Privacy Policy for FoodFactory

Effective date: March 8, 2026

FoodFactory (“we”, “our”, or “us”) operates the FoodFactory mobile application (the “App”), a business food ordering platform intended for approved partner institutions and their authorized staff.

This Privacy Policy explains how we collect, use, store, and protect information when you use the App.

1. Scope of this Policy

This Privacy Policy applies to users of the FoodFactory mobile application, including:

  • users who submit a registration request,

  • approved users of partner institutions,

  • users who place food orders through the App,

  • users who receive notifications and service-related communications through the App.

The App is intended only for authorized users connected to approved partner institutions.

2. Information We Collect

We may collect the following types of information:

a) Account and registration information

When you register or submit an access request, we may collect:

  • full name,

  • email address,

  • phone number,

  • institution name or selected institution,

  • password (stored securely in hashed form, never in plain text),

  • registration request status and approval/review information.

b) Order information

When you use the App to place food orders, we may collect:

  • selected menu items or products,

  • quantities,

  • order notes,

  • delivery or target date,

  • order status,

  • order history.

c) Institution-related information

Because the App is designed for partner institutions, we may store and process the institution linked to your account and your role within that organization.

d) Technical and device information

To operate the App securely and reliably, we may collect:

  • device notification token (for push notifications),

  • app usage and error-related technical data,

  • authentication/session data required for login and secure access.

We do not intentionally collect unnecessary personal data.

3. How We Use Your Information

We use collected information to:

  • create and manage user access,

  • review and approve or reject registration requests,

  • authenticate users and secure access to the App,

  • display menus, offers, and products,

  • process and store food orders,

  • show order history and order status,

  • send push notifications about new offers, order-related information, or service notices,

  • manage institution-related access and permissions,

  • improve the performance, reliability, and security of the App,

  • comply with legal obligations where applicable.

4. Registration Approval Process

FoodFactory is a controlled-access application. Submitting a registration request does not automatically grant access.

When a user submits a registration request:

  • the request is stored as pending,

  • it may be reviewed by authorized administrators or institution managers,

  • access is granted only after approval,

  • rejected or unapproved requests cannot use the App.

5. Push Notifications

The App may send push notifications to inform users about:

  • new daily offers,

  • important order-related updates,

  • service or system notices.

For this purpose, we may store a device notification token. You can control notifications through your device settings.

6. Legal Basis for Processing

We process personal data only where there is a valid reason to do so, including:

  • providing access to the App and its services,

  • performing services requested by authorized users and institutions,

  • maintaining the security and integrity of the platform,

  • supporting legitimate business operations,

  • complying with applicable legal requirements.

7. Sharing of Information

We do not sell personal data.

We may share data only when necessary for the operation of the App, including with:

  • authorized administrators of the FoodFactory platform,

  • authorized representatives or managers of the relevant institution,

  • service providers that support hosting, notifications, infrastructure, analytics, or technical maintenance,

  • public authorities or regulators if required by law.

Any such access is limited to what is reasonably necessary.

8. Data Storage and Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, misuse, disclosure, alteration, or destruction.

Security measures include, where applicable:

  • secure authentication,

  • hashed passwords,

  • access controls based on role and institution,

  • secure storage of tokens and session-related data,

  • restricted administrative access.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

  • while your account remains active,

  • while your institution remains an approved partner,

  • as needed for order records, support, auditing, and security,

  • as required by applicable law or legitimate operational needs.

Registration requests, logs, and related records may also be retained for security, review, or compliance purposes.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

  • request access to your personal data,

  • request correction of inaccurate or incomplete data,

  • request deletion of your data where applicable,

  • object to certain processing,

  • request restriction of processing,

  • request information about how your data is used.

Requests may be reviewed in light of legal, contractual, and security obligations.

11. Children’s Privacy

FoodFactory is not intended for children. We do not knowingly collect personal data from children. If we become aware that personal data from a child has been submitted without appropriate authorization, we will take reasonable steps to delete it.

12. Third-Party Services

The App may rely on third-party services that process limited technical data in order to function properly, such as:

  • hosting and server infrastructure,

  • push notification services,

  • secure authentication/storage mechanisms.

These services may process data according to their own privacy practices where applicable.

13. International Data Transfers

Depending on the hosting and infrastructure providers used, data may be processed or stored in countries other than the user’s country. Where this happens, we take reasonable steps to ensure that data is handled securely and appropriately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the App, legal requirements, or operational practices.

When we do, the updated version will be made available through the App, on the relevant website, or through the service page where this policy is published. Continued use of the App after updates may constitute acceptance of the revised policy.

15. Contact and Privacy Requests

If you have questions about this Privacy Policy or about how personal data is handled in FoodFactory, please contact us using the support or contact details provided in the app store listing, inside the App, or through our official service channels.