INTRODUCTION
This Privacy Policy explains how Baito — Sushi & Asian Bites ("Baito", "we") collects, uses, discloses and protects your information when you use our mobile application and related services. By using the app, you consent to the practices described in this Policy.
It covers everyone who uses the app: customers, delivery drivers and waiters.
INFORMATION WE COLLECT
Account information: your mobile phone number, which is how you sign in; your name, if you give it; and an email address and password if you use a username sign-in instead of SMS.
Delivery information: the addresses you save — street, area, building, floor, apartment, landmark, delivery notes and an alternate phone number.
Location: your precise location is used only while you are on the map screen choosing a delivery address. It is never collected in the background or while the app is closed. Delivery drivers additionally share their live position while a delivery they are carrying is in progress, so the customer can watch it approach; we keep only the current position, overwrite it with each update and delete it when the delivery ends.
Order and loyalty information: what you ordered, options and notes, totals, payment method, times, and the points you earn and spend.
Device information: a push notification token, if you allow notifications, so we can tell you when your order moves.
Camera: used only by restaurant staff, to read a customer's QR code. No photo or video is captured, stored or transmitted.
We do not collect advertising identifiers, browsing history, contacts, photos, microphone or health data.
HOW WE USE YOUR INFORMATION
To take, prepare and deliver your order, and to let the restaurant or driver reach you about it.
To run the points scheme — awarding points, letting you claim rewards, and preventing the same reward being claimed twice.
To provide customer support and resolve problems with an order.
To send you updates about your own order, if you allow notifications.
To keep the app secure and to detect and prevent fraud and abuse.
We do not use your information for advertising, and we do not build a profile of you for marketing.
SHARING OF INFORMATION
We do not sell or rent your personal data to anyone.
We share information with the providers who run parts of the service on our behalf, and only so they can do that: our hosting and database provider, our SMS provider for the sign-in code, our maps and routing provider, our app-update and notification provider, and — when card payment is enabled — our payment provider. Card details are handled entirely by the payment provider and never reach Baito.
A delivery driver can see your name, phone number and address only while your delivery is live. As soon as it is delivered or cancelled, that access closes.
We may disclose information where the law requires it, or to protect the rights and safety of our customers, our staff or the public.
DATA SECURITY
We implement administrative, technical and physical safeguards designed to protect your information. Data is encrypted in transit, and access rules are enforced by the database itself, so each account can only read its own records.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
RETENTION OF DATA
We retain personal information only as long as necessary to fulfil the purposes in this Policy, comply with legal obligations, resolve disputes and enforce agreements.
When you delete your account, your profile, addresses, points and rewards are removed permanently. Past orders are kept as the restaurant's sales records, but are separated from you: they are no longer linked to any account and delivery notes are scrubbed.
YOUR RIGHTS
Depending on where you live — including under Egypt's Personal Data Protection Law No. 151 of 2020 — you may have rights to access, correct, delete or restrict the processing of your personal information.
You can delete your account yourself at any time: open Profile and choose "Delete my account". Staff accounts have the same option behind the account icon.
For anything else, contact us at shinawymalek@gmail.com. We respond within 30 days.
COOKIES AND TRACKING TECHNOLOGIES
The app stores a small amount of information on your device so it works properly between visits: your sign-in session, your cart, and your language and appearance settings.
We do not use cookies for advertising, we do not use third-party analytics, and we do not track you across other apps or websites. You can clear this data by signing out or deleting the app.
CHILDREN'S PRIVACY
Our services are not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will remove it.
CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Revisions are posted here with an updated "Last updated" date. Continued use after changes signifies acceptance.
CONTACT US
For questions or requests regarding this Privacy Policy, contact us at shinawymalek@gmail.com, or write to Baito — Sushi & Asian Bites, Smouha, Alexandria, Egypt.