Privacy Policy

Privacy Policy of HalfOrder

Last Updated: August 2026

HalfOrder (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using HalfOrder, you agree to the practices described in this policy.

1. Information We Collect

a. Personal Information

  • Full name
  • Email address
  • Phone number (for order coordination and account verification)
  • Profile photo (if uploaded)
  • Sign-in method (Email/Password, Google, or Apple ID)

b. Payment Information

  • Payment method type (card brand, last 4 digits) — stored securely by Stripe
  • Apple Pay tokens — processed by Apple and Stripe; we never see your full card details
  • Transaction history (order amounts, dates, payment status)
  • HalfOrder Cash balance and transaction records

We do not store your full card number, CVV, or expiry date. All card data is handled by Stripe.

c. Location Data

  • Approximate GPS location — used to show nearby restaurants, match users for food sharing, and estimate delivery areas.
  • Driver location — collected while a delivery is active to show real-time tracking to customers.

We do not track your location continuously in the background when you are not actively using the app.

d. Usage & Activity Data

  • Orders created, joined, or completed
  • Swipe and match activity
  • Messages sent between users
  • App screens viewed and features used
  • Referrals sent and accepted

e. Device Information

  • Device type and operating system
  • Push notification token
  • App version
  • Crash logs and error reports

2. How We Use Your Information

We use your data to:

  • Provide all HalfOrder features (Swipe, Full Order, Food Share, delivery)
  • Process payments and manage HalfOrder Cash balances
  • Match users with nearby restaurants and food-sharing opportunities
  • Enable real-time delivery tracking for customers and drivers
  • Send order confirmations, status updates, and push notifications
  • Detect and prevent fraud, abuse, or unauthorized activity
  • Improve app performance, fix bugs, and develop new features
  • Comply with legal obligations and enforce our Terms of Service

3. Payment & Stripe

All payments are processed by Stripe, Inc., a PCI-DSS-compliant payment processor.

  • Your card details are encrypted and sent directly to Stripe — we never see or store your full card number.
  • Apple Pay tokens are processed by Apple and Stripe without exposing your card data to HalfOrder.
  • Driver payouts are processed via Stripe Connect.
  • Restaurant payouts are processed via Stripe Connect after applicable platform fees.

See Stripe’s Privacy Policy at stripe.com/privacy for full details.

4. Location Data

We request access to your device location to:

  • Show restaurants and food cards near your current location.
  • Set your delivery address automatically.
  • Track driver location during active deliveries (drivers only).

You can revoke location access at any time in your device Settings. Some features may not work without location access.

5. Photos & Camera

We may request access to your camera or photo library to:

  • Upload a profile photo.
  • Add food photos to your orders or food cards.

We only access photos you explicitly select. We do not scan or access your full photo library. All uploaded images are stored securely on Firebase Storage.

6. Messaging & Chat

Messages between users (customers, drivers, restaurants) are stored to:

  • Enable in-app communication.
  • Resolve disputes between users.
  • Detect and prevent abuse or harmful content.

We do not sell or share your messages with third parties for advertising purposes.

7. Driver Data

For driver accounts, we collect additional information:

  • Real-time location during active deliveries.
  • Delivery history, completion rate, and ratings.
  • Stripe Connect account details for payout processing.

Driver location is shared with the assigned customer during an active delivery only. It is not visible to other users.

8. Restaurant Data

For restaurant accounts, we collect:

  • Restaurant name, address, and contact details.
  • Menu items, prices, and photos.
  • Order history and fulfillment data.
  • Stripe Connect account details for payout processing.

9. Data Sharing

We do not sell your personal data to advertisers or third parties.

We may share your data with:

  • Stripe — for payment processing and driver/restaurant payouts.
  • Firebase (Google) — for database, authentication, storage, and push notifications.
  • Other users — your display name and photo are visible to users you match or transact with.
  • Law enforcement — if required by applicable law or court order.
  • Safety purposes — to protect users or prevent fraud.

10. Push Notifications

We send push notifications for:

  • Order confirmations and status updates.
  • New messages from other users.
  • Driver assignment and delivery updates.
  • Promotions and platform announcements.

You can disable push notifications at any time in your device Settings.

11. Data Security

We implement industry-standard security measures including:

  • Firebase Security Rules to restrict data access.
  • Encrypted connections (HTTPS/TLS) for all data in transit.
  • Stripe’s PCI-DSS-compliant infrastructure for payment data.
  • Firebase Authentication for secure account access.

However, no system is 100% secure. We encourage you to use a strong, unique password and enable device security features.

12. Your Rights

Under Canadian privacy law (PIPEDA) and applicable provincial laws, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or outdated information.
  • Delete your account and associated personal data.
  • Withdraw consent for data processing (which may limit app functionality).
  • Port your data in a machine-readable format.

To exercise any of these rights, contact us at: support@halforder.app

13. Data Retention

  • Account data — retained until you request deletion.
  • Transaction records — retained for 7 years for legal and tax compliance.
  • Messages — retained for 2 years for dispute resolution.
  • Deleted account data — removed within 30 days, except where retention is legally required.

14. Children’s Privacy

HalfOrder is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will promptly delete it.

15. Third-Party Services

HalfOrder uses the following third-party services that have their own privacy policies:

  • Firebase (Google) — firebase.google.com/support/privacy
  • Stripe — stripe.com/privacy
  • Google Maps — used for location and address autocomplete.
  • Apple Sign In — sign-in via Apple ID; Apple may share a masked email with us.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app and require your acknowledgment before continued use. The updated policy will be effective as of the date shown at the top of this page.

17. Governing Law

This Privacy Policy is governed by the laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.

18. Contact Us

For any privacy questions, data requests, or concerns:

Email: support@halforder.app

By using HalfOrder, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.