What we collect
When you use Food@Home, we collect only what the service needs to work:
- your mobile phone number, which identifies your account;
- the name you choose to go by in the app;
- your password, stored only in a securely hashed form — we never see it;
- your delivery addresses, including their GPS position and, if you add one, a photo that helps the courier find the place;
- a session cookie that keeps you logged in.
How we use it
This data is used to run the service: identifying you, showing you the restaurants that deliver to your address, and getting orders to your door.
Text messages
When you enter your mobile phone number at checkout and ask to verify it, we send you a one-time verification code by SMS. These messages are strictly transactional: we send one code per verification request that you initiate, and nothing else — no marketing, no promotions. We do not share your mobile phone number or your consent to receive text messages with third parties or affiliates for their marketing purposes. Message and data rates may apply depending on your carrier. You can reply STOP to any message to stop receiving texts from us, and HELP for assistance; note that without a verified phone number you will not be able to complete an order.
Where it lives
Our service is hosted by DigitalOcean in the United States, under a GDPR data processing agreement that includes the European Commission's standard contractual clauses. We also use Mapbox (United States) to display maps and compute travel times to your address, and Twilio (United States) to deliver verification text messages; both process data for us under the same kind of agreement.
Your rights
Under the GDPR you can ask to access the data we hold about you, have it corrected, or have it erased.