Privacy Policy
Title: Privacy Policy
Last updated: September 24, 2026
Introduction
FaceFood Pvt Ltd (“FaceFood,” “we,” “us,” or “our”) operates the Facefood mobile application for customers, the Facefood Staff mobile application for authorized restaurant staff, and related services including facefood.cafe and app.facefood.cafe (together, the “Services”).
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your choices. By using our Services, you agree to this Policy. If you do not agree, please do not use the Services.
Trademarks: “Facefood,” “FaceFood,” logos, and related branding are trademarks or registered trademarks of FaceFood Pvt Ltd. All rights reserved. Other names may be trademarks of their respective owners.
Scope — which apps this covers
- Facefood (customer app): browse menu, place orders, manage profile and delivery addresses.
- Facefood Staff (staff app): for employees and contractors we authorize (kitchen, managers, delivery riders) to view and update orders and receive work alerts.
- Website / backend: account and order data may also be created or synced when you use facefood.cafe or integrations connected to our API.
Information we collect
A. Information you provide
B. Information collected automatically
- Authentication token: After login, the apps store an API access token locally on your device (e.g. via device storage) so you stay signed in.
- Device and app data for staff notifications: On Facefood Staff, if push notifications are enabled, we may store a Firebase Cloud Messaging (FCM) device token linked to your staff account to send order alerts. The app may also show local notifications when new orders appear.
- Server and security logs: When you use the Services, our servers may log IP address, request time, app/API activity, and similar technical data for security, fraud prevention, and troubleshooting.
- Fonts: Our apps may download typography from Google Fonts when the app loads UI text. That may involve your device contacting Google’s servers (see Third parties below).
C. What we do not collect via the customer app (as currently built)
- We do not require GPS or background location permission in the customer Android app.
- We do not use third-party advertising or analytics SDKs in the customer app’s published dependency list.
- We do not access your contacts, photos, microphone, or camera through the customer app for core ordering.
(Staff app permissions include Internet, notifications, and vibrate for alerts.)
How we use information
We use personal information to:
- Create and manage your account and authenticate you
- Process, deliver, and support food orders
- Show order history and status
- Communicate with you about orders and support requests
- Operate staff workflows (order preparation, dispatch, delivery verification)
- Send staff push or local notifications about new or updated orders
- Improve reliability and security of the Services
- Comply with law and enforce our Terms
Legal bases (where applicable)
Depending on your location, we rely on: performance of a contract (providing orders and accounts), legitimate interests (security, fraud prevention, staff operations), and consent where required (e.g. optional marketing if we add it later, or notification permissions on staff devices).
How we share information
We share information only as needed:
- Within FaceFood: Authorized staff roles (managers, kitchen, riders) see order and customer contact/delivery details required to fulfill orders. Rider access to sensitive fields (such as verification codes) is limited by role.
- Service providers: Hosting, email, and infrastructure providers that process data on our behalf under contract (e.g. servers for app.facefood.cafe).
- Google / Firebase: If staff push notifications are enabled, FCM tokens are processed by Google Firebase to deliver notifications.
- Google Fonts: Font delivery may be handled by Google when the app loads fonts.
- Legal: If required by law, court order, or to protect rights, safety, and security of FaceFood, users, or the public.
We do not sell your personal information.
Data retention
We keep account and order data as long as your account is active and as needed for legal, tax, and business records (including order history). Staff FCM tokens are removed when you log out or we unregister the device. When you delete your account (see Account Deletion page), we delete or anonymize personal data except where we must retain records by law.
Security
We use reasonable technical and organizational measures (HTTPS for production API traffic, hashed passwords, access controls for staff). No method of transmission or storage is 100% secure.
Children
Our Services are intended for users who can enter into a contract to order food (typically 13+ / 16+ depending on local law). We do not knowingly collect personal information from children under the minimum age required in your country. Contact us if you believe a child has provided data.
International transfers
Our servers and providers may be located outside your country. By using the Services, you understand your data may be processed in those locations with appropriate safeguards where required.
Your rights and choices
Subject to local law, you may have the right to access, correct, delete, restrict, or object to processing, and to data portability. You may withdraw consent where processing is consent-based (e.g. notifications on staff devices).
To exercise rights, email support@facefood.pk with the subject “Privacy Request” and your registered email. We may verify your identity before acting.
Changes
We may update this Policy. We will post the new date at the top and, for material changes, provide notice in the app or by email where appropriate.
Contact
FaceFood Pvt Ltd
Email: support@facefood.cafe
Web: https://facefood.cafe
2. Terms of Service
Title: Terms of Service
Last updated: September 24, 2026
Agreement
These Terms of Service (“Terms”) are a legal agreement between you and FaceFood Pvt Ltd for use of the Facefood customer app, Facefood Staff app (if you are authorized staff), and related websites and services.
Facefood, FaceFood Staff, and related logos are trademarks of FaceFood Pvt Ltd. All rights reserved. You may not use our trademarks without written permission.
Eligibility
You must be old enough to form a binding contract in your jurisdiction to use the customer app. The Staff app is only for users we invite or employ and provision with credentials.
Accounts
You are responsible for keeping your login credentials confidential and for activity under your account. Provide accurate information (name, email, phone, addresses). Notify us immediately of unauthorized use at support@facefood.pk.
Orders and payments
- Menu, prices, fees, and availability may change.
- An order is confirmed when we accept it through the app or our systems.
- Payment methods (cash on delivery, JazzCash, card, etc.) are selected at checkout; specific payment processing may occur offline or through third parties—not all methods store payment data in the app.
- Delivery times are estimates, not guarantees.
- You are responsible for providing a correct delivery address and being available to receive the order (including sharing the verification code with our rider when requested).
Staff app
Staff users must use the Staff app only for work purposes, keep order and customer information confidential, and follow FaceFood policies. Misuse, sharing accounts, or accessing data beyond your role may result in termination of access and legal action.
Acceptable use
You agree not to: abuse the Services, attempt unauthorized access, scrape or overload our API, interfere with other users, submit false orders, or violate applicable law.
Intellectual property
All software, branding, menu content, and materials in the Services are owned by FaceFood or licensors. You receive a limited, non-exclusive, revocable license to use the apps for personal ordering (customer) or authorized work (staff).
Disclaimers
The Services are provided “as is” to the extent permitted by law. Food preparation and delivery involve operational risks; we do not warrant uninterrupted or error-free service.
Limitation of liability
To the maximum extent permitted by law, FaceFood Pvt Ltd is not liable for indirect, incidental, or consequential damages. Our total liability for claims relating to the Services is limited to the amount you paid FaceFood for the relevant order in the past twelve months, or PKR amount as required by applicable consumer law if greater.
Termination
We may suspend or terminate access for violation of these Terms or for operational reasons. You may stop using the Services at any time and request account deletion (see Account & Data Deletion).
Governing law
These Terms are governed by the laws of Pakistan, without regard to conflict-of-law rules. Courts in Karachi, Pakistan shall have exclusive jurisdiction, unless mandatory consumer protection law in your country requires otherwise.
Contact
FaceFood Pvt Ltd — support@facefood.pk — https://facefood.cafe