Privacy Policy

1. Panangidatag

Ti Foodfy ("Kompania", "kami", "mi", "kami") ket naikumit a mangsalaknib iti kinapribado ken seguridad ti personal nga impormasionmo. Ilawlawag daytoy a Pagannurotan ti Kinapribado no kasano nga urnongen, usaren, ibuksilan, idulin, ken salakniban ti datam no makilanglangenka iti plataporma ti Foodfy, agraman ti websitemi iti foodfy.ai, mobile application, API, merchant dashboard, serbisio ti AI, drone delivery network, ken amin a mainaig a serbisio ken tampok (no sangsangkamaysa, ti "Platform").

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Ti Foodfy ket agtartaray iti ballasiw ti 250+ a pagilian. Mabalin nga agduduma dagiti espesipiko a linteg iti panangsalaknib iti datos a mayaplikar kenka depende iti lokasionmo. No sadino a ti lokal a linteg ket mangipaay iti dakdakkel a proteksion ngem daytoy a Pagannurotan iti Kinapribado, ti lokal a linteg ti agturay. Dagiti suplementario a rehional a probision ket naidetalye iti Seksion 16.

2. Kontrolador ti Datos

Ti Foodfy ti data controller a responsable iti personal a datam a naproseso babaen ti Platform, malaksid no naibaga ti sabali. Para iti Foodfy for Work (Corporate Accounts), ti organisasion nga agpalista ket agtignay a kas ti data controller para iti personal a datos ti empleado, ken ti Foodfy ket agtignay a kas maysa a data processor iti biangda.

Para kadagiti saludsod maipapan iti proteksion ti datos, mabalinmo a kontaken ti Data Protection Officer-mi iti:

I-email: [email protected]
Postal Address: Foodfy, Data Protection Officer, magun-od no kiddaw babaen ti [email protected]

3. Impormasion a Maurnongtayo

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 Amin nga Agus-usar

Impormasion ti Kuenta: Buo a nagan, email address, numero ti telepono, petsa ti pannakayanak, retrato ti profile, ken encrypted password.
Datos ti Panagpabigbig: Dagiti kredensial ti panaglogin, dagiti dua-a-banag a sekreto ti panagipaneknek ken dagiti kodigo ti panagsubli, dagiti token ti API, ken dagiti mangilasin ti sesion.
Alikamen ken Teknikal a Datos: Kita ti alikamen, sistema ti panagpataray ken bersion, kita ken bersion ti browser, resolusion ti iskrin, dagiti naisangsangayan a pakabigbigan ti alikamen, impormasion ti mobile network, IP address, ken dagiti push notification token (Expo tokens).
Usage Data: Pages visited, features used, search queries, click patterns, navigation paths, session duration, timestamps, referring URLs, and interaction events.
Datos ti Lugar: Agarup a lokasion a nagtaud manipud iti IP a pagtaengan. Babaen ti nalawag a pammalubosmo, eksakto a lokasion ti GPS para iti pannakaitulod, asideg a pannakatakuat ti negosio, ken dagiti tampok a naibatay iti lokasion.
Datos ti Komunikasion: Messages sent through the Platform, customer support interactions, feedback, and survey responses.

3.2 Dagiti Kostumer

Order Data: Dagiti banag a naorder, pakasaritaan ti order, adres ti pannakaitulod (agraman ti nagan ti pasdek, kalsada, apartment, suelo, kodigo ti iseserrek, ken instruksion iti pannakaitulod), kaykayat ti order, espesial a kasapulan iti taraon, ken gubuayan ti order (web, app, kiosk, QR, WhatsApp, plano ti pannangan).
Payment Data: Payment method type, billing address, transaction amounts, and transaction history. Full payment card numbers are processed by our PCI DSS-compliant payment processor (Stripe) and are never stored on Foodfy servers.
Libro ti Address: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
Dagiti Kaykayat: Paborito a negosio, naidulin a banag, kaykayat ti taraon, pagsasao ken setting ti kuarta.
Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Dagiti Kakadua iti Negosio

Impormasion ti Negosyo: Legal a nagan ti negosio, nagan ti negosio, subdomain, pakabigbigan ti tiendaan publiko, kita ti negosio (restawran, groseri, botika, sabong, panagtagilako, suplayer, marka), pisikal nga adres, numero ti telepono, email, ken URL ti website.
Legal ken Pinansyal a Datos: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
Operational Data: Dagiti banag ti menu, katalogo ti produkto, panagpresyo, lebel ti imbentaryo, oras ti panagpataray, oras ti panagsagana, sona ti panagited, ken dagiti konfigurasion ti serbisio.
Datos ti Relasion ti Kostumer: Dagiti profile ti CRM a mairaman ti kasansan ti order ti kostumer, dagup a gastos, dagiti puntos ti RFM (Recency, Frequency, Monetary), tukad ti siklo ti biag, tier ti kinasungdo, kasasaad ti panagpili ti panaglako, kaykayat a pagsasao, tag, ken nota.
Datos ti Empleado: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
Third-Party Integrations: Google Place ID, Google rating, social media profiles (WhatsApp, Facebook), ken datos a naisukat kadagiti naikaykaysa a serbisio (accounting software, delivery platforms).
Datos ti Prangkisa: Ti asosasion ti marka ti prangkisa, dagiti kodigo ti outlet, dagiti adu a lokasion a panagisaad, ken dagiti analitiko iti lebel ti marka.

3.4 Dagiti Kakadua iti Panagtedted

Panangpaneknek iti Kinasiasino: Ti pakabigbigan nga inted ti gobierno, lisensia ti panagmaneho, rehistrasion ti lugan, ken pammaneknek ti seguro.
Real-Time Location: Na-update dagiti koordinado ti GPS bayat dagiti aktibo a pannakaitulod para iti panangsurot iti order, panangpasayaat iti ruta, ken panggep ti kinatalged.
Performance Data: Number of completed orders, rejected orders, delivery times, ratings received, and earnings history.
Datos ti Panagtedted ti Drone: Para kadagiti kasosyo ti panagited a makabael iti drone: kasasaad ti kabaelan ti drone, kita ti tumataray, estadistika ti panagited, pannakaituding ti DronePort, ken dagiti log ti operasion ti drone.

3.5 Dagiti Kakadua iti Teritorio

Dagiti Natarawidwid a Teritorio: Naituding a lebel ti teritorio (Rehion, Pagilian, Estado, Siudad, Lugar), dagiti mangilasin ti teritorio, ken heograpiko a sakup.
Dagiti Metriko ti Panagaramid: Dagiti rate ti onboarding ti negosio, napataud a kita, dagiti puntos ti pannakapnek ti kasosio, ken dagiti metriko ti panagdakkel ti teritorio.
Datos ti Aplikasion: Territory applicant profile information submitted during the application and onboarding process.

3.6 Dagiti Agus-usar iti Kuenta ti Korporasion (Foodfy para iti Trabaho) .

Organization Data: Legal a nagan ti kompania, kita ti legal nga entidad, numero ti lisensia ti panagtagilako, numero ti buis, nairehistro nga adres, impormasion a pakakontakan ti panagsingil, ken logo.
Datos ti Empleado: Nagan ti empleado, email, akem (admin/manager/empleado), departamento, sentro ti gastos, numero ti reperensia ti empleado, balanse ti pitaka, pakasaritaan ti transaksion ti pitaka, ken kasasaad ti panggedan.

3.7 Dagiti agipuonan

Profile ti Immuhusto: Kasasaad ti akreditasion, dagiti kaykayat a panagpuonan, dagiti dokumento ti panangpaneknek ti kinasiasino, ken pakasaritaan ti komunikasion.
Aktibidad ti Panagpuonan: Interes iti panagpuonan, pannakipaset iti deal, gatad ti panagpuonan, ken dagiti mainaig a surat.

3.8 Dagiti Agus-usar iti NutriLife

NutriLife collects sensitive health and biometric data. See Section 9 for detailed information.

3.9 Impormasion manipud kadagiti Third Party

Social media platforms when you sign in using social login (Google, Facebook, Apple).
Payment processors and financial institutions for transaction verification and fraud prevention.
Public business directories and government registries for business verification and directory building.
Open Food Facts and other nutritional databases for product nutritional data.
Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
Google Maps and Places API para iti lokasion, panagimapa, ken datos ti adres.
Analytics ken advertising partners para iti pananganalisar iti trapiko ti website ken panangrukod iti kampania.

4. Legal a Batayan ti Panagproseso

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
Pammalubos: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
Nainkalintegan nga Interes: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
Legal nga Obligasion: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
Vital Interest: Iti naisangsangayan a kasasaad, kasapulan ti panagproseso tapno masalakniban dagiti napateg nga interes ti maysa, kas kadagiti emerhensia a kasasaad a pakairamanan ti allergy iti taraon, insidente iti kinatalged, wenno emerhensia iti salun-at ti publiko.

5. No Kasano nga Usarenmi ti Impormasionmo

We use the personal data we collect for the following purposes:

5.1 Dagiti Pangruna nga Operasion ti Plataforma

Provide, maintain, operate, and improve the Platform and all its features and services.
Process and fulfill orders, payments, refunds, and deliveries.
Mangpartuat, mangpaneknek, ken mangituray kadagiti kuenta ti agar-aramat iti ballasiw dagiti amin a kita ti agar-aramat.
Pagbalinen ti aktual nga oras a panangsurot ti order, koordinasion ti panagited, ken panangipatulod ti drayber/drone.
Process Business Partner payouts and financial reconciliation.
Imanehar dagiti suskripsion, benepisio, ken panagsingil ti Foodfy Gold.
Operate Foodfy for Work corporate wallets, allocations, and expense tracking.

5.2 Komunikasion

Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Panagpersonal ken AI

Personalize your experience through AI-powered search results, business recommendations, and product suggestions.
Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
Power NutriLife features including AI meal photo analysis, nutritional calculation, and personalized dietary guidance.
Pagbalinen dagiti AI chatbot ken automated a suporta ti kostumer.

5.4 Kinatalged, Seguridad, ken Panagtungpal

Detektaren, sukimaten, ken lapdan ti panagkusit, panangabuso, di autorisado a pannakagun-od, ken dadduma pay nga ilegal wenno makadangran nga aktibidad.
Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
Tungtungpalen dagiti mayaplikar a legal nga obligasion, kasapulan iti buis, ken regulatory mandates.
Ipatungpal dagiti Kondision ti Serbisio ken dadduma pay a katulaganmi.

5.5 Analytics ken Panagpasayaat

Mangisayangkat ti naurnong ken saan a nainaganan nga analitiko tapno maawatan dagiti padron ti panagusar ken mapasayaat dagiti tampok ti Plataforma.
Perform A/B testing and user experience research.
Train and improve AI and machine learning models using anonymized and aggregated data.
Mangpataud kadagiti report ti business intelligence ken pannakaawat iti merkado.

6. No Kasano nga Ibinglaymi ti Impormasionmo

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Kadagiti Dadduma nga Agus-usar iti Plataforma

Dagiti Kakadua iti Negosio: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
Dagiti Kakadua iti Panagtedted: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
Dagiti Kostumer: Ti impormasion ti Kakadua ti Negosio (nagan, adres, rating, menu, oras ti panagpataray) ket maiparang iti publiko iti Plataforma tapno mapalubosan ti pannakatakuat ken panagorder.

6.2 Kadagiti Mangipaay ti Serbisio

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

Stripe: Payment processing, subscription billing, and fraud detection.
Cloudflare ti ulep: Panagted ti linaon, proteksion ti DDoS, ken firewall ti aplikasion ti web.
Antropiko ken OpenAI: AI ken makina a panagsursuro ti modelo a panangipapan para kadagiti tampok ti Plataforma AI. Ti datos a naipatulod kadagiti mangipapaay ti AI ket maproseso babaen dagiti terminoda iti panagproseso ti datos ti empresa ken saan a maus-usar a mangsanay kadagiti sapasap a modeloda.
Deepgram ti Deepgram: Speech-to-text processing for voice-enabled features.
Twilio: SMS delivery and voice communication services.
Google: Mapa, Lugar API, analytics, ken serbisio ti advertising.
Meta: Panagmanehar ti kampania ti advertising ken panangsurot iti panagbalbaliw.
Dagiti Mangipaay ti Imprastruktura ti Ulep: Server hosting, data storage, and computing services.

6.3 Adda kadagiti Plataforma ti Panagted ti Maikatlo a Partido

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 Kadagiti Panagkaykaysa ti Panagkuenta

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Para kadagiti Legal ken Regulatory a Panggep

When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
To enforce our Terms of Service and other agreements.
To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
To detect, prevent, or address fraud, security, or technical issues.

6.6 Dagiti Panag-transfer ti Negosyo

Mainaig iti panagtipon, pannakagun-od, pannakaorganisar manen, pannakabangkarote, panaglako kadagiti sanikua, wenno umasping a transaksion ti korporasion, mabalin a mayakar ti personal a datam iti manggun-od nga entidad. Mangipaaykami iti pakaammo sakbay nga agbalin a maipaulog ti personal a datam iti sabali a patakaran ti kinapribado.

6.7 Babaen ti Pammalubosmo

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Panagtalinaed ti Datos

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

Aktibo a Datos ti Kuenta: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
Order and Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
Payment Records: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
Datos ti Kakadua ti Negosio: Retained for the duration of the business relationship plus the legally required retention period for business records.
NutriLife Health Data: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
Datos ti Suskrision ti Foodfy Gold: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
Datos ti Empleado ti Kuenta ti Korporasion: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
Dagiti Log ti Komunikasion: Nataginayon dagiti pannakilangen ti suporta ti kostumer iti 3 a tawen para iti panangsigurado ti kalidad ken pannakarisut ti susik.
Datos ti Analitika: Ti naurnong ken saan a nainaganan a datos ti analitiko ket mabalin a mataginayon iti awan patinggana a kas daytoy ket saan a mangilasin kadagiti indibidual.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI ken Automated a Panagaramid ti Desision

Ti Foodfy ket agus-usar ti artipisial a kinasaririt ken automated a panagproseso iti ballasiw ti adu a tampok ti Plataforma. Nakumikomkami iti kinalawag maipapan no kasano a dagitoy a teknolohia ket mangproseso iti datam.

8.1 No Kasano nga Iproseso ti AI ti Data-m

Personalized Recommendations: Dagiti modelo ti AI ket analisarenda ti pakasaritaan ti ordermo, kababalin ti panag-browse, lokasion, ken dagiti kaykayatmo tapno irekomendar dagiti negosio, produkto, ken itukon. Daytoy a panagproseso ket naibatay iti nainkalintegan nga interes.
Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
Panagpakpakauna ti Panagkasapulan: Para kadagiti Business Partners, ti AI ket analisarenna ti historikal a datos ti urnos, dagiti panawen a padron, dagiti lokal a pasamak, ken dagiti datos ti paniempo tapno maipadto ti panagkasapulan. Daytoy ket agus-usar ti naurnong a datos ti negosio.
Menu Optimization: Isingasing ti AI dagiti panagbalbaliw ti presio ken panagbalbaliw ti menu a naibatay iti datos ti panaglako, panaganalisar ti kakompetensia, ken dagiti kaykayat ti kostumer. Kanayon nga aramiden ti Business Partner dagiti maudi a pangngeddeng.
Panangduktal iti Panagkusit: Dagiti automatiko a sistema ket analisarenda dagiti padron ti transaksion, impormasion ti alikamen, ken dagiti senial ti kababalin tapno mailasin dagiti mabalin a manangallilaw nga aktibidad. Mabalin a repasuen dagiti natauan nga analista dagiti naibandilia a transaksion.
NutriLife AI: Analisaren ti AI dagiti retrato ti taraon tapno mapattapatta ti sustansia a linaon ken mangpataud kadagiti personal a rekomendasion iti taraon a naibatay iti profile ti salun-atmo. Kitaen ti Seksion 9 para kadagiti detalye.
Automatiko nga Marketing: Ti AI ket mangpataud ti linaon ti panaglako, dagiti kampania ti email, ken dagiti itukon ti panangitandudo para kadagiti Kakadua ti Negosio a naibatay iti panagbingbingay ti kostumer ken datos ti kababalin.

8.2 Dagiti Karbengam Maipapan kadagiti Automatiko a Desision

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

You have the right to obtain human intervention and review of the decision.
You have the right to express your point of view and contest the decision.
You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 Dagiti Panangsalaknib ti Datos ti AI

Ti datos a naipatulod kadagiti maikatlo a partido a mangipapaay ti AI (Anthropic, OpenAI) ket maproseso babaen dagiti katulagan ti panagproseso ti datos ti empresa. Saan a mausar ti datam a mangsanay kadagiti sapasap a panggep nga AI a modeloda.
Ti panagsanay ti modelo ti AI babaen ti Foodfy ket agus-usar kadagiti saan a nainaganan ken naurnong a datos a saan a mangilasin kadagiti indibidual nga agar-aramat.
Dagiti rimmuar ti AI ket probabilistiko ken naiparang a kas dagiti singasing wenno pattapatta, saan a dagiti depinitibo a determinasion.

9. Datos ti Salun-at ken Biometriko (NutriLife) .

NutriLife processes sensitive health-related and biometric data that requires special protection under applicable privacy laws. This section provides detailed information about how we handle this data.

9.1 Dagiti Kategoria ti Naurnong a Datos ti Salun-at

With your explicit consent, NutriLife may collect and process the following categories of health data:

Physical Measurements: Timbang ti bagi, katayag, porsiento ti taba ti bagi, sirkumperensia ti siket, sirkumperensia ti hip, ken body mass index (BMI).
Vital Signs: Kaadu ti glucose iti dara, panagbasa iti presion ti dara, ken panagpitik ti puso.
Dagiti Pakakita iti Estilo ti Panagbiag: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
Impormasion maipapan iti Dieta: Dagiti entry iti diary ti taraon, retrato ti taraon, calorie ken macronutrient intake (protina, carbohydrates, taba, fiber, asukar, sodium), micronutrient intake (bitamina A agingga iti B12, calcium, iron, potassium, ken dadduma pay), kita ti taraon, ken allergy iti taraon.
Profile ti Salun-at: Petsa ti pannakayanak, sekso, lebel ti aktibidad, kalat iti salun-at (panaglukmeg, panagdakkel, pannakamantener), target a timbang, medikal a kasasaad, panagusar iti suplemento, panagsikog wenno kasasaad ti panagpasuso.
Datos ti Panag-analisar ti AI: Dagiti retrato ti taraon a naanalisar babaen ti AI, dagiti puntos ti panagtalek, ken dagiti pattapatta ti sustansia a pinataud ti AI.

9.2 Legal a Batayan ken Pammalubos

Ti datos ti salun-at ken biometriko ket naidasig a kas ti datos ti espesial a kategoria iti sidong ti GDPR (Artikulo 9) ken dagiti katupag a linteg iti sangalubongan. Iprosesomi daytoy a datos nga eksklusibo a maibatay iti nalawag a pammalubosmo, nga ipaaymo bayat ti panag-onboard ti NutriLife. Mabalinmo nga ibaw-ing ti pammalubosmo iti aniaman nga oras babaen ti panangibaldado iti NutriLife kadagiti setting ti account-mo, nga agresulta iti pannakaikkat ti datos ti salun-atmo iti uneg ti 30 nga aldaw.

9.3 Limitasion ti Panggep

Your NutriLife health data is used strictly for the following purposes:

Panangkuenta iti basal metabolic rate (BMR), dagup nga inaldaw a gastos iti enerhia (TDEE), ken personalized calorie ken macronutrient targets.
Tracking your food diary entries and nutritional intake over time.
Providing AI-powered dietary suggestions and meal plan recommendations.
Panangiparang kadagiti uso iti salun-at ken panagrang-ay nga agturong kadagiti naibaga a kalatmo.

9.4 Nainget a Panangsalaknib iti Datos

NutriLife health data is encrypted at rest and in transit using AES-256 and TLS 1.3 encryption.
Ti datos ti salun-at ket naidulin a naisina manipud iti sapasap a datos ti Plataforma nga addaan kadagiti kanayonan a kontrol ti panagserrek.
NutriLife health data is NEVER shared with insurance companies, employers, advertisers, or any third party for purposes unrelated to providing the NutriLife service.
Ti datos ti salun-at ket SAAN a PULOS a mausar para iti advertising targeting wenno mailako kadagiti third party.
Ti pannakagun-od iti datos ti salun-at iti uneg ti Foodfy ket nainget kadagiti nasken a personnel ken sistema iti nainget a kasapulan a maammuan a batayan.

10. Datos ti Suskrision ti Foodfy Gold

When you subscribe to Foodfy Gold, we process additional data related to your membership:

Subscription Data: Plan type, subscription status (active, trial, paused, cancelled, expired), start and end dates, trial period dates, and renewal dates.
Payment Data: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
Panangusar iti Benepisio: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Datos ti Kuenta ti Korporasion ken Empleado

Para iti Foodfy for Work (Corporate Accounts), dagiti pagrebbengan iti panagproseso ti datos ket nabingbingay:

11.1 Relasion ti Kontrolador ti Datos

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Naurnong ti Datos

Nagan ti empleado, email address, ken akem iti uneg ti Corporate Account (admin, manager, empleado).
Departamento, cost center, ken numero ti reperensia ti empleado kas inted ti employer.
Wallet balance, credit history, spending history, and refund records.
Order history made using the corporate wallet, including items ordered and amounts.

11.3 Dagiti Pagrebbengan ti Amo

Dagiti employer ket responsable iti: (a) kaadda ti nainkalintegan a batayan a mangibinglay iti datos dagiti empleado iti Foodfy; (b) panangipakaammo kadagiti empleado maipapan iti panagproseso ti datos babaen ti Plataforma; (c) panangsungbat kadagiti kiddaw ti karbengan ti datos ti empleado a mainaig iti datos a kontrolado ti employer; ken (d) panangsigurado ti panagtungpal kadagiti maipakat a linteg ti panggedan ken panangsalaknib iti datos.

12. Datos ti Operasion ti Panagted ti Drone

When drone delivery services are used, the following additional data is processed:

Route and GPS Data: Dagiti dalan ti panagtayab ti drone, dagiti puntos ti relay babaen dagiti lokasion ti DronePort, dagiti koordinado ti GPS ti panagited, ken dagiti nakarkulo nga oras ti isasangpet.
Datos ti Kakadua ti Panagtedted: Para kadagiti kasosyo ti panagited a makabael iti drone: aktual nga oras a lokasion bayat dagiti aktibo a panagited, estadistika ti panagited, ken dagiti log ti operasion.
Datos ti DronePort: Dagiti metriko ti panagusar ti DronePort, dagiti eskediul ti panagmantener, ken ti kasasaad ti panagpataray.
Datos ti Panagted ti Kostumer: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

Ti datos ti panagited ti drone ket maproseso iti legal a batayan ti panagaramid ti kontrata ken, no mayaplikar, nainkalintegan nga interes iti panangtaginayon kadagiti natalged ken nasigo nga operasion ti panagited. Ti aktual nga oras a datos ti lokasion dagiti Delivery Partners ket maproseso laeng bayat dagiti aktibo a panagited.

13. Seguridad ti Datos

Ipatungpal ti Foodfy dagiti komprehensibo, mangidadaulo iti industria a teknikal ken organisasional a wagas tapno masalakniban ti personal a datam:

13.1 Dagiti Teknikal a Salaknib

Panag-enkripsio ti amin a datos nga aglabas babaen ti panagusar ti TLS 1.2+ (HTTPS a naipatungpal iti ballasiw dagiti amin a puntos ti panagpatingga ti Plataforma).
Panag-enkripsio ti sensitibo a datos iti panaginana babaen ti panagusar ti AES-256 nga enkripsion.
Web application firewall (WAF) and DDoS protection powered by Cloudflare.
Content delivery network (CDN) nga addaan iti edge caching para iti panagaramid ken seguridad.
PCI DSS-compliant payment processing through Stripe, with no storage of full card numbers on Foodfy servers.
Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
Ti panagipaneknek ti API babaen ti panagusar kadagiti natalged a token nga addaan iti rate limiting ken panagduktal ti panagabuso.
Regular automated vulnerability scanning and penetration testing.

13.2 Dagiti Salaknib ti Organisasion

Role-based access controls ensuring employees can only access data necessary for their function.
Multi-tenant data architecture with country-specific database sharding, ensuring data from different jurisdictions is logically separated.
Dagiti katulagan iti panagproseso ti datos kadagiti amin a third-party service provider.
Regular security awareness training for all personnel with access to personal data.
Dagiti pamay-an ti panangsungbat iti insidente ken maysa a dedikado a security team.
Dagiti aramid ti panangkissay iti datos: urnongenmi laeng ti datos a kasapulan para iti naikeddeng a panggep.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Dagiti Internasional a Panag-transfer ti Datos

Ti Foodfy ket agtartaray iti ballasiw ti 250+ a pagilian babaen ti sangalubongan nga imprastruktura ken Territory Partner network-na. Mabalin a mayakar ken maproseso ti personal a datam kadagiti pagilian malaksid iti pagilian a pagnanaedam. No iyakarmi ti personal a datos iti internasional, ipatungpalmi dagiti maitutop a salaknib tapno masigurado nga agtalinaed a nasalakniban ti datam:

Standard Contractual Clauses (SCCs): Para kadagiti panagyakar manipud iti EEA/UK kadagiti pagilian nga awan ti desision ti umdas, agus-usarkami kadagiti naaprobaran ti European Commission-a Standard Contractual Clauses.
Dagiti Tulag iti Panagproseso ti Datos: Amin a third-party service provider a mangproseso iti personal a datos iti biangmi ket naigamer kadagiti komprehensibo a katulagan iti panagproseso iti datos a pakairamanan dagiti obligasion iti panangsalaknib iti datos, kasapulan iti seguridad, ken dagiti salaknib iti panagyakar iti ballasiw ti beddeng.
Panagbingay ti Datos nga Espesipiko iti Pagilian: Our multi-tenant architecture uses country-specific database shards, which means operational data is stored and processed within or near the geographic region of the relevant Territory, minimizing cross-border transfers for day-to-day operations.
Dagiti Desision iti Umdasen: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. Dagiti Karbengam iti Kinapribado

Depende iti lokasionmo, addaanka iti nadumaduma a kalintegan maipapan iti personal a datam. Nakumikom ti Foodfy a mangpadayaw kadagitoy a karbengan para kadagiti amin nga agus-usar iti sangalubongan:

15.1 Sapasap a Karbengan

Regardless of your location, all Foodfy users may:

Access: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
Koreksion: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
Panangikkat: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
Restriction: Request that we restrict the processing of your personal data in certain circumstances.
Objection: Object to the processing of your personal data for direct marketing purposes. We will comply with all opt-out requests promptly.
Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
Panangikkat iti Kuenta: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 Kasano nga Aramiden dagiti Karbengam

You may exercise your rights by:

Ti pananggun-od kadagiti setting ti account-mo para iti self-service data management, panagbalbaliw ti kaykayat, ken pannakaikkat ti account.
Panag-email iti Data Protection Officer-mi iti [email protected] nga addaan iti kiddawmo.
Panag-email iti [email protected] para kadagiti sapasap a panagsaludsod iti kinapribado.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Dagiti Rehional a Karbengan iti Kinapribado

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Lugar ti Ekonomia ti Europa ken Nagkaykaysa a Pagarian (GDPR / UK GDPR) .

No addaka iti EEA wenno UK, addaanka kadagiti sumaganad a kanayonan a karbengan iti sidong ti Sapasap a Regulasion ti Pannakasalaknib ti Datos:

Pannakaiyakar ti Datos: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Automatiko a Panagaramid iti Desision: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
Opisial ti Pannakasalaknib ti Datos: Our DPO can be reached at [email protected] for any GDPR-related inquiries.

16.2 California, Estados Unidos (CCPA / CPRA) .

No maysaka nga umili ti California, addaanka kadagiti sumaganad a karbengan iti sidong ti California Consumer Privacy Act (kas nabaliwan babaen ti California Privacy Rights Act):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: Saan nga ilako ti Foodfy ti personal nga impormasionmo. Saanmi nga ibinglay ti personal nga impormasion para iti cross-context behavioral advertising no awan ti pammalubosmo.
Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Iti napalabas a 12 a bulan, saanmi a nailako ti personal nga impormasion kas inkeddeng ti CCPA/CPRA.

16.3 Brasil (LGPD) .

No addaka idiay Brazil, addaanka kadagiti karbengan iti sidong ti Lei Geral de Protecao de Dados (LGPD), agraman ti karbengam iti: panangpasingked iti pannakaproseso, pannakagun-od, pannakakorehir, pannakaipakaammo ti nagan, pannakayakar, pannakaikkat ti datos a naproseso babaen ti pammalubos, impormasion maipapan iti panagbibinninglay, ken kalintegan nga agpetision iti Autoridade Nacional de Protecao de Dados (ANPD).

16.4 Asia-Pasipiko (PDPA ken dagiti Katupag a Linteg) .

No addaka kadagiti hurisdiksion nga addaan kadagiti Personal a Data Protection Acts wenno katupagna a lehislasion (agraman ti Singapore, Thailand, ken dadduma pay a pagilian iti Asia-Pacific), addaanka kadagiti kalintegan a manggun-od, mangkorehir, mangikkat, manglapped, ken mangawit iti personal a datam kas impaay ti mayaplikar a lokal a linteg. Iprosesomi ti datam a maitunos kadagiti maipakat a kasapulan ti PDPA, agraman ti pananggun-od iti pammalubos no kasapulan ken panangipaay iti nalawag a pakaammo kadagiti aktibidad ti panagproseso iti datos.

16.5 Makintengnga a Daya ken Amianan nga Africa

Para kadagiti agar-aramat iti UAE, Saudi Arabia, ken dadduma pay a hurisdiksion ti MENA, agtungpalkami kadagiti maipakat a pagannurotan iti panangsalaknib iti datos agraman ti UAE Federal Decree-Law on Personal Data Protection, Saudi Arabia Personal Data Protection Law, ken dagiti katupag a rehional a balbalay. Daytoy ket mairaman dagiti kasapulan ti lokalisasion ti datos no sadino a mayaplikar.

16.6 Dagiti Dadduma a Hurisdiksion

Nakumikom ti Foodfy a mangtungpal kadagiti linteg ti panangsalaknib iti datos iti amin a hurisdiksion a pagtrabahuanmi. No ti hurisdiksionmo ket addaan kadagiti espesipiko a kasapulan iti panangsalaknib iti datos a saan a nailista iti ngato, pangngaasim ta kontaken ti [email protected] para iti impormasion maipapan iti no kasano a salaknibanmi dagiti karbengam iti sidong ti lokal a lintegmo.

17. Pakaammo iti Panaglabsing iti Datos

No adda pannakalabsing ti personal a data a mangpataud iti peggad kadagiti karbengam ken wayawayam, ti Foodfy ket:

Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and equivalent provisions in other jurisdictions.
Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34 and equivalent provisions.
Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
Idokumento amin a panaglabsing iti personal a datos, agraman dagiti kinapudno, epekto, ken dagiti tignay a pangtarimaan a naaramid, maitunos iti internal breach register-mi.

No patiem a nakompromiso ti datam, pangngaasim a dagus a kontaken ti [email protected].

18. Ubbing ken Menor de edad

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

No maammuanmi a di inggagara a nakaurnongkami iti personal a datos manipud iti ubing iti baba ti maipakat a pagrukodan ti edad nga awan ti pammalubos dagiti nagannak wenno guardian, mangaramidkami kadagiti dagus nga addang tapno maikkat dayta nga impormasion manipud kadagiti sistemami. No patiem a nakaurnongkami iti impormasion manipud iti maysa nga ubing, pangngaasim ta kontakenkami a dagus iti [email protected].

19. Dagiti Silpo ken Serbisio ti Maikatlo a Partido

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. Panagbalbaliw iti Daytoy a Pagannurotan iti Kinapribado

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

We will update the "Last updated" date at the top of this page.
We will provide prominent notice on the Platform.
Para kadagiti material a panagbalbaliw a dakkel ti epektona no kasano ti panangprosesomi iti datam, ipakaammomi kenka babaen ti email iti di kumurang a 30 nga aldaw sakbay nga epektibo dagiti panagbalbaliw.
Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Kontaken Kadakami

No adda aniaman a saludsod, pakaseknan, wenno kiddawmo maipapan iti daytoy a Pagannurotan iti Kinapribado, ti personal a datam, wenno dagiti aramidmi a mangsalaknib iti data, pangngaasim ta kontakennaka babaen kadagiti sumaganad a kanal:

Opisial ti Pannakasalaknib ti Datos: [email protected]
Privacy Inquiries: [email protected]
Security Issues: [email protected]
Sapasap a Suporta: [email protected]
Website ti: foodfy.ai

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.