HotBite Delivery Limited ("HotBite", "we", "us", or "our") operates the HotBite mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using HotBite, you agree to the collection and use of information in accordance with this policy.
We collect the following categories of personal information: • Account data: full name, email address, phone number, profile photo, and authentication credentials (handled securely by Supabase Auth). • Delivery and order data: delivery addresses, order history, restaurant, grocery, and cart items, payment status, and refund or cancellation history. • Location data: your delivery address, real-time driver location while online or assigned to a delivery or ride, pickup and drop-off locations, and ride route data where applicable. • Device and app data: device type and model, app version, crash logs, IP address, push notification token, and basic analytics. • Payment data: payment processor customer ID, transaction IDs, last 4 digits and card brand as returned by Stripe. We do not store full card numbers, CVV codes, or raw card data. • Communication data: in-app chat messages exchanged with drivers or support, support tickets, call metadata if using in-app voice calls (Agora), and any user reports or flagged messages.
We use the information we collect to: • Create and manage your account. • Process orders, deliveries, rides, and payments. • Match customers with drivers and service providers. • Send order status updates, driver arrival notifications, and promotional messages (if opted in). • Detect and prevent fraud, abuse, and policy violations. • Improve the app, personalize recommendations, and conduct analytics. • Comply with legal obligations and enforce our Terms & Conditions. • Respond to support requests and resolve disputes.
We may share your information with: • Drivers: your delivery address, first name, and contact info needed to complete your order or ride. • Restaurants and grocery stores: your name and order details required to prepare your order. • Service providers: contact and booking information needed to complete your car service or laundry booking. • Payment processors: Stripe receives payment-related data to process transactions. Stripe's own privacy policy applies to data they handle. • Service sub-processors who operate our infrastructure (see "Where Your Data Is Hosted" below). • Analytics and crash reporting services: anonymized or aggregated usage data. • Law enforcement: when required by applicable law, court order, or governmental regulation. We do not sell your personal information to third parties.
HotBite does not operate its own data centres. We rely on the following trusted sub-processors, and your information may be stored or processed on their infrastructure: • Supabase (database, authentication, file storage, and backend functions) — hosted on Amazon Web Services in the United States (US West / Oregon region). This is where your account, order, and profile data is stored. • Stripe, Inc. (payment processing) — processes card and transaction data. • Google Firebase Cloud Messaging (push notifications) — handles delivery of notifications to your device. • Agora (in-app voice calls) — carries voice-call audio and related metadata when you place or receive an in-app call. Because these providers may process data in the United States and other countries, your information may be transferred to and processed in jurisdictions outside your own. We take reasonable steps to ensure such transfers are protected by appropriate safeguards. Each sub-processor is bound by its own privacy and security commitments.
Customer location is used to determine your delivery address and to track order progress. Driver location is collected in real time while the driver is online or actively assigned to a delivery or ride. This location data is used to display arrival estimates, match nearby drivers, and optimize routing. Background location may be collected for drivers actively on a delivery or ride if permitted by your device settings. You may disable location access in your device settings; however, this will limit core functionality.
We retain account data for as long as your account is active. If you delete your account, we will anonymize or remove your personal profile data within 30 days. Transaction and order records may be retained for up to 7 years as required by applicable tax and financial regulations. Chat messages are retained for 90 days to support dispute resolution. You may request immediate deletion of your data by submitting a request through the app or at our data deletion URL.
Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Correct inaccurate personal data. • Request deletion of your personal data. • Withdraw consent for data processing where consent is the basis. • Data portability. • Lodge a complaint with a data protection authority. To exercise any of these rights, contact us at support@hotbite.app or use the in-app Data Deletion Request feature.
We use industry-standard security measures including TLS encryption in transit, secure authentication via Supabase Auth, role-based access controls, and regular security reviews. While we take reasonable precautions, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@hotbite.app and we will promptly delete it.
The app may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, contact us at: HotBite Delivery Limited Email: support@hotbite.app App: Settings → Contact Support