Swat Eats

1. Who we are

Swat Eats is a food ordering and delivery platform operating in Swat, Pakistan. We connect customers with local restaurants and delivery riders. The data controller responsible for your information is:

2. Information we collect

a. Information you provide

• Phone number — used to create and sign in to your account via a one-time SMS code (OTP). Your number is shared with the restaurant and rider handling an active order so they can reach you about it; you can turn this off in your profile settings, and they will contact you through in-app chat instead.
• Profile details — your name, and optionally an email address and profile photo.
• Delivery addresses — addresses you save, including a map location (GPS coordinates) and any delivery instructions.
• Order information — items you order, order notes, tips, and order history.
• Communications — messages you send to your delivery rider through in-app chat, and any support requests or complaints you submit.

b. Information collected automatically

• Location data — with your permission, your device's location to set your delivery pin, show nearby restaurants, calculate delivery routes, and let you track your rider during an active delivery.
• Device & technical data — device model, operating system, app version, and language settings.
• Login & security metadata — IP address, approximate location, and device information recorded at sign-in to help detect and prevent fraud and unauthorized access.
• Push notification token — a token that lets us send you order updates and notifications.
• Customer app usage analytics — screen views, sessions, app lifecycle events, installation identifiers, and approximate network-derived location, as explained below.

c. Payments

Orders are primarily paid by Cash on Delivery. Where digital payment options are offered, payments are handled by the relevant payment provider — we do not collect or store your full card or bank account numbers on our systems.

d. Customer app usage analytics

The Swat Eats Customer app uses Google Analytics for Firebase, provided by Google, to understand app usage and improve navigation and the customer experience. Analytics collects screen views, session and app lifecycle information, app and device information, an app-instance identifier, approximate location derived from network information, and the Android Advertising ID when available.

When you sign in, we associate Analytics events with a pseudonymous internal account identifier and your signed-in status. The identifier is cleared from future events when you sign out; this does not remove previously collected events or turn off general usage analytics. Restaurant and order identifiers are excluded from our screen names.

We do not include your name, phone number, email address, delivery address, precise delivery coordinates, chat messages, or payment account details in our Analytics event tracking. Data required to fulfil orders is handled separately as described in this policy.

Analytics data is transmitted to Google over encrypted connections. Collection is currently enabled by default, including during guest browsing, and there is currently no in-app Analytics opt-out. Disabling GPS/location permission does not stop Analytics from deriving approximate location from network information.

3. Restaurant partner accounts

This section applies if you register a restaurant and use the Swat Eats Restaurant app. It is in addition to the sections above, which describe how we handle customer information.

a. Information you provide as a partner

• Account credentials — your email address and a password. Restaurant accounts sign in with email and password rather than an SMS code.
• Contact details — the owner or manager's name and phone number.
• Business details — your restaurant's name, description, cuisines, address and map location (GPS coordinates), opening hours, and delivery settings such as delivery radius, delivery fee and minimum order.
• Images — your restaurant logo, cover photo and menu item photographs that you upload.
• Menu information — item names, descriptions, prices, discounts, categories, sizes, flavours and add-ons.
• Payout details — your chosen payout method (bank transfer, JazzCash, Easypaisa or cash), the account name or number you give us for settlement, and your preferred payout period.
• Promotions — any offers or promo codes you create.
• Communications — replies you write to customer reviews, and any support requests you submit.

b. Information collected automatically

• Device notification token — so we can alert you when a new order arrives.
• Location — with your permission, your device's location, used only to place your restaurant's pin on the map. The Restaurant app does not track your location in the background.
• Order and performance data — orders placed with your restaurant, the times you accept and prepare them, your ratings and reviews, and the earnings and commission figures we calculate from them.

c. Customer information you receive

To fulfil an order, the Restaurant app shows you the customer's first name, delivery address, order contents and any delivery instructions, and — unless that customer has chosen to hide it — their phone number. You may use this information only to prepare and hand over that order. You must not contact customers for marketing, keep their details after the order is complete, or share them with anyone else.

d. How we use partner information

• To create and manage your restaurant account, and to review and approve your registration.
• To show your restaurant, menu and offers to customers in the Swat Eats app.
• To route orders to you and to riders, and to keep you and the customer updated on progress.
• To calculate your earnings, our commission and your settlements, and to pay you using the payout details you provide.
• To respond to your support requests and to investigate disputes, refunds or complaints.

e. What we share, and what we do not

Your restaurant's public details — name, photos, menu, prices, opening hours, ratings and reviews — are shown to customers, which is the purpose of listing with us. Your payout method and account details are never shown to customers or riders; they are used only by Swat Eats administrators to settle what we owe you. We do not sell partner information.

f. Retention and deletion

We keep your partner account and business details for as long as your restaurant is listed with us. If you close your account we remove your listing from the customer app, and we delete your payout details once any outstanding settlements have been paid. We keep order and settlement records for as long as we are required to for accounting and tax purposes, even after an account is closed.

To close a restaurant account, contact us at info@swateats.com from the email address on the account, or use the account deletion page linked below.

4. How we use your information

• Create and manage your account and verify your identity by SMS.
• Process, deliver, and track your orders.
• Share necessary details with the restaurant and the assigned rider so your order can be prepared and delivered.
• Send order status updates, receipts, and important service notifications.
• Provide customer support and resolve disputes.
• Operate rewards, referrals, and promotions where applicable.
• Protect the Service against fraud, abuse, and security threats.
• Improve and maintain the Service, including measuring Customer app usage through Google Analytics for Firebase.
• Comply with applicable laws.

5. How we share your information

We share only what is needed to deliver the Service:

* You can choose to hide your phone number from the rider in the app. We do not sell your personal information. Processing by Google Analytics and other service providers is described below.

6. Service providers we rely on

We use trusted third-party providers to operate the Service. Your data may be processed by:

• Google Firebase (Authentication, database, cloud functions, push messaging) — account, order, and notification infrastructure.
• Google Analytics for Firebase — Customer app usage measurement and reporting, including the analytics information described in section 2(d).
• Google Maps Platform (Maps, Places, Directions, Geocoding) — maps, address lookup, and delivery routing.
• Expo — app delivery and push notifications.
• Cloudinary — hosting of images shown in the app.
• SMS delivery providers (via Firebase) — to send your one-time verification codes.

These providers may process and store data on servers outside Pakistan. We provide data needed for their functions. Google Analytics also processes data under its applicable terms and policies.

Learn more about Google's handling of data in its Privacy Policy and its explanation of how Google uses information from apps and sites that use its services.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. Order records and transaction history may be retained longer where required for accounting, dispute resolution, fraud prevention, or legal compliance. When data is no longer needed, we delete or anonymize it.

Google Analytics user-level and event-level data is retained according to the retention settings configured for our Analytics property. Standard aggregated reports may have different retention rules. Contact info@swateats.com for information about the current Analytics retention period or to make a data-related request.

8. Your rights and choices

• Access & update — view and edit your profile and saved addresses in the app.
• Location permission — you can disable location access in your device settings (some features, like delivery, may not work properly without it).
• Notifications — you can turn off push notifications in your device settings.
• Hide phone from rider — available as a setting in the app.
• Analytics & advertising identifier — there is currently no in-app Analytics opt-out. You can manage your Android Advertising ID through your device's privacy or advertising settings; this does not turn off all Analytics collection. Contact info@swateats.com with Analytics privacy questions or data-related requests.
• Delete your account & data — email info@swateats.com and we will delete your account and associated personal data, subject to records we must retain by law.

9. Data security

We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data and limit access to authorized personnel only.

10. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Continued use of the Service after changes means you accept the updated policy.

12. Contact us

If you have questions or requests regarding this policy or your data, contact us: