Privacy Policy

1. Information we use

• Accounts: name, email, phone number, account role, login and verification records, and an optional profile photo.
• Vendors: business contact information, address and location, opening hours, logo, menu details, item photos, online orders and POS records.
• Drivers: profile and vehicle photos, vehicle type and colour, licence plate, licence and insurance documents, expiry dates and approval records.
• Services: pickup and destination addresses, selected places and coordinates, recipient details, items, quantities, notes, delivery instructions, quotes, tenders, assignments, fares, payment references and statuses, receipts, reviews, messages and support or safety reports.
• Technical records: sessions, service errors and security logs needed to operate and protect the service. Payment providers handle their own payment processing under their policies.

We use this information to register and verify accounts, approve partners, find nearby services, fulfil orders and rides, calculate routes and fares, process and reconcile payments, print receipts, communicate service updates, investigate issues and maintain operational and accounting records.

2. Location and live trips

With permission, GPS helps select pickup or destination locations and find vendors and available drivers within the service's 10-mile discovery radius. You can also select locations manually.

When a driver goes online or has an active assignment, the Android location service can continue sending location while the app is minimised or the screen is off. A persistent service notification is shown. Going offline stops availability tracking when there are no active jobs; an active assignment can continue tracking until it ends. Signing out stops the native tracking service. Phone permission and battery settings can affect updates.

During an assigned job, the customer can view the assigned driver's location and the driver can view the job's pickup and destination; optional rider live location is shared for the active assignment. Live contact and tracking access end when the job completes, is cancelled or the participant is reassigned. Historical booking records remain subject to retention below.

If you create a trip-sharing link, anyone holding that link may see pickup and destination pins and the driver's location until the link expires, is revoked or the trip ends. Share links only with people you trust. For multi-stop courier jobs, customers see their own job and stop information; other customers' addresses and contact details are not displayed to them.

3. Who receives information

Information needed to fulfil an order or ride is shared with the assigned driver, relevant vendor, recipient where appropriate, and authorised operations staff. Vendor menu details and business branding are visible to customers; driver identity and vehicle details help customers identify their assigned driver. Licence and insurance uploads are intended for authorised compliance review, not public listings.

Hosting, email and configured payment providers process information needed to provide their services. PayPal Checkout receives the payment reference, service description and USD amount; PayPal handles payer and funding-source details under its Privacy Statement. Google receives map requests, address searches, selected place identifiers and route coordinates when Google Maps features are used. See Google's Privacy Policy and Google Maps Terms. Information may be processed in countries where these providers operate.

Information may also be disclosed when needed to comply with applicable legal requirements, investigate fraud or resolve safety incidents and disputes.

4. Phone permissions and local storage

• Location: supports the location features described above. Precise permission improves pickup and driver tracking.
• Photos and files: system pickers and camera capture let you choose profile, menu, vehicle and compliance uploads. Only selected or captured content is submitted.
• Nearby devices / Bluetooth: vendor printing connects to a selected paired receipt printer. Printer identifiers are stored locally for reconnection; receipt and kitchen-order content is sent to that printer.
• Notifications: optional phone notifications provide order, tender and service updates. Drivers also use a persistent location-service notification.

Android login tokens are stored encrypted on the device. The app and website use necessary session storage, preferences and local drafts; the website may use session cookies. Vendor POS drafts and printer preferences can remain on a shared device. Sign out and clear app or browser storage before handing a device to someone else. Manage permissions through your phone settings; restricting them may prevent the relevant feature from working.

5. Security and retention

The service uses HTTPS, account access controls and restricted operational access. No network service or device is completely secure. Keep your password and verification codes private.

We retain account information while needed to provide the service, and booking, order, payment, accounting, support and safety records while needed for their operational, dispute, fraud-prevention or applicable legal purposes. Ending live tracking does not erase past job records. Retention depends on the type of record and the reason it must be kept; retained records should be restricted to that purpose and deleted or anonymised when no longer needed.

6. Your choices and account deletion

You can update supported profile information, change or reset your password, sign out, and manage phone permissions. To request access, correction, or deletion of an account and its associated personal data, use the contact details below. You can request deletion without reinstalling the app.

State whether you want the entire account deleted or specific data removed, and whether the account is a customer, vendor or driver account. Operations will verify your identity before acting. Submitting a request does not immediately delete the account or cancel an active order.

When an account deletion request is fulfilled, the account and associated personal data are deleted or anonymised, except records that must be retained for accounting or legal obligations, fraud prevention, safety or unresolved disputes. Operations should explain any retained categories and their applicable retention period when responding. Deactivation alone is not account deletion.

7. Contact and changes

Privacy enquiries are handled by Ker Mi / Ker IT / Buy Food.

Email [email protected]. Include your account email or phone number, account role, and the request. Do not send your password, OTP, payment credentials or identity documents by email.

We may update this policy when service features or data practices change. The effective date above identifies this version. Material changes should also be communicated through the service where appropriate.

Saved PayPal and fraud prevention

When you choose saved PayPal, PayPal collects device or browser information to help prevent fraud. Collection may use existing device permissions, including location where permitted. Android payment collection is configured without location consent. The app stores a short-lived risk correlation, your wallet consent and provider references; it does not store raw device fingerprints or your PayPal password. You may use regular PayPal approval instead, and disconnect a saved wallet in Account. PayPal processes collected information under its privacy policy.