Privacy Policy

Your account. Your name, and the email address and/or phone number you sign up with. Passwords are never stored — only a one-way hash that can't be turned back into the password. Your date of birth, only if you choose to add it.

If you sign in with Google. Your name, email address, profile photo and Google account ID. We don't receive your Google password or access anything else in your Google account.

Your orders. What you ordered, prices, pickup time or table, any notes, and the contact name and phone number you enter at checkout. If you order for someone else, their name, phone number and any note you add for the shop.

Your location. With your permission, your device's location, used to show nearby shops and distances. It's kept on your device for up to 15 minutes and sent to us only as part of a search — we don't store it against your account. Addresses you save yourself, including their map position, are stored until you delete them.

Messages. Text and photos you exchange with a shop about an order.

Reviews. Your ratings, comments, and any photos or videos you attach.

Favorites and notifications you've saved or received in the app.

Sign-in codes. When you sign in with a one-time code, we store only a one-way hash of it. Codes expire after 5 minutes.

Technical logs. Our servers keep standard logs — IP address, time, browser type and the page or search requested (which can include the approximate location a search was made from) — for security and troubleshooting. These are deleted after about two weeks.

QR code scans and recommendation interactions are counted without recording who you are.

We don't currently collect or store card numbers, bank details or mobile wallet details. We keep a record that an order was paid, its amount and its status. If we introduce a payment provider, this policy will be updated first to name them.

• To place your orders and let shops prepare them.
• To show shops and distances near you, or near a place you search for.
• To let you and a shop contact each other about an order.
• To keep accounts secure and prevent fraud and abuse.
• To understand how the service is used, through totals and averages that don't identify you.

We don't send marketing messages. If we ever start, we'll ask for your permission first, and you'll be able to withdraw it at any time.

• Shops you order from see your order, the contact name and phone number you gave at checkout, the recipient's details if you ordered for someone else, and your messages with them.
• Everyone can read reviews you post. Your name appears shortened — for example “Rahim K.”
• Google provides maps, place search and address lookup, and Google sign-in. Place searches and map positions you view are sent to Google to provide these.
• OpenStreetMap provides some map images. Loading them sends your IP address and the map area being viewed to OpenStreetMap's servers.
• Our hosting provider stores the data on our behalf.
• Authorities, where the law requires us to.

We don't sell your personal information, and we don't share it with advertisers.

• A sign-in cookie that keeps you logged in for up to 30 days.
• A short-lived security cookie during Google sign-in, which expires after 10 minutes.
• Your cart, saved on your device so it survives closing the app.
• Your recent location, kept on your device for up to 15 minutes.

We don't use advertising or third-party tracking cookies.

We keep your account information for as long as your account is open. When you delete your account:

• Your account, saved addresses, favorites, notifications and sign-in codes are permanently deleted.
• Photos you sent in messages are deleted, and your messages are replaced with “This message was deleted.”
• Your past orders are kept for the shops' financial records, with your name, phone number, notes and any recipient details removed, so they no longer identify you.
• Your reviews stay visible, so shop ratings stay accurate, but show “Former customer” and are no longer linked to you.

• View and update your details and saved addresses from your profile.
• Turn location access off at any time in your browser or phone settings — you can still search for a place by name.
• Ask us for a copy of your information, or to correct it, by emailing us.
• Delete your account yourself from Delete your account, at any time.

Everything is sent over encrypted connections (HTTPS). Passwords and sign-in codes are stored only as one-way hashes, and each shop can see only its own orders and customers. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects you.

শখের খাবার isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.

If we change this policy, we'll update the date at the top, and tell you in the app before any significant change takes effect.

Questions, or requests about your information: nayem3622@gmail.com