Privacy Policy

Last updated: 25 July 2026

Kurdivery ("we", "our", "the app") is a food and goods delivery service. This policy explains what personal data we collect, why, who we share it with, and the choices you have. By using Kurdivery you agree to this policy.

If you have any questions, contact us at support@kurdivery.com.

1. Who this applies to

Kurdivery has four kinds of users — customers, shops, drivers, and managers. Some data (for example a driver's live location, or a shop's menu) only applies to that role.

2. Information we collect

Information you give us

• Account details: name, phone number, and — if you sign in that way — email address.
• Profile details: delivery addresses, profile photo, preferred language.
• Driver documents: drivers submit a photo of a national ID for verification.
• Shop details: shop name, location, menu, and images (for shop accounts).
• Orders & messages: the orders you place or fulfil, and messages you send in order or support chats.

Information collected automatically

• Location: with your permission, we use your device location to show nearby shops and to calculate delivery. For drivers on an active delivery, we share live location with the customer while the app is in the background or the screen is locked, so the customer can track the order. Location sharing stops when the delivery ends.
• Device identifiers & push tokens: a notification token so we can send you order updates.
• Usage & diagnostics: basic crash and performance data to keep the app working.

3. How we use your information

• Create and manage your account and role (customer/shop/driver/manager).
• Take, deliver, and track orders, and calculate fees and settlements.
• Send you order updates and notifications.
• Verify drivers and shops.
• Provide customer support.
• Keep the service secure and prevent fraud or abuse.

We do not sell your personal data.

4. How we share information

We share only what is needed to deliver the service:

• Between users of an order — a customer, the shop, and the assigned driver see the names, contact details, and (during delivery) the driver's live location needed to complete that order.
• Service providers that run the app for us:
  • Supabase — our database, authentication, and file storage.
  • Google Firebase (Cloud Messaging) — push notifications.
  • Google Maps Platform — maps, geocoding, and routing.
  • OTPIQ — sending one-time login codes by SMS.
  • Sign-in providers you choose — Google, Facebook, or Apple, only if you use them to log in.
• Legal reasons — if required by law or to protect rights and safety.

5. Data retention

We keep your data while your account is active. When you delete your account (see below) we delete or anonymise your personal data, except where we must keep certain records (for example, completed-order and settlement records) for legal, accounting, or fraud-prevention reasons.

6. Your choices and rights

• Delete your account: you can permanently delete your account and its personal data from inside the app — Settings → Delete account.
• Location: you can turn location permission on or off in your device settings. Some features (nearby shops, delivery, driver tracking) won't work without it.
• Notifications: you can disable notifications in your device settings.
• Access or correction: contact us to request a copy of, or correct, your data.

7. Children

Kurdivery is not intended for children under 13, and we do not knowingly collect data from them.

8. Security

We protect your data with encryption in transit (HTTPS), row-level access controls on our database, and private storage for sensitive files such as driver IDs. No system is perfectly secure, but we work to protect your information.

9. Changes to this policy

We may update this policy. Material changes will be announced in the app or by notification. The "Last updated" date at the top shows the latest version.

10. Contact

Questions or requests about your data: support@kurdivery.com