Security

Pieleaf lets you order farm produce with a phone number and mobile money, no account, no password to protect. Here's how we protect your order and your data at every step.

Data protection in transit and at rest

Every connection between your device and Pieleaf is encrypted with HTTPS/TLS, so your order details can't be read in transit. Your data is stored with our database provider, Supabase, which encrypts data at rest and restricts access to authorized systems only.

How payments work

When you pay for an order, you're redirected to your mobile money provider to authorize the transaction. Pieleaf never sees or stores your mobile money PIN, and we don't accept or store card numbers. Payment confirmation is passed back to us only after your provider has approved the transaction.

Your phone number and personal data

Because checkout is guest-only, the personal data we hold is limited to what an order needs: your phone number, delivery city and agency, and the produce you ordered. We use this information to fulfill and communicate about your order, and we don't sell it to third parties.

Access controls

Farms manage their listings and fulfillment through a separate app built for them, kept apart from the buyer-facing storefront. Internal access to order and customer data is limited to the staff who need it to operate Pieleaf.

Shared responsibility

We secure the systems that power Pieleaf. You help keep your order safe by keeping your phone and your mobile money PIN to yourself, and by only entering your mobile money PIN inside your provider's own app or prompt, never on a page claiming to be Pieleaf.

Report a vulnerability

If you believe you've found a security issue with Pieleaf, please email support@pieleaf.com with details so we can investigate and respond.