Privacy Policy
Last updated: June 2026
1. What we collect
Account data (name, email, phone), order history, approximate location (to show nearby deals), device data, and payment references. We never store full card numbers — payment processing is handled by licensed payment providers.
2. How we use it
To operate the marketplace: matching you with nearby deals, processing orders, calculating loyalty rewards and impact statistics, preventing fraud, and improving the product. Aggregated, anonymized data powers our public sustainability reporting.
3. Sharing
Partners receive only what they need to fulfil your order: your first name and pickup code. NGO partners in donation flows receive aggregate counts, never personal data. We do not sell personal data. Ever.
4. Security
Passwords are hashed with bcrypt; sessions use short-lived signed tokens with rotating refresh tokens; sensitive actions are audit-logged; access is role-restricted internally. Report vulnerabilities to security@savebite.pk.
5. Retention
Account data is kept while your account is active. Deleted accounts are soft-deleted for 30 days (to allow recovery), then purged, except records we must keep for tax and dispute obligations.
6. Your rights
You can access, correct, export, or delete your data from Settings, or by emailing privacy@savebite.pk. Marketing communications are opt-in and can be disabled anytime.
7. Cookies
We use strictly necessary cookies for authentication and preference cookies for your city and language. No third-party advertising cookies.
8. Children
SaveBite is not directed at children under 13. We delete accounts identified as belonging to children.
9. Changes
Material changes will be announced in-app at least 14 days before taking effect.