Privacy Policy

Last updated: 23 July 2026  ·  Effective for customers, kitchen partners (vendors), and delivery riders

1. Who This Policy Covers

MamaChef connects three types of users on one platform, and this policy applies to all of them:

• Customers — people ordering food through the app
• Vendors — home kitchens and small food businesses listing menus
• Riders — delivery partners fulfilling orders

2. Information We Collect

Account information

• Name, phone number, and email address (via Google Sign-In or account registration)
• Profile photo, if you add one

Location information

• Your device's GPS location, used to show nearby kitchens, calculate delivery distance and fees, set a delivery address, and — for riders — to share live location with the customer and vendor during an active delivery
• Saved addresses you add to your account

Order and payment information

• Order history, items purchased, delivery address, and order value
• In-app wallet balance and transaction history
• Payment method selected (cash on delivery or in-app wallet); MamaChef does not store your bank or card details

Rider verification (KYC) information

Independent delivery riders are asked to provide, for safety and verification purposes:

• CNIC number and photos of both sides of the CNIC
• Driving license photo
• Police verification certificate
• Proof of address

Vendor information

• Business name, address, menu, and pricing
• Subscription payment receipts submitted for listing verification

Communications

• Messages sent through in-app order chat and customer support chat, including any photos attached (for example, as proof for a support issue)

Device and usage information

• Device type, operating system, and app version, used for troubleshooting and push notifications

3. How We Use Your Information

4. Who We Share Information With

We share information only as needed to make the marketplace work, or where you've asked us to:

• Between users, as needed for a delivery — a customer's name, phone number, and delivery address are shared with the assigned vendor and rider for that order; a rider's name, phone number, and live location during delivery are shared with the customer and vendor
• Service providers — Firebase/Google Cloud (app backend, authentication, notifications), Hostinger (file storage), and mapping providers (OpenStreetMap, Google Maps), who process data on our behalf
• Legal reasons — if required by law, or to protect the safety of our users

We do not sell your personal information to third parties or advertisers.

5. Data Security

We use industry-standard tools (Firebase Authentication, Firestore security rules, encrypted connections) to protect your information. Rider verification documents and payment proof images are stored on access-controlled servers. No system is 100% secure, but we work to protect your data appropriately for the type of information involved.

6. Data Retention

We keep account and order information for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs. Rider KYC documents are retained for the duration of their registration with MamaChef and as required for verification records.

7. Your Choices and Rights

• You can review and update your profile information in the app at any time
• You can request a copy of your data, or ask us to delete your account and associated data, by contacting us at the email below
• You can turn off promotional notifications while still receiving order-related alerts
• Location access can be disabled in your device settings, though this will limit core app features like delivery

8. Children's Privacy

MamaChef is not directed at children, and we require users to be at least 18 years old to create an account, place orders, or register as a vendor or rider. We do not knowingly collect information from anyone under 18.

9. Third-Party Services

MamaChef uses the following third-party services, each governed by their own privacy policy:

• Google Firebase (authentication, database, cloud messaging)
• Google Sign-In
• OpenStreetMap / Google Maps (for location and navigation)

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the app or by updating the "Last updated" date above.