Privacy

What we collect

We keep only what the kitchen needs to hand you your food:

• Your name, so the cook knows whose order it is.
• Your email address, which is how you sign in and how we send you a receipt.
• Your phone number, so the cook can call you if something changes about your collection.
• Your orders: what you reserved, what it cost, and when you collected it.
• If the kitchen is taking payment before it cooks: the transfer reference you type in, and the receipt you send if you choose to send one. The receipt is a picture from your own banking app, and we keep it only so the cook can check the money arrived.
• App visits: when you open or return to the app. Signed-in visits are linked to your account; anonymous visits use a hashed random installation identifier. The chef can see customer activity and anonymous visit totals.
• The delivery location you choose to share with the kitchen, and a device token if you enable push notifications.
• Your chosen language, so the app and our emails reach you in Arabic or English.

What we do not collect

• No card or bank details are asked for or stored by us. There is no card payment and no payment gateway in Thaybah. Either you pay the cook when you collect, or, if the kitchen asks for payment before it cooks, you transfer the amount in your own banking app and send back the reference or a picture of the receipt. The money never passes through Thaybah.
• No background location tracking. Location is requested only when you choose to share your delivery location; you can choose or adjust the map pin instead.
• No contacts, and no photos or files from your phone except the two you choose to send: a transfer receipt, or a picture of a dish if you are the cook.
• No advertising identifiers, and no tracking for advertising. There are no ads in this app.

Why we keep it

To take your order, to prepare the right amount of food, to recognise you at the door, to check that a transfer arrived, and to contact you if the collection time moves. We also count app visits to understand kitchen activity and let the chef send service messages to all customers or selected customers. We do not use this information for advertising tracking.

Who we share it with

We do not sell your data or share it with advertisers. The kitchen can use the delivery location and phone number you provide to arrange delivery through Mr Mandoob; delivery is managed by Mr Mandoob.

We use outside services to deliver email (account verification, password resets and receipts) and Firebase to deliver push notifications. These services process the information needed to deliver the message.

How long we keep it

Your account details stay until you delete your account. Your past orders stay in the kitchen's records after that, but without your name, email or phone attached. They are the cook's own record of what was made and what was owed, which is why they are kept.

App-visit records are kept for up to 90 days. Visits linked to your account are deleted when you delete your account. Anonymous installation identifiers do not contain your name, email or phone number.

A transfer receipt is never published and never given a public link: only the cook can open it, and it is destroyed when you delete your account.

Deleting your account

Open the app, go to your account, and choose Delete account. Your name, email address and phone number are erased immediately, your password is destroyed, and you are signed out of every device.

If you cannot reach the app, write to us from the contact page and ask for deletion.

Keeping it safe

Everything between the app and our server travels over an encrypted connection. Passwords are stored hashed, never in a form anyone can read, including us. Receipts are kept off the public web and are served only to the cook, signed in.

Children

Thaybah is meant for adults placing and collecting food orders. It is not directed at children and we do not knowingly keep data about them.

Changes

If this policy changes we will update this page and change the date at the top. If a change matters to you, we will say so in the app.