Privacy Policy

This describes what LayyahGo collects and what happens to it. It is written to match what the system actually stores, not a general template.

LayyahGo is a food ordering platform operated from Layyah, Punjab, Pakistan. In this policy "we" and "us" mean LayyahGo.

What we collect

When you create an account

• You sign in with Google. We receive your name, your email address and your Google profile photo. We never see your Google password. One Google account is one LayyahGo account.
• We do not ask for your phone number.

When you save a delivery address

• The address text, the area, and any directions you write for the rider.
• A map position for that address. We work it out from the words you type (you never have to enter coordinates), or from the pin if you choose to place one. The server uses it to check whether your address is inside a restaurant's delivery area and to show the rider where to go.

When you place an order

• What you ordered, the price of each item at that moment, the fees and the total.
• The delivery address for that order.
• Any special request you write for the restaurant (for example "less spicy").
• The time of each stage: placed, accepted, prepared, dispatched, delivered.

Order records are kept and are never altered after the fact. This is deliberate: it is what lets us settle a dispute about what was ordered and what it cost.

While your order is on its way (live tracking)

• If the restaurant's rider opens the tracking link the restaurant sends them, the rider's phone shares its location with LayyahGo only while that order is out for delivery.
• We keep only the rider's latest position for that order, not a route history. It is shown only to the customer of that order, the restaurant and LayyahGo staff.
• Sharing stops when the order is delivered or cancelled, or when the rider closes the page. The rider's phone asks their permission before any location is shared.

When you sign in, open the app, and place an order

To stop fake cash-on-delivery orders, which cost restaurants food and a rider's trip, we record:

• Your IP address, the internet address your connection comes from.
• Your device: a description such as "Android 13 · Chrome · Redmi Note 12", taken from what your browser tells every website.
• A device id: a random number stored in your browser and in a cookie.
• A device fingerprint: a code computed from how your browser and phone draw text and graphics, play sound, and describe their screen, language and time zone. It is not your IMEI or phone serial number, which websites cannot read.

We use these only to limit how often orders can be placed, to recognise a device or network that has been banned for fake orders, and to show LayyahGo staff which accounts share a device. They are not used for advertising, not shared with restaurants, and not sold.

Your history, to personalise LayyahGo

• When you are signed in, the restaurants you open and the words you search for. We use them to show you "Order again", "Recently viewed", your recent searches and restaurants that serve food like the food you order. Your past orders are used the same way.
• You can see your history on your Account page, pause it (nothing new is kept) or clear it at any time. It is kept for at most 12 months, and at most your last 500 entries.
• When you are not signed in, your recent searches and recently viewed restaurants are kept only in your own browser, not by us.
• LayyahGo staff can see an account's history when looking into a problem with that account. It is never shown to restaurants or other customers, and never sold.

Your reviewer rank

• Your first name and a rank earned from how many verified reviews you have written (Taster, Foodie, Top Reviewer, Food Critic) are shown next to each review you write.

When you use the site

• Which advertisements were shown to you and which you clicked, linked to your account if you are signed in. This is how we report to advertising restaurants how their campaign performed.

We do not collect card details, bank details, or any payment credential. LayyahGo is cash on delivery. We do not use third-party advertising or tracking tools.

Cookies and browser storage

We use a small number of cookies and browser storage entries, all for running LayyahGo itself:

• a sign-in cookie, so you stay signed in;
• the device id described above, to protect against fake orders;
• your cart, recent searches and a few display choices, kept in your own browser.

We do not use advertising cookies. If you block cookies you will not be able to sign in or order.

Who can see your information

The restaurant you ordered from sees your name, your delivery address and directions, your special request and what you ordered. It needs all of this to cook your food and bring it to you. It sees nothing about your orders from any other restaurant.

That restaurant's rider sees what the restaurant gives them to deliver the order: normally your name, address, directions and the amount to collect.

Other restaurants see nothing about you at all.

Other customers see only your reviews, with your first name and your reviewer rank.

LayyahGo staff can see orders, accounts and addresses in order to run the platform and resolve disputes. Every administrative action is recorded in an audit log showing who did what and when.

Companies that help us run the service. These process information only on our behalf, to provide their service to us:

Some of these companies store data on servers outside Pakistan. By using LayyahGo you agree to your information being handled there for these purposes.

Nobody else. We do not sell your information. We do not share it with advertisers. A restaurant running an advert on LayyahGo receives counts of how many people saw and clicked it, not who those people were.

We may disclose information where we are legally required to, or where it is necessary to investigate fraud or a threat to someone's safety.

Fake orders, limits and bans

• A new account can have one order open until its first order is delivered, and its first order has a spending limit. Anyone can place only a few orders an hour, from one account or one network.
• If the restaurant reports that you did not take an order, your account gets a strike. After too many strikes the account is blocked, and the devices it used are banned from ordering.
• LayyahGo staff can also block an account, or ban a device or network, for a set time or permanently, and can lift any of these. Every ban and every lift is recorded in the audit log.
• If you think you were blocked by mistake, for example because you share a phone or a mobile network with someone who was banned, contact us and we will look into it.

How long we keep things

Orders and audit records survive account deletion, with your personal details detached from them. We keep them because they are financial and dispute records, and because a restaurant's earnings history must stay intact.

Your choices

• See your information. Your order history, addresses and reviews are all in your account.
• Correct it. You can edit your name and addresses at any time.
• Delete your account. Ask us and we will remove your profile, addresses and contact details within 30 days. Past orders remain as anonymous financial records, as described above.
• Withdraw a review. You can edit a review for 48 hours; after that ask us and we will consider removing it.

Security

Access to your data is enforced by the database itself, not only by the app: the rules that stop one customer reading another customer's order, or one restaurant reading another restaurant's orders, are applied at the data layer on every single request.

Prices, delivery fees and totals are always calculated on our server. Nothing your browser sends about money is trusted.

No system is perfectly secure. If you believe your account has been accessed by someone else, tell us immediately.

Children

LayyahGo is not intended for anyone under 18, and we do not knowingly hold information about children. If you believe a child has an account, tell us and we will close it.

Changes

If we change this policy in a way that materially affects you, we will tell you in the app before the change takes effect. The date at the top shows when it last changed.

Contact

Questions about your information, or a request to see or delete it, can be sent to us through the Help page.