other service providers, listed in section 5, may process data in the European Union, the United States or other countries, under their own terms and security commitments. The translation of listing text uses Google's public translation service, without a separate agreement with Google.

7. How long we keep it

• Your account: until you delete it (see section 8).
• One-time sign-in codes: 24 hours.
• In-app notifications: 90 days.
• Location: as listed in section 3.
• Rate-limit records (your IP address, and the phone number or email address you sign in with): about one hour. IP addresses also appear in our server logs, for as long as our hosting provider keeps them.
• Messages and notifications that failed to send: for a WhatsApp message, the phone number, the text and any code it carried; for a push notification, your account ID and the text. Each stays in our queues until 500 newer failures in the same queue replace it.
• Saved addresses: until you remove them, or 30 days after you delete your account. Orders point to the saved address rather than keeping a copy, so removing it also removes it from your past orders.
• Favourites: until you remove them. After your account is deleted they stay attached to the anonymised account.
• Analytics events: kept with no end date. 30 days after you delete your account, they are unlinked from your account and from your phone's identifier, but they still carry what they were about (the order, booking, dispute, restaurant, hotel or dish), the user agent, and, for the nearest-region event, the region and distance.
• Orders, bookings, messages, reviews and disputes, including the copies of your name, phone number and email address on them: we keep them after your account is deleted, so that disputes can still be settled and we can meet our legal obligations. We have not yet set an end date for them.
• Trust and safety records, referral records and upload records: kept with no end date, including after your account is deleted.
• Reports: kept with no end date, including after either account is deleted, like other trust and safety records. Blocks: kept until you unblock the person, or until the name and contact details are removed from either account (see section 8).
• Names and phone numbers of an agency's riders: no longer collected. Older versions of the app let an agency type a rider's name and phone number; our server no longer saves them, and those saved earlier have been deleted.
• Listings: an owner can delete a listing in the app; it stays in a trash for 90 days. A listing with past orders or bookings is hidden but never purged.
• Photos you upload: we do not yet delete uploaded files. Listing photos, chat photos, dispute evidence and profile photos stay in storage even after the listing, conversation or account is deleted. Listing photos are shown publicly. The others are shown only to the people involved (your profile photo also to signed-in verified users next to your reviews), and anyone who has a photo's direct link can open it.
• Identity and business registration documents: kept to verify the business, with no end date yet. They are kept in private storage. Only our staff can open them, and an agency can also open the document it sent us, each time through a link that works for 5 minutes; we record each link we issue and to whom. The app first uploads a document like any other photo, at a public link. When you submit it, we move it to private storage and remove the public copy, unless the same file is used elsewhere in Camyamo. A document you upload but never submit stays at its public link. Until 3 October 2026 these documents were stored at public links, so a copy saved before then by someone who had a link is outside our control.
• Backups: we make a backup copy of our database every night and keep each copy for up to 60 days. A copy can still contain data after it has been removed from Camyamo, until that copy is deleted.

8. Deleting your account

• You can delete your account in the app: Profile → Account & Activity → Delete My Account. We send you a code to confirm.
• When you confirm, your account is deactivated immediately. Your location history (positions, last position, visits and the places we asked about) and your notification tokens are deleted at once, so push notifications stop. The nearest-region analytics entries are unlinked after 30 days, with your other analytics. Updates about an order or booking that is still in progress can still reach you by WhatsApp or email.
• If you sign back in within 30 days, your account is restored. After 30 days, your name, phone number, email address and profile photo are removed from your account, your saved addresses are removed, and your analytics events are unlinked from you. The profile photo file itself stays in storage (see section 7).
• Owners: deleting your account does not take your restaurants or properties off Camyamo. Delete a listing in the app first (see section 7), or write to us.
• Delivery agencies: deleting your account switches your agency off. It receives no new orders, and the restaurants it works with are told.
• What we keep after that is listed in section 7.
• Guests who ordered food: your phone number was saved on a guest account, so you can sign in with it and delete it in the app like any account.
• Guests who booked a stay: the app confirms your phone number or email address when you book. If you confirmed your phone number, sign in with it and delete your account in the app. If you confirmed only an email address, sign in with it if you need to, add and confirm your phone number in the app's account settings, and then delete your account in the app. If you booked with an older version of the app, write to support@camyamo.com from the email address you used, or tell us the phone number you used; we will check that it is yours, and then delete your contact details.
• People who browsed without an account in an older version of the app: that version created an account tied only to your phone. To delete it, add and confirm your phone number in the app's account settings, or sign in (your guest history then moves into your account), and delete your account in the app.
• If you can no longer use the app: write to support@camyamo.com from the email address on your account, or tell us your phone number. We will check that the account is yours and delete it for you.
• The same steps, outside the app: camyamo.com/account-deletion.html

9. Your rights and choices

• Get a copy of your data: write to support@camyamo.com. We answer within 30 days.
• Correct your data: change your name, photo and language in the app, or write to us. A profile photo can be replaced in the app but not removed; write to us to remove it.
• Delete your data: see section 8.
• Withdraw your consent: turn off location in your phone's settings; turn off the "New places near you" switch in the app's Settings & Support; turn off notifications in your phone's settings.
• Object to a use of your data: write to us and tell us which use.
• Complain: you can complain to the competent data protection authority in Cameroon.

We may ask you to confirm your identity before acting on a request, so that nobody else can obtain or delete your data.

10. Payments

Payments are made directly to the merchant, never to Camyamo. For restaurant orders, you pay the restaurant by MTN Mobile Money or Orange Money from your own phone, or in cash where offered. For stays, you pay the hotel or guest house directly on arrival; Camyamo does not collect any payment for stays. Camyamo does not hold, escrow or transmit your money, and does not store your Mobile Money PIN or any card or bank details. A payment reference you enter for a restaurant order is used to help the restaurant check your payment, and to stop the same reference being used twice.

11. Security

We protect your information with encrypted connections (HTTPS), one-time codes and sign-in tokens stored in our database only in scrambled (hashed) form, limits on repeated requests, and access controls that check your account on every request. Uploaded photos do not yet have this protection; identity and registration documents do (see section 7). No method of transmission or storage is perfectly secure, but we work continuously to protect your data.

12. For restaurant and hotel owners and delivery agencies

• Your business details are public on Camyamo: name, address, exact map location, phone number, photos, menu or rooms, and opening hours. For a small guest house, this may be your own phone number and home.
• Your Mobile Money and Orange Money collection numbers are shown to a customer whose restaurant order is to be paid by Mobile Money or Orange Money, and, when the customer chooses how to pay later, once you accept the order. They are never shown on bookings, because stays are paid at the hotel. Camyamo never receives these payments.
• Your identity or business registration document is used only to verify your business. It is kept in private storage, and only our staff can open it (an agency can also open the document it sent us). See section 7.
• Your trust record (your name, trust score, warnings, how many different customers you have completed orders and bookings with, disputes and disputes lost, suspension status and the date you joined) can be seen by any signed-in user, guests included.
• Disputes: if a customer opens a dispute with you, they see your name, phone number and profile photo (see section 5).
• Deleting your account does not take your listings off Camyamo (see section 8).
• Delivery agencies: your agency's name, the cities you cover and your rates are shown to restaurant owners looking for an agency in those cities, your phone number to a restaurant you work with, and your agency's name and phone number to the customer of each order a restaurant sends you. We may send job alerts, and requests from restaurants, to your agency's phone number on WhatsApp; they carry no customer details. When you apply, we record that you accepted the Terms of Service, and when. Before approving you, our staff call your number and record that they did. If we suspend your agency, the restaurants you work with are told. Camyamo does not keep your riders' names or phone numbers and does not contact your riders.
• Staff: in earlier versions of the app, an owner could add a staff member by phone number. We created an account for that number without sending them a message, and the owner saw the name and profile photo of a number that already had an account. Those staff accounts are kept.

13. Our website

camyamo.com sets no cookies and uses no tracking tools. It remembers your language choice in your browser. The home page loads its fonts from Google, which receives your IP address when it delivers them.

14. Children

Camyamo is for people aged 18 and over. The sign-in screen asks you to confirm that you are 18 or over, but we do not check it. We do not knowingly collect information from children. If you think a child has given us their data, write to us and we will delete it.

15. Changes to this policy

When we change this policy, we update the date at the top of this page and of the copy in the app.

16. Contact us

Questions about this policy or your data: support@camyamo.com.

← Back to Camyamo