Privacy Policy

1 Information We Collect

1.1 Personal Information

When you use our services, we may collect the following personal information:

• Account Information: Name, email address, phone number, date of birth
• Profile Information: Profile picture, preferences, dietary restrictions
• Contact Information: Delivery addresses, billing addresses
• Payment Information: Credit card details, payment method preferences (processed securely through third-party payment processors)

1.2 Location Information

We collect location information to provide our delivery services:

• Precise Location: GPS coordinates for delivery purposes
• Delivery Addresses: Saved locations for convenient ordering
• Geofencing Data: To determine service areas and restaurant availability within Erbil

1.3 Usage Information

We automatically collect information about how you use our app:

• Order History: Items ordered, restaurants chosen, order frequency
• App Usage: Features used, time spent in app, search queries
• Device Information: Device type, operating system, unique device identifiers
• Technical Information: IP address, browser type, app version

1.4 Communication Information

• Customer Support: Chat logs, email correspondence, support tickets
• Marketing Communications: Responses to surveys, promotional campaigns
• Push Notifications: Delivery updates, promotional offers

2 How We Use Your Information

2.1 Service Provision

• Process and fulfill your food delivery orders
• Connect you with restaurants and delivery partners in Erbil
• Provide real-time order tracking and updates
• Handle payments and billing
• Manage your account and preferences

2.2 Communication

• Send order confirmations and delivery notifications
• Provide customer support and respond to inquiries
• Send promotional offers and marketing communications (with your consent)
• Notify you of service updates and changes

2.3 Improvement and Analytics

• Analyze usage patterns to improve our services
• Develop new features and functionalities
• Monitor and analyze app performance
• Conduct research and surveys

2.4 Safety and Security

• Verify user identity and prevent fraud
• Ensure compliance with legal requirements
• Protect against unauthorized access and abuse
• Investigate and resolve disputes

3 Information Sharing and Disclosure

3.1 Service Providers

We share information with third-party service providers who help us operate our business:

• Payment Processors: To handle secure payment transactions
• Delivery Partners: To fulfill delivery orders
• Cloud Storage Providers: To store and process data securely
• Analytics Providers: To understand app usage and improve services
• Customer Support Tools: To provide efficient customer service

3.2 Restaurant Partners

We share necessary order information with restaurants to fulfill your orders, including:

• Order details and special instructions
• Delivery address (when required)
• Contact information for order coordination

3.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes and government requests
• Enforce our terms of service
• Protect the rights, property, or safety of Zuu, our users, or others
• Investigate fraud or security issues

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

4 Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data transmission and storage using industry-standard encryption protocols
• Access Controls: Strict access limitations to personal information
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Protected servers and databases
• Employee Training: Staff education on data protection and privacy

5 Your Privacy Rights

5.1 Access and Control

You have the right to:

• Access and review your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt-out of marketing communications

5.2 Location Data

• Control location sharing through device settings
• Disable location services (may limit app functionality)
• Manage saved addresses in your account

5.3 Marketing Communications

• Unsubscribe from promotional emails
• Manage push notification preferences
• Opt-out of targeted advertising

6 Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7 Age Limitation

If you are under 18, you are not permitted to use our services. If we become aware that we have collected personal information from a person under the age of 18, we will take steps to delete that information immediately.

If you believe we might have any information from or about a person under 18, please contact us at [email protected].

8 Android App Permissions

To provide you with the full functionality of the Zuu app, we request the following permissions on your Android device:

• Location (ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION): Used to facilitate real-time delivery tracking, show nearby restaurants, and verify delivery addresses in Erbil.
• Camera (CAMERA): Used for profile picture uploads or scanning credit cards/QR codes.
• Storage (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE): Used to cache images and save app preferences.
• Network (INTERNET, ACCESS_NETWORK_STATE): Required to communicate with our servers to fetch restaurant data and process orders.
• Notifications (POST_NOTIFICATIONS): Used to send you order status updates and promotional offers.

You can manage these permissions at any time in your device settings. Denying some permissions may affect app functionality.

9 Data Deletion & Account Removal

You have the right to request the deletion of your account and all associated personal data. This process is permanent and cannot be undone.

How to request deletion:

• In-App: Go to Profile > Settings > Delete Account.
• Email Request: Send an email to [email protected] with the subject line "Account Deletion Request". Please include your registered email address and phone number for verification.
• Web Form: Visit our Account Deletion Portal.

We will process your deletion request within 30 days. Some data may be retained for a longer period if required by law (e.g., transaction records for tax purposes).

10 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information during international transfers.

11 Third-Party Links and Services

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in our app

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

13 Contact Us

14 Regional Specific Rights

14.1 European Union (GDPR)

If you are located in the EU, you have additional rights under the General Data Protection Regulation:

• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authorities

14.2 California (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Access personal information
• Delete personal information
• Opt-out of the sale of personal information
• Non-discrimination for exercising CCPA rights