Privacy Policy
This policy explains how Rasai Delivery collects, uses, stores, and protects your personal information when you use our app and services.
Effective date: 1 June 2026 · Last updated: 05 June 2026
Rasai Delivery is a food and grocery delivery platform operating in Pakistan. We are the data controller responsible for the personal information you provide when you create an account, place orders, or otherwise interact with our mobile application and website.
References to "we", "us", or "our" throughout this policy refer to Rasai Delivery. References to "you" or "your" refer to any individual who uses our services.
We collect the following categories of personal information:
| Category | Data Collected | How |
|---|---|---|
| Account details | Full name, phone number, email address, profile photo, password (hashed) | Provided by you at registration |
| Delivery addresses | Address label, full name, address lines, city, state, postal code | Provided by you in-app |
| Order information | Items ordered, store, amounts, payment method, order status, delivery address, notes | Generated when you place an order |
| Transaction records | Payment method, payment status, order totals, delivery charges | Generated on checkout |
| Device & session | FCM push notification token, OTP verification data | Collected automatically by the app |
| Usage data | Favourited stores, cart contents, in-app actions | Collected automatically as you use the app |
We do not collect full card numbers or financial credentials. Payment processing is handled by third-party payment providers who operate under their own privacy policies.
We use your personal information only for the purposes listed below:
- Account management — creating and maintaining your account, authenticating you via OTP, and keeping your profile up to date.
- Order fulfilment — processing your orders, coordinating delivery, and notifying you of order status updates.
- Delivery — sharing your delivery address with the assigned rider and store to complete your order.
- Push notifications — sending real-time order updates, promotional offers, and service announcements via Firebase Cloud Messaging (FCM).
- Customer support — responding to queries, resolving disputes, and improving our service.
- Legal & financial compliance — retaining anonymised transaction records as required by Pakistani financial regulations.
- Service improvement — analysing aggregated, anonymised usage data to improve app features and performance.
We share your personal data only in the following limited circumstances:
- Stores & riders — your name, delivery address, and order details are shared with the relevant store and assigned delivery rider to fulfil your order.
- Firebase (Google) — your device's FCM token is shared with Google Firebase solely for delivering push notifications. Google's privacy policy applies.
- Payment providers — payment reference data is shared with our payment processor to complete transactions. No full card data passes through our servers.
- Legal authorities — we may disclose information if required by law, court order, or government authority in Pakistan.
No other third parties receive your personal data without your explicit consent.
We retain your data for as long as your account is active, or as necessary to provide our services. The table below summarises specific retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & profile data | Until account deletion | Service provision |
| Delivery addresses | Until account deletion | Service provision |
| Cart & favourites | Until account deletion | Service provision |
| FCM push token | Until account deletion | Notification delivery |
| Order & transaction records | Up to 7 years (anonymised) | Financial & legal compliance |
When your account is deleted, all personally identifiable information is removed immediately. Any retained order or transaction records are anonymised so they can no longer be linked back to you.
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — update or correct inaccurate information via the app's profile settings or by contacting us.
- Deletion — request permanent deletion of your account and personal data. See our Account Deletion page for full details and steps.
- Objection — object to processing of your personal data for purposes other than those described in this policy.
- Portability — request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at meharalibrw12@gmail.com. We will respond within 30 days.
We use Firebase Cloud Messaging (FCM) by Google to send push notifications to your device. These include order status updates, delivery confirmations, and (with your consent) promotional messages.
You can disable push notifications at any time through your device's system settings (Settings → Apps → Rasai Delivery → Notifications). Disabling notifications will not affect your ability to place orders or use the app, but you may miss real-time order updates.
We take reasonable technical and organisational measures to protect your personal data, including:
- Passwords stored using strong one-way hashing algorithms (bcrypt).
- OTP-based phone number verification with short expiry windows.
- HTTPS encryption for all data in transit between your device and our servers.
- Access controls limiting which staff can view personal data.
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at meharalibrw12@gmail.com.
Rasai Delivery is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app or by email (if provided) and update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
For any privacy-related questions, requests, or complaints, please contact us: