Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated when you use the app:

• Account information: name, email address, phone number, and password (stored in hashed form).
• Location and addresses: GPS coordinates, saved delivery or pickup addresses, and area preferences to show nearby surprise bags and complete orders.
• Order and transaction data: order history, pickup windows, payment status, refunds, reviews, favorites, and referral activity.
• Payment information: payment is processed by our payment partner Paymob. We do not store full card numbers on our servers. Saved card tokens, when you choose to save a card, are handled through Paymob’s secure systems.
• Device and push notifications: push notification tokens (via Expo) so we can send order updates and relevant alerts.
• Vendor information: if you use GoodBites as a partner store, we also collect business contact details, payout information, menu and bag listings, and transaction history.
• Support communications: messages and attachments you send to our support team.
• Photos and media: images you upload for surprise bags, store profiles, or support tickets are stored on Amazon Web Services (AWS).

2. How We Use Your Information

• Create and manage your account.
• Process orders, payments, refunds, and settlements.
• Show nearby stores and personalize your experience.
• Send transactional notifications about orders and account activity.
• Provide customer and vendor support.
• Improve app reliability, security, and features.
• Comply with legal obligations and enforce our terms.

3. How We Share Information

We do not sell your personal information. We share data only as needed to operate the service:

• Partner stores: order details required to prepare and fulfill your pickup or delivery.
• Service providers: payment processing (Paymob), cloud hosting and file storage (AWS), push notification delivery (Expo), and mapping/location services (Google) where applicable.
• Legal requirements: when required by law, regulation, legal process, or to protect the rights and safety of GoodBites, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

4. Location Data

With your permission, GoodBites accesses your device location to show nearby surprise bags and, if enabled, to send location-based notifications. You can change location permissions at any time in your device settings. Some features may not work without location access.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations. When no longer required, we delete or anonymize data where feasible.

6. Security

We use administrative, technical, and organizational measures to protect your information, including encryption in transit, access controls, and secure payment processing through PCI-compliant providers. No method of transmission or storage is completely secure.

7. Your Rights and Choices

• Access, update, or correct account information in the app.
• Manage notification and location permissions on your device.
• Delete your account in the app (Profile → Account → Delete Account) or follow the steps at our account deletion page.
• Request a copy of your data by emailing support@goodbites.app.
• Vendors may request deletion of vendor-related data by emailing privacy@goodbites.com.

8. Children’s Privacy

GoodBites is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

9. International Transfers

Your information may be processed in countries where we or our service providers operate. We take steps to ensure appropriate safeguards when data is transferred across borders.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you through the app or by email.