Privacy Policy

Last updated: 14 August 2026

Crunchy Hot respects your privacy. This page explains in plain language what data we collect when you use our mobile app and website, how we use it, and how you control it.

1. What we collect

a. Account data

• Email address — to send you the one-time verification code and link your orders to your account.
• Name — so we know how to address you and to print on the delivery receipt.
• Mobile number — so the driver or branch staff can reach you when your order is ready.
• Date of birth (optional) — used only for birthday offers. Not shared.

b. Order & address data

• Delivery addresses (street, landmark, driver notes).
• Order history — items, quantities, add-ons, price, payment method.
• Coupons redeemed and loyalty points earned.

c. Device data

• FCM push token — so we can send you order-status and offer notifications.
• Device model, OS version, app version — for technical diagnostics only.

We do not collect your GPS location unless you explicitly grant the permission to see the nearest branches.

2. How we use it

• Fulfil orders and deliver them to the address you selected.
• Send order-status notifications (accepted, being prepared, on the way, delivered).
• Send offers and coupons — you can turn these off in your device's system notification settings.
• Calculate loyalty points and discounts.
• Respond to customer-service inquiries.
• Improve the menu and service based on what's most ordered.

We do not sell your data. We do not use it for any advertising outside our own app. We do not share it with third parties except as listed below.

3. Who we share it with

• Delivery drivers and branch staff — see only your name, mobile number and delivery address, and only for the duration of your active order.
• Firebase / Google — we use Firebase Cloud Messaging to deliver push notifications to your device. Notification payloads pass through Google servers. See Google's Privacy Policy.
• Legal authorities — only when compelled by a valid legal request.

4. Retention

• Account data: as long as your account is active.
• Order history: retained for accounting and support for up to 3 years from order date.
• When you delete your account: personal data is removed immediately; anonymised order records remain for accounting purposes only.

5. Your rights

• Access your data — from "My Information" in the app.
• Update name, phone and email — from the same screen (email change requires OTP re-verification).
• Delete your account — email us at the address below. Processed within 7 days.
• Disable notifications — from the system notification settings (Android / iOS).

6. Security

We use encrypted transport (HTTPS) between the app and our production servers, and passwords are stored as one-way hashes. Database access is restricted to specific technical staff. No internet system is 100% secure — help us by keeping your email and OTP codes to yourself.

7. Children

This app is intended for people aged 13 and over. We do not knowingly collect data from children under this age. If we discover a child's account, we delete it.

8. Changes to this policy

We may update this policy from time to time. When we do, we'll show an in-app notice and post the new version here with the "Last updated" date at the top refreshed.

9. Contact us

For any question or request about your data:
📧 privacy@crunchyhot.sy
📱 +963 946 193 094