Privacy Policy

Version . Applies to the customer, restaurant partner and rider apps.

1. Who we are

, , runs , a local food delivery service. We are the "personal information controller" under the Data Privacy Act of 2012 (Republic Act No. 10173). For any privacy question or request, contact our Data Protection Officer: .

2. What we collect

• Customers: name, mobile number, delivery address, landmark, resort and room or cottage number, map pin, order details and notes, payment method (cash or GCash to the rider), ratings, reviews, and support messages and photos.
• Restaurant partners: owner's name and mobile number, business details, business permit number, GCash number, store and food photos, menu and prices.
• Riders: name, mobile number, photo, vehicle and plate number, driver's license number and photo, home barangay, GCash number, earnings and cash remittances, and your live location only while you are online or on a delivery.
• Everyone: your password (stored only as a one-way scrambled "hash" that nobody can read), login times, and the internet address (IP) used for security checks.

We do not collect card or bank details, and we do not use advertising trackers or sell data to anyone. Your phone keeps your login, cart, saved address and theme choice in the browser's local storage.

3. Why we use it

• To take, prepare, deliver and pay for orders (this is needed to provide the service you asked for).
• To keep people safe: delivery codes, checking riders' licenses before approval, SOS alerts and safety reports.
• To answer support requests and fix problems with orders.
• To show honest ratings and reviews.
• To prevent fraud and abuse, and to meet legal and tax obligations.

4. Who can see your information

• The restaurant sees your name, number, order and notes only while your order is active. After delivery or cancellation, your number and address are hidden from them.
• The rider sees only the barangay until they accept the job. After that, they see your name, number, address and map pin, but only until the delivery is finished.
• Customers see their rider's name, photo, vehicle, plate number, ratings and live location during the delivery. The rider's phone number is hidden after delivery.
• Reviews are public and show only your first name and last initial (for example "Juan D.").
• The team can see order and account records to give support, handle safety reports and settle payments. Admin actions are recorded in an activity log.
• Service providers: our cloud server (DigitalOcean, data center in Singapore) stores the data. Map tiles come from OpenStreetMap or Google Maps, and fonts from Google Fonts. These services see your device's internet address when they load. Online payments are processed by Maya (Maya Philippines), a BSP-supervised payment company: you enter your GCash, Maya or card details on Maya's page, and we only receive the payment result and reference, never your card number. For leave-at-the-door orders, the rider's photo of where the food was left is kept privately (you, the rider and our team) and erased with the order's other details. Because the server is outside the Philippines, your data is transferred abroad under the same protections described here.
• Authorities, only when the law requires it or to protect someone's life or safety.

5. How long we keep it

• Delivery addresses, phone numbers, notes and map pins on finished orders are automatically erased after days. Closed support chats are erased after the same period.
• A rider's location is erased as soon as they go offline.
• Order amounts are kept without personal details for as long as tax law requires.
• Safety and emergency reports are kept as long as needed for a possible police, insurance or legal case.
• Security logs are kept for 3 years.
• Your account stays until you delete it.

6. Your rights

Under the Data Privacy Act you have the right to be informed, to access your data, to object, to correct it, to have it erased or blocked, to data portability, to claim damages, and to file a complaint. In the app:

• Download my data: Account → Privacy & security → Download my data.
• Delete my account: Account → Privacy & security → Delete my account.
• Correct your details: edit them in your profile, or message us in Help → "My data & privacy".

We answer other requests within 15 days. If you are not satisfied, you can complain to the National Privacy Commission (privacy.gov.ph).

7. How we protect it

• All connections use HTTPS encryption, and passwords are stored as hashes.
• Repeated wrong logins are blocked, and admin logins expire every day.
• Rider license photos and support photos are private: only the owner and our team can open them.
• The server has a firewall and automatic security updates, and protected backups are made nightly.

If a personal data breach happens, we will notify the National Privacy Commission and the people affected within 72 hours of finding out, as the law requires.

8. Children

You must be 18 or older to create an account, or have permission from a parent or guardian. Riders must be of legal age and hold a valid driver's license.

9. Changes

If we change this policy in an important way, we will tell you in the app before the change applies.

10. Contact

· ·

Terms of Service · Back to the app