Privacy Policy

MyKade by Zimozo · last updated 23 October 2026

MyKade lets resellers in Sri Lanka sell products that Zimozo stocks, packs and delivers. This page explains what information MyKade handles, why, and how you can have it removed.

Information we handle

• Resellers: name, mobile number, password (stored encrypted), NIC number and the date of birth and gender it contains, city and district, bank details for payouts, and the orders, earnings and payouts of their account. Optionally a profile photo or shop logo, a short status, and a shop page.
• Identity check (KYC): before a reseller can order or be paid, they send photos of the front and back of their NIC, a selfie, a proof of their bank account and a proof of address. These photos are stored encrypted, are seen only by the MyKade team that reviews them, and every view is logged. They are never sent to any AI service or to anyone outside MyKade.
• MyKade Premier League (optional): resellers who join show their first name, district team and shirt number on the league tables inside the app.
• Customers who order: name, mobile number and delivery address, so the order can be delivered and paid for (including an SMS from MyKade with a payment link when the customer pays online), and the record of past deliveries to that number, used to prevent fraud and refused parcels.
• Connected Facebook Pages and Instagram accounts: when a reseller connects their Page, we receive the messages customers send to that Page or Instagram account, the customer's public name, and a Page access token (stored encrypted) so replies can be sent. We do not read the reseller's personal Facebook profile, friends or posts.
• Connected Daraz shops and websites: the orders those shops send to MyKade for delivery.

How we use it

• To take, deliver and account for orders, and to pay resellers.
• To answer customer messages: messages and the reseller's product list are sent to Anthropic's Claude AI service to draft a reply. Anthropic processes them only to produce that reply. Resellers see every AI reply and can review it before it is sent.
• To keep the service safe: checking who our resellers are, spotting fake orders and repeated refused parcels.
• To send customers SMS messages about paying for their order, through our SMS provider (Hutch).

We do not sell personal information, and we do not use customer messages for advertising.

Who we share it with

• Courier companies, to deliver parcels (name, phone, address).
• Meta (Facebook, Instagram) and Daraz, only to send replies or fulfil orders on the reseller's own account.
• Payment providers, when a customer pays online.
• Our SMS provider (Hutch), only the customer's mobile number and the payment message.
• Anthropic, for AI replies as described above.

Children

MyKade accounts are only for people aged 18 and over. Sign-up checks the age on the NIC and refuses anyone younger, and we do not knowingly collect information from children. If you believe a child has given us their details, contact us and we will delete them.

How long we keep it

Order and accounting records are kept as long as the law requires. Messages from connected Pages are kept while the Page stays connected and are deleted when it is disconnected through Facebook (see below) or on request.

Deleting your data

Resellers can delete their account in the app: Account → Delete account. The account closes at once, and the profile, photos, shop page and identity-check photos are deleted. Order, payment and tax records and the result of the identity check are kept as the law requires and to prevent fraud. How account deletion works.

A reseller can disconnect a Facebook Page, Instagram account, Daraz shop or website at any time in the MyKade app. Removing the MyKade app from your Facebook account (Facebook Settings > Apps and Websites) automatically deletes the Pages and messages connected through it; Facebook gives you a confirmation code for the request. For any other request to see or delete your information, contact us through the MyKade app or our Support page.