Swat Eats

1. Who we are

Swat Eats is a food ordering and delivery platform operating in Swat, Pakistan. We connect customers with local restaurants and delivery riders. The data controller responsible for your information is:

2. Information we collect

a. Information you provide

• Phone number — used to create and sign in to your account via a one-time SMS code (OTP). Your number is shared with the restaurant and rider handling an active order so they can reach you about it; you can turn this off in your profile settings, and they will contact you through in-app chat instead.
• Profile details — your name, and optionally an email address and profile photo.
• Delivery addresses — addresses you save, including a map location (GPS coordinates) and any delivery instructions.
• Order information — items you order, order notes, tips, and order history.
• Communications — messages you send to your delivery rider through in-app chat, and any support requests or complaints you submit.

b. Information collected automatically

• Location data — with your permission, your device's location to set your delivery pin, show nearby restaurants, calculate delivery routes, and let you track your rider during an active delivery.
• Device & technical data — device model, operating system, app version, and language settings.
• Login & security metadata — IP address, approximate location, and device information recorded at sign-in to help detect and prevent fraud and unauthorized access.
• Push notification token — a token that lets us send you order updates and notifications.

c. Payments

Orders are primarily paid by Cash on Delivery. Where digital payment options are offered, payments are handled by the relevant payment provider — we do not collect or store your full card or bank account numbers on our systems.

3. Restaurant partner accounts

This section applies if you register a restaurant and use the Swat Eats Restaurant app. It is in addition to the sections above, which describe how we handle customer information.

a. Information you provide as a partner

• Account credentials — your email address and a password. Restaurant accounts sign in with email and password rather than an SMS code.
• Contact details — the owner or manager's name and phone number.
• Business details — your restaurant's name, description, cuisines, address and map location (GPS coordinates), opening hours, and delivery settings such as delivery radius, delivery fee and minimum order.
• Images — your restaurant logo, cover photo and menu item photographs that you upload.
• Menu information — item names, descriptions, prices, discounts, categories, sizes, flavours and add-ons.
• Payout details — your chosen payout method (bank transfer, JazzCash, Easypaisa or cash), the account name or number you give us for settlement, and your preferred payout period.
• Promotions — any offers or promo codes you create.
• Communications — replies you write to customer reviews, and any support requests you submit.

b. Information collected automatically

• Device notification token — so we can alert you when a new order arrives.
• Location — with your permission, your device's location, used only to place your restaurant's pin on the map. The Restaurant app does not track your location in the background.
• Order and performance data — orders placed with your restaurant, the times you accept and prepare them, your ratings and reviews, and the earnings and commission figures we calculate from them.

c. Customer information you receive

To fulfil an order, the Restaurant app shows you the customer's first name, delivery address, order contents and any delivery instructions, and — unless that customer has chosen to hide it — their phone number. You may use this information only to prepare and hand over that order. You must not contact customers for marketing, keep their details after the order is complete, or share them with anyone else.

d. How we use partner information

• To create and manage your restaurant account, and to review and approve your registration.
• To show your restaurant, menu and offers to customers in the Swat Eats app.
• To route orders to you and to riders, and to keep you and the customer updated on progress.
• To calculate your earnings, our commission and your settlements, and to pay you using the payout details you provide.
• To respond to your support requests and to investigate disputes, refunds or complaints.

e. What we share, and what we do not

Your restaurant's public details — name, photos, menu, prices, opening hours, ratings and reviews — are shown to customers, which is the purpose of listing with us. Your payout method and account details are never shown to customers or riders; they are used only by Swat Eats administrators to settle what we owe you. We do not sell partner information.

f. Retention and deletion

We keep your partner account and business details for as long as your restaurant is listed with us. If you close your account we remove your listing from the customer app, and we delete your payout details once any outstanding settlements have been paid. We keep order and settlement records for as long as we are required to for accounting and tax purposes, even after an account is closed.

To close a restaurant account, contact us at info@swateats.com from the email address on the account, or use the account deletion page linked below.

4. How we use your information

• Create and manage your account and verify your identity by SMS.
• Process, deliver, and track your orders.
• Share necessary details with the restaurant and the assigned rider so your order can be prepared and delivered.
• Send order status updates, receipts, and important service notifications.
• Provide customer support and resolve disputes.
• Operate rewards, referrals, and promotions where applicable.
• Protect the Service against fraud, abuse, and security threats.
• Improve and maintain the Service.
• Comply with applicable laws.

5. How we share your information

We share only what is needed to deliver the Service:

* You can choose to hide your phone number from the rider in the app. We do not sell your personal information, and we do not share it for third-party advertising.

6. Service providers we rely on

We use trusted third-party providers to operate the Service. Your data may be processed by:

• Google Firebase (Authentication, database, cloud functions, push messaging) — account, order, and notification infrastructure.
• Google Maps Platform (Maps, Places, Directions, Geocoding) — maps, address lookup, and delivery routing.
• Expo — app delivery and push notifications.
• Cloudinary — hosting of images shown in the app.
• SMS delivery providers (via Firebase) — to send your one-time verification codes.

These providers process data on our behalf and may store it on servers outside Pakistan. We share only the data needed for them to perform their function.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. Order records and transaction history may be retained longer where required for accounting, dispute resolution, fraud prevention, or legal compliance. When data is no longer needed, we delete or anonymize it.

8. Your rights and choices

• Access & update — view and edit your profile and saved addresses in the app.
• Location permission — you can disable location access in your device settings (some features, like delivery, may not work properly without it).
• Notifications — you can turn off push notifications in your device settings.
• Hide phone from rider — available as a setting in the app.
• Delete your account & data — email info@swateats.com and we will delete your account and associated personal data, subject to records we must retain by law.

9. Data security

We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data and limit access to authorized personnel only.

10. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Continued use of the Service after changes means you accept the updated policy.

12. Contact us

If you have questions or requests regarding this policy or your data, contact us: