Swat Eats

1. Who we are

Swat Eats is a food ordering and delivery platform operating in Swat, Pakistan. We connect customers with local restaurants and delivery riders. The data controller responsible for your information is:

2. Information we collect

a. Information you provide

• Phone number — used to create and sign in to your account via a one-time SMS code (OTP).
• Profile details — your name, and optionally an email address and profile photo.
• Delivery addresses — addresses you save, including a map location (GPS coordinates) and any delivery instructions.
• Order information — items you order, order notes, tips, and order history.
• Communications — messages you send to your delivery rider through in-app chat, and any support requests or complaints you submit.

b. Information collected automatically

• Location data — with your permission, your device's location to set your delivery pin, show nearby restaurants, calculate delivery routes, and let you track your rider during an active delivery.
• Device & technical data — device model, operating system, app version, and language settings.
• Login & security metadata — IP address, approximate location, and device information recorded at sign-in to help detect and prevent fraud and unauthorized access.
• Push notification token — a token that lets us send you order updates and notifications.

c. Payments

Orders are primarily paid by Cash on Delivery. Where digital payment options are offered, payments are handled by the relevant payment provider — we do not collect or store your full card or bank account numbers on our systems.

3. How we use your information

• Create and manage your account and verify your identity by SMS.
• Process, deliver, and track your orders.
• Share necessary details with the restaurant and the assigned rider so your order can be prepared and delivered.
• Send order status updates, receipts, and important service notifications.
• Provide customer support and resolve disputes.
• Operate rewards, referrals, and promotions where applicable.
• Protect the Service against fraud, abuse, and security threats.
• Improve and maintain the Service.
• Comply with applicable laws.

4. How we share your information

We share only what is needed to deliver the Service:

* You can choose to hide your phone number from the rider in the app. We do not sell your personal information, and we do not share it for third-party advertising.

5. Service providers we rely on

We use trusted third-party providers to operate the Service. Your data may be processed by:

• Google Firebase (Authentication, database, cloud functions, push messaging) — account, order, and notification infrastructure.
• Google Maps Platform (Maps, Places, Directions, Geocoding) — maps, address lookup, and delivery routing.
• Expo — app delivery and push notifications.
• Cloudinary — hosting of images shown in the app.
• SMS delivery providers (via Firebase) — to send your one-time verification codes.

These providers process data on our behalf and may store it on servers outside Pakistan. We share only the data needed for them to perform their function.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. Order records and transaction history may be retained longer where required for accounting, dispute resolution, fraud prevention, or legal compliance. When data is no longer needed, we delete or anonymize it.

7. Your rights and choices

• Access & update — view and edit your profile and saved addresses in the app.
• Location permission — you can disable location access in your device settings (some features, like delivery, may not work properly without it).
• Notifications — you can turn off push notifications in your device settings.
• Hide phone from rider — available as a setting in the app.
• Delete your account & data — email info@swateats.com and we will delete your account and associated personal data, subject to records we must retain by law.

8. Data security

We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data and limit access to authorized personnel only.

9. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Continued use of the Service after changes means you accept the updated policy.

11. Contact us

If you have questions or requests regarding this policy or your data, contact us: