What we keep, and why.

What we collect

• About you: your email or mobile number, first name, country, and how you like to get updates.
• About the person you shop for: the name you call them, their area, plot and street, mobile number and any delivery note.
• About your orders: the list, the supermarket, the delivery window, the till receipt and its photo, and what was charged.
• When you send something else: your photos of what to buy (and of its price tag), the shops, any link you add, whether it is a surprise, and the message for the card.
• For the first-order offer: a fingerprint of your card from Stripe, a code that stands for the card number without revealing it, so the offer is used once per card.

What we never see

Your card details go from your browser straight to Stripe, our payment processor. They never reach DijoBox servers. We keep only the card brand and last four digits so you can recognise a saved card.

Who sees what

• The shopper sees the list, the delivery address, the recipient's name and mobile number, and your notes. For something else, they also see your photos, the shops, your links and the message for the card, so they buy the right thing and write the card. They do not see your contact details.
• Anyone with the tracking link sees the order status, the list (or the things and your photos of them), and the till receipt with its total in pula. They do not see the address, any phone number, your contact details, what you paid, or the message on the card. For a surprise, they see only that something is on its way and when: not what it is, where it is from or what it cost. Share the link only with people you trust.
• The list tidier: lines of your list that we do not recognise are sent to a language model hosted on Amazon Web Services to fix spelling and estimate a price. Only the list text is sent: no names, addresses or contact details.

Where it lives

Your data is stored in our database (Supabase, on Amazon Web Services), with access rules that let each customer read only their own records. Your photos of what to buy are kept in private storage there, never public: each time someone allowed to see one opens it, it is through a link that stops working within an hour. Payments are handled by Stripe. Emails are sent through our mail provider.

Your draft list

Before you pay, your list is saved in your own browser so you can refresh or come back later. If you are signed in, the unfinished shop (the list, the supermarket, and the name, address and mobile number of the person it is for) is also saved to your account, so you can carry on from another phone or computer. Both copies are cleared when the order goes through. You can remove an unfinished shop from Your orders at any time, signing out takes it off that browser, and we delete one that has not been touched for 90 days.

Sending something else

While you put the order together, your photos are shrunk and kept in your own browser. They are sent to us when you go to pay, and cleared from the browser once the order goes through. If you don't finish paying, we delete them from our storage after a week.

Your choices

You can edit or remove saved recipients and cards from Your orders. To get a copy of your data, or to have your account, your photos and the rest of your data deleted, write to hello@dijobox.com. We keep order and payment records for as long as the law requires.

Cookies

We use cookies only to keep you signed in and to remember your currency. No advertising cookies, no trackers.