Privacy policy

Your name, mobile number and email address. The mobile number is confirmed with a code because it is the number your food comes to and the one a rider calls.

Your password, stored only as a cryptographic hash. We never hold the password itself and cannot tell you what it is.

The addresses you save, including the map pin you place. The pin is what the delivery fee is calculated from.

Your orders: the dishes, the notes you write for the kitchen, the totals, and how you paid.

Messages you send to the restaurant or to a rider, and any photograph you attach to a report about an order.

A push token for each device you sign in on, so your phone can be told when the order moves.

The app asks for your location only to place a pin on your address. You can type the address instead.

While a rider is carrying your order, their live position is shown to you and to the restaurant. It stops when the delivery ends, and it is never shared with other customers.

Orders are paid in cash on delivery or from a store-credit balance we have given you. We do not collect or store card numbers.

A photograph taken as proof of delivery is kept for seven days and then deleted.

Orders and their tax invoices are kept for six years. Saudi tax law requires this and it is not ours to waive.

Everything else is kept while your account is open, and for 60 days after you ask us to delete it — see below.

Your data is held on secure servers in the European Union and on Cloudflare's storage network. Your tax invoices are also filed with the Zakat, Tax and Customs Authority inside the Kingdom, as the law requires.

Wherever it is held, it travels encrypted, access is limited to us, and it is used only to run this service.

You can delete your account from the app, under Profile then Privacy. If you no longer have the app, use the deletion page at /legal/delete-account.

The account stops working straight away: you are signed out everywhere, your phone stops receiving anything from us, and nothing of yours is used again.

For 60 days you can still change your mind and have it back. After 60 days your name, email, number, saved addresses and favourites are destroyed and cannot be recovered.

For six months after that we keep a scrambled one-way fingerprint of your email and phone number — not the address or the number themselves — so that somebody already known for fraud or abuse cannot simply open a new account. It identifies nobody and is then deleted.

Your past orders and their tax invoices stay, without your name on them, for the six years described above.

The rider carrying your order sees your first name, your address and your phone number, for as long as that delivery lasts.

Google, for push notifications and for confirming your mobile number.

Google Maps, when a map is drawn.

The Zakat, Tax and Customs Authority, which receives every tax invoice as the law requires.

Our email provider, for order confirmations and invoices.

We do not sell your data, and we do not share it for anybody else's advertising.

Order updates are sent whenever you have an order — that is the app doing its job, and it cannot be switched off.

Offers and news are only sent if you ask for them, and you can stop them at any time under Profile then Notifications.

Under the Saudi Personal Data Protection Law you may ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to us and we will answer.

The app is not intended for children under 13, and we do not knowingly collect their data.