Privacy Policy

This Privacy Policy describes how Mitho Delivery("we", "us", or "our") collects, uses, and protects your information when you use our customer mobile application ("App") available on the Google Play Store. By using the App, you agree to the practices described in this policy.

1. User Login & Authentication

Our App requires you to create an account or log in to access its features. We collect and process the following authentication data:

• Email address — used as your unique account identifier
• Phone number — for account verification and OTP-based login
• Password — stored securely in encrypted form; we never store plain-text passwords
• Social login tokens — if you sign in via Google or other providers, we receive a token from that provider; we do not receive or store your social account password

Authentication is powered by Firebase Authentication (Google LLC), which complies with industry-standard security practices. Your credentials are never shared with third parties for marketing purposes.

2. User Data We Collect

When you use Mitho Delivery, we collect the following categories of personal and usage data:

• Personal Information: Full name, email address, phone number, and delivery address
• Location Data: Approximate or precise location (with your permission) to determine your delivery area and show nearby restaurants
• Order History: Details of items ordered, order timestamps, and delivery records
• Payment Information: Payment method details (processed securely by our payment gateway; we do not store raw card numbers)
• Device Information: Device type, operating system version, unique device identifiers (e.g., Android ID), and app version
• Usage Data: Pages visited, features used, session duration, crash logs, and performance metrics
• Push Notification Token: A device-specific token (FCM token) used to send you push notifications (see Section 5)

3. Firebase & Third-Party Services

Our App is built on Google Firebase, a platform provided by Google LLC. Firebase services we use include:

• Firebase Authentication — secure user login and session management
• Cloud Firestore / Realtime Database — stores your profile, orders, and app data on secure Google-managed servers
• Firebase Cloud Messaging (FCM) — delivers push notifications to your device
• Firebase Crashlytics — collects anonymous crash reports to help us fix bugs and improve stability
• Firebase Analytics — collects anonymous usage statistics to understand how users interact with the App

Data processed by Firebase is stored on Google's servers and is subject to Google's Privacy Policy. We have configured Firebase to process data in compliance with applicable data protection laws.

4. Internet Access

Our App requires an active internet connection to function. Internet access is used for:

• Syncing your account, orders, and profile data with our secure servers in real time
• Fetching restaurant menus, availability, and pricing
• Processing payments securely through our payment gateway
• Sending and receiving push notifications via Firebase Cloud Messaging
• Uploading crash reports and anonymous analytics to Firebase
• Displaying maps and location-based services

We do not transmit your data over unencrypted connections. All data in transit is protected using TLS/HTTPS encryption.

5. Push Notifications

With your permission, Mitho Delivery sends push notifications to keep you informed. Notifications may include:

• Order Updates: Confirmation, preparation status, dispatch, and delivery alerts
• Promotions & Offers: Discount codes, new restaurant announcements, and special deals (only if you opt in)
• Account Alerts: Login activity, password changes, and security notices

Notifications are delivered via Firebase Cloud Messaging (FCM). To receive notifications, we store your device's FCM token on our servers. You can disable notifications at any time from your device's system settings or within the App under Profile → Notification Settings.

6. How We Use Your Information

• To create and manage your account
• To process orders and coordinate delivery
• To send order confirmations, updates, and push notifications
• To personalize your experience and show relevant content
• To analyze usage patterns and improve our services
• To detect, prevent, and respond to fraud or security incidents
• To comply with applicable laws and regulations
• To provide customer support

7. Information Sharing

We do not sell your personal data. We share your information only with:

• Partner Restaurants — name, order details, and delivery address needed to fulfil your order
• Delivery Partners — name, phone number, and delivery address to complete delivery
• Payment Processors — payment details handled securely by our payment gateway
• Google Firebase — for authentication, database, messaging, analytics, and crash reporting (see Section 3)
• Legal Authorities — when required by applicable law or valid legal process

8. Data Security

We implement industry-standard security measures including TLS/HTTPS encryption for data in transit, Firebase's secure cloud infrastructure, access controls limiting who can view your data, and regular security reviews. While we strive to protect your information, no method of transmission over the internet is 100% secure. Please keep your account credentials confidential and notify us immediately if you suspect unauthorized access.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records).

10. Your Rights

• Access — request a copy of your personal data
• Correction — update or correct inaccurate information
• Deletion — request deletion of your account and personal data
• Opt-Out of Notifications — disable push notifications via device settings or the App
• Opt-Out of Marketing — unsubscribe from promotional communications
• Data Portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at the email below.

11. Children's Privacy

Our App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you through the App or by email. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: privacy@mithodelivery.com