PRIVACY POLICY

Jamludi Eatery is a food-truck business based in Observatory, Cape Town, South Africa. We operate this progressive web application ("App") to let customers browse our menu, order for delivery, and track their kota in real time.

Contact: jamludieatery@gmail.com · Lower Main Road, Observatory, Cape Town, 7925

We collect only the minimum data necessary to operate the App:

• Your name - so we can identify your order and deliver it to you (stored in Google Firestore)
• Phone number - so we can contact you about your order and its delivery (stored in Google Firestore)
• Delivery address and its distance from us - so we can deliver your order and calculate the delivery fee (stored in Google Firestore, on your order)
• Saved delivery addresses (optional, registered accounts only) - so you can reuse them at checkout; you can edit or remove them at any time from your profile (stored in Google Firestore)
• Order items & total - to prepare and fulfil your order (stored in Google Firestore)
• Notification token (optional) - only if you allow notifications, so we can send you order-status updates (stored in Google Firestore)
• Review (name, rating, comment) - to display customer feedback publicly (stored in Google Firestore)
• Email & password hash - to authenticate your account (stored in Firebase Authentication)
• Active order ID - so you can track your order after a page refresh (stored on your device only)
• Cart contents - to persist your cart between page views (stored on your device only)
• Theme preference - to remember your dark/light mode choice (stored on your device only)

While your order is being delivered, your driver's live location is shared with you, the customer who placed it, so you can follow your delivery. It is used only for that delivery and is deleted as soon as the delivery ends.

We do not collect or store your payment card details. Payments are processed entirely by our payment partner Yoco on their own secure hosted checkout page - the App never receives your card number. Once Yoco confirms a payment, we store only a payment status flag, Yoco's payment reference ID, and the payment timestamp against your order (stored in Google Firestore) - never any card or banking details.

• To process your food order and deliver it to your address.
• To calculate your delivery fee.
• To display your order status on the tracking screen.
• To show your review to other customers (review submissions are public).
• To allow staff to manage orders via the admin dashboard.

We do not use your data for advertising, profiling, or marketing. We do not sell your data to third parties.

This App uses the following third-party services:

• Google Firebase / Firestore - database, authentication, and order-status push notifications (firebase.google.com/support/privacy)
• Google Fonts - font files loaded from Google servers (policies.google.com/privacy)
• Photon (by komoot) - address search and geocoding for delivery (komoot.com/privacy)
• OpenStreetMap - map tile imagery for the delivery map (osmfoundation.org/wiki/Privacy_Policy)
• Yoco - processes all payments on their own secure checkout page; the App never receives your card details (yoco.com/za/legal/privacy-policy)
• Cloudinary - hosts and serves our menu item images (cloudinary.com/privacy)

Order records, including the delivery address on each order, are retained for up to 12 months for operational and accounting purposes, then deleted. Saved delivery addresses stay on your account until you remove them or delete your account. Reviews remain on the platform unless you request removal. You may contact us at any time to request deletion of your data.

Under South Africa's Protection of Personal Information Act (POPIA) you have the right to:

• Know what personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to the processing of your personal information.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at jamludieatery@gmail.com

We do not use tracking cookies. The App uses browser localStorage and sessionStorage solely to store your cart, order-tracking ID, and display preferences on your own device. This data never leaves your device unless you place an order.

All data is transmitted over HTTPS. Firebase Security Rules restrict who can read and write each collection. Passwords are hashed by Firebase Authentication and never stored in plain text. We regularly review our security practices.

Our service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this policy from time to time. The "last updated" date at the top of this page will automatically reflect any changes made by our admin. Continued use of the App after changes constitutes acceptance of the updated policy.