Privacy Policy

MealDrop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our food delivery and restaurant ordering platform.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Personal Information

We collect information that you provide directly to us, including:

• Account Information: Full name, email address, phone number
• Delivery Information: Delivery addresses, location coordinates (latitude/longitude)
• Payment Information: Payment card details (processed securely through Stripe)
• Order Information: Order history, food preferences, special instructions
• Communication Data: Messages with restaurants, drivers, and support

Automatically Collected Information

• Device Information: Browser type, operating system, device identifiers
• Location Data: GPS coordinates for delivery tracking and restaurant recommendations
• Usage Data: Pages viewed, time spent, search queries, interaction with features
• Cookies: Session data, preferences, authentication tokens

We use the collected information for the following purposes:

• Order Processing: To process and deliver your food orders
• Account Management: To create and manage your account
• Payment Processing: To process payments securely through our payment partners
• Delivery Services: To coordinate delivery with drivers and provide real-time tracking
• Communications: To send order confirmations, updates, and customer support messages
• Personalization: To recommend restaurants and items based on your preferences
• Analytics: To understand usage patterns and improve our services
• Legal Compliance: To comply with applicable laws and regulations

We may share your information with:

• Restaurants: Order details, delivery address, contact information
• Delivery Drivers: Delivery address, contact information, order details
• Payment Processors: Payment information (Stripe) for transaction processing
• Service Providers: Third-party services that help us operate (SMS notifications, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/SSL)
• Secure storage of sensitive information
• Access controls and authentication
• Regular security audits and updates
• Payment processing through PCI-compliant partners (Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Order history is retained for 7 years for accounting and tax purposes. You may request deletion of your account and associated data at any time.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your information
• Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact us using the information provided below.

7. Location Data

We collect location data to:

• Calculate delivery fees and estimated delivery times
• Show nearby restaurants
• Provide real-time delivery tracking
• Verify delivery completion

You can control location permissions through your device settings. Disabling location services may limit some features.

8. Third-Party Services

Our platform uses the following third-party services:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• SMS Provider: Order notifications and updates
• Maps Services: Location and mapping functionality

These services have their own privacy policies, and we encourage you to review them.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized recommendations

You can control cookies through your browser settings, but disabling them may affect functionality.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Legal Compliance

This Privacy Policy complies with applicable data protection laws including:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• California Consumer Privacy Act (CCPA) for applicable users