What we collect, and why
Every category of data we touch is listed below, alongside the purpose it serves and the basis on which we process it. If it isn’t in this table, we don’t collect it.
| Data | Purpose | Basis |
|---|---|---|
| Location (foreground, while using) | Show your position, find stops along your route | Your explicit permission; degradable — the app works with location off |
| Trip, saved places, wallet items | The product itself; stored on your device first | Contract |
| Preferences (cuisine, categories, accessibility, vehicle) | Rank recommendations for you | Your choice; deletable |
| Order history | Receipts, refunds, commission accounting | Contract, legal record-keeping |
| Voice input | Only while you press/invoke the companion; processed for the request | Your explicit permission |
What we never do
- We never sell precise location data.
- Merchants never see your identity or your route history. Offer matching runs on our side; merchants receive only aggregate, anonymized performance data.
- No always-on background tracking is required for any feature. Background location, if ever offered, is a separate opt-in with its own justification.
- Voice audio is never recorded covertly and is not retained after processing.
- No advertising identifiers; no cross-app tracking.
Your controls
Personalization, sponsored suggestions, interruption frequency, location, and microphone use are all controllable in-app (Garage → Privacy). You can export all of your data or delete your account and its data; local stores erase with app deletion.
Retention
Order records are retained as required for tax and dispute obligations; everything else is deleted on account deletion. Diagnostic logs exclude precise location history, tokens, and payment credentials by design.