Privacy Policy

Last updated: November 30, 2025

1. Information We Collect

1.1 Personal Information

• Account Information: Name, email address, phone number, profile picture
• Authentication Data: Phone verification codes (OTP), password hashes
• Contact Preferences: Preferred language (Turkish, English, Russian), notification settings
• Referral Information: Referral codes and referrer relationships

1.2 Location Information

• Delivery Addresses: Full addresses, detailed directions, city, district information
• Geographic Coordinates: Latitude and longitude for delivery accuracy
• Location History: Last known locations and map preferences
• Map Settings: Zoom levels, map types, traffic preferences

1.3 Order and Payment Information

• Order History: Restaurant selections, menu items, quantities, special instructions
• Payment Data: Payment methods, transaction records, delivery fees
• Payment Tokens: Encrypted payment card information (last 4 digits, expiry dates)
• Scheduled Orders: Future order preferences and timing
• Coupon Usage: Applied discounts and promotional codes

1.4 Behavioral Information

• Search History: Restaurant and food search queries
• Favorites: Preferred restaurants and menu items
• Reviews and Ratings: Restaurant reviews, ratings for speed, taste, and price
• App Usage: Navigation patterns and feature usage

1.5 Communication Data

• Support Messages: Customer service chat conversations
• Support Files: Images or documents shared during support interactions
• Push Notifications: Device tokens for mobile notifications

1.6 Technical Information

• Device Information: Mobile device identifiers, operating system details
• Network Data: IP addresses, connection information
• App Performance: Crash reports, error logs, usage analytics

2. How We Use Your Information

2.1 Service Delivery

• Processing and delivering your food orders
• Coordinating with restaurants and delivery partners
• Providing accurate delivery time estimates
• Managing scheduled orders and notifications

2.2 Account Management

• Creating and maintaining your user account
• Authenticating your identity via phone verification
• Managing your delivery addresses and payment methods
• Processing referral rewards and coupons

2.3 Customer Support

• Responding to customer inquiries and complaints
• Providing technical support and troubleshooting
• Managing live chat conversations
• Resolving order-related issues

2.4 Personalization

• Customizing restaurant recommendations
• Showing relevant promotions and offers
• Remembering your preferences and favorites
• Providing location-based services

2.5 Communication

• Sending order status updates and delivery notifications
• Sharing promotional offers and announcements
• Providing customer service communications
• Sending app updates and feature notifications

3. Information Sharing

3.1 Restaurant Partners

We share necessary order information with restaurants including:

• Your name and phone number for order confirmation
• Delivery address for food preparation and delivery
• Order details and special instructions
• Payment confirmation (not payment details)

3.2 Service Providers

We work with third-party services for:

• SMS Services: Twilio for phone verification and notifications
• Cloud Services: Supabase for secure data storage
• Payment Processing: Secure payment gateway providers
• Analytics: App performance and usage analytics

3.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes and government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms of service

4. Data Security

4.1 Security Measures

• Encryption: All sensitive data is encrypted in transit and at rest
• Authentication: Multi-factor authentication and secure password policies
• Access Control: Strict access controls and employee authorization
• Regular Audits: Security assessments and vulnerability testing

4.2 Payment Security

• Payment card information is tokenized and never stored in plain text
• PCI DSS compliance for payment processing
• Secure payment gateways with fraud detection

5. Data Retention

• Account Data: Retained while your account is active
• Order History: Kept for 7 years for business and legal requirements
• Support Messages: Retained for 2 years for quality assurance
• Location Data: Automatically deleted after 1 year of inactivity
• Analytics Data: Anonymized data retained for business insights

6. Your Rights

6.1 Access and Control

• Access: Request copies of your personal data
• Correction: Update incorrect or incomplete information
• Deletion: Request deletion of your personal data
• Portability: Export your data in a structured format

6.2 Communication Preferences

• Opt-out of promotional notifications
• Manage notification settings in the app
• Unsubscribe from marketing communications
• Control push notification preferences

6.3 Location Services

• Disable location services in your device settings
• Delete saved addresses from your account
• Control location-based recommendations

7. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have the information deleted.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data during international transfers, including:

• Adequate protection mechanisms as recognized by applicable data protection laws
• Standard contractual clauses approved by regulatory authorities
• Certification schemes and codes of conduct

9. Cookies and Tracking

Our mobile application may use local storage and similar technologies to:

• Remember your preferences and settings
• Maintain your login session
• Improve app performance and user experience
• Provide analytics and usage insights

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in our mobile application
• Sending push notifications about significant changes
• Updating the "Last updated" date at the top of this policy

11. Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• Supabase: Database and authentication services
• Twilio: SMS and communication services
• Google Services: Maps and location services
• Payment Providers: Secure payment processing

This Privacy Policy is effective as of the date listed above and applies to all users of our food delivery application.