Legal
Privacy Policy
01 Information We Collect
Account Information
When you create a Sponix account, we collect your name, email address, phone number, and a password. Restaurant partners and delivery partners additionally provide business details, identity verification documents, and bank account information for payouts.
Order Information
When you place an order, we collect your delivery address, order contents, special instructions, and payment method details. We retain order history to enable re-ordering and to resolve disputes.
Device & App Data
We collect device identifiers (such as an advertising ID), operating system version, app version, IP address, and crash reports. This information is used to maintain and improve the app.
Photos
Restaurant partners may upload photos of menu items and their restaurant. Customers and delivery partners may upload a profile photo. We do not access your camera or photo library without your explicit permission.
02 How We Use Your Information
- Fulfil orders — connecting customers, restaurants, and delivery partners to complete deliveries.
- Process payments — charging customers and paying out restaurants and delivery partners via our payment processor.
- Send notifications — order status updates, promotions, and service alerts via push notification, SMS, or email.
- Improve the platform — analysing usage patterns to fix bugs, personalise recommendations, and build new features.
- Safety & fraud prevention — detecting and preventing fraudulent or abusive activity.
- Legal compliance — meeting our obligations under applicable laws and regulations.
03 Information Sharing
| Recipient | What is shared | Why |
|---|---|---|
| Restaurant partners | Customer name, delivery address, order details | To prepare and dispatch your order |
| Delivery partners | Customer name, delivery address, phone number | To complete the delivery |
| Payment processor (Stripe) | Payment card details, order amount | To process card transactions securely |
| Cloud infrastructure (Railway, Supabase) | All data stored in our databases | Hosting and data storage |
| Push notification services (Expo) | Device push token | To deliver order status notifications |
We do not sell your personal information to third parties. We do not share your data for third-party advertising.
04 Location Data
Customers — we request your location to display nearby restaurants and to pre-fill your delivery address. You may also enter an address manually without granting location permission.
Delivery partners — we request your precise location continuously while you are on an active delivery to show your real-time position to the customer and restaurant. Background location is only used during an active delivery session.
Location data is not shared with third parties for advertising or analytics purposes.
05 Push Notifications
We send push notifications to inform you about order status changes (e.g., "Your order is on the way"), new orders (for restaurant and delivery partners), and occasional promotions. You can disable push notifications at any time from your in-app profile settings or from your device's system settings.
06 Payment Information
Card payment details are processed directly by Stripe, a PCI DSS-compliant payment processor. Sponix does not store your full card number, CVV, or expiry date on our servers. We retain a masked card reference (e.g., last four digits) for display purposes only.
Cash-on-delivery orders do not involve any card data.
07 Data Retention
We retain your account data for as long as your account is active. Order records are retained for a minimum of three years to comply with financial recordkeeping requirements. You may request deletion of your account and associated data at any time (see Your Rights below); we will process the request within 30 days, subject to legal retention obligations.
08 Security
We use industry-standard measures to protect your data: HTTPS for all data in transit, bcrypt password hashing, and role-based access controls. Despite these measures, no system is completely secure. If you believe your account has been compromised, please contact us immediately.
09 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request deletion of your account and personal data.
- Portability — receive your data in a structured, machine-readable format.
- Opt-out of notifications — disable push notifications, SMS, or marketing emails at any time.
To exercise any of these rights, contact us at privacy@sponix.app.
10 Children's Privacy
Sponix is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
11 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email at least 7 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Sponix after the effective date constitutes acceptance of the updated policy.