Privacy Policy

Information we collect

• Account information. When you create an account, we collect your name, email address, phone number, and a securely hashed password. If you sign in with Google, we receive your name, email, and profile image from Google.
• Order information. Details of the orders you place — items, options (such as spice level and special instructions), pickup restaurant, amounts, and order history.
• Payment information. Payments are processed by Stripe. Your card details are entered directly into Stripe and are not stored on our servers. We receive only a payment confirmation and limited details (such as the last four digits and a payment reference).
• Location information. With your permission, the app and website use your device location to show restaurants near you. You can decline or revoke this permission at any time in your device or browser settings; the Service still works without it. On the website, we also use the approximate city your internet connection indicates (provided by our hosting provider) to show nearby restaurants and dishes before you share a location. To show your neighborhood name, we send a rounded version of your shared location (accurate to about 100 meters) to OpenStreetMap’s Nominatim service. We don’t save your location to your account.
• Push notification token (mobile app). If you enable notifications, we store your device’s push token so we can send order-status updates.
• Technical data. Standard information such as device type, app version, and server logs, used to operate and secure the Service.

How we use your information

• To process and fulfill your orders and share them with the pickup restaurant.
• To send order confirmations and status updates by email and push notification.
• To show you nearby restaurants (using location, if permitted).
• To provide customer support and respond to your requests.
• To operate, secure, maintain, and improve the Service.
• To comply with legal obligations.

How we share your information

We do not sell your personal information. We share it only as needed to run the Service:

• Restaurants — the details of an order you place are shared with the restaurant you ordered from, so they can prepare it for pickup.
• Service providers — Stripe (payments), Resend (email delivery), Vercel (hosting), Neon (database), Google (optional sign-in), Expo (push notification delivery), and OpenStreetMap Nominatim (neighborhood names for a shared location). These providers process data on our behalf under their own terms.
• Legal — where required by law, or to protect our rights, users, or the public.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account and associated personal data (see “Your rights”).

Text messages (SMS)

If you check “Text me updates about this order” at checkout, we’ll send text messages about that order to the mobile number you provide — for example, when it’s ready for pickup or if it’s cancelled and refunded. Restaurants that add an alert number receive a text for each new order. We don’t send marketing texts.

• Message frequency varies with your orders. Message and data rates may apply.
• Reply STOP to any message to stop receiving texts, or HELP for help.
• Consent to texts isn’t required to place an order.
• We do not sell, rent, or share your mobile number or text-messaging consent with third parties or affiliates for their marketing purposes. Your number is shared only with our messaging provider (Twilio) to deliver the messages you asked for.

Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and payment handling through Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

• Access, correct, or update your account information from your profile.
• Request a copy or deletion of your personal data by contacting us.
• Turn location and push notifications on or off in your device settings.
• Unsubscribe from non-essential emails; you may still receive transactional order emails.
• Stop order texts at any time by replying STOP, or leave the checkout box unchecked.

Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Significant changes may be communicated through the Service.

Contact us

If you have questions about this Policy or your data, contact us at sales@fuska.shop.