Home / Data Policy

Data Policy

How we collect, use, and protect your information.

Last Updated: October 16, 2026

1. Information We Collect

We collect the following types of information when you use PaspasFood:

  • Account Information: Name, email address, phone number, username, and password when you register
  • Profile Information: Profile photo, address, and saved delivery addresses
  • Business Information: Business name, type, description, images, and location (for Business Owners)
  • Rider Information: Driver license number, license photo, selfie, and profile picture (for Delivery Riders)
  • Order Information: Order history, delivery addresses, payment details, and order preferences
  • Cancellation Reasons: The reason you select when you cancel an order or give a job back. For riders this is recorded against the job, determines whether a PaspasPoint is returned, and may be reviewed where cancellations are frequent
  • Location Data: GPS coordinates when you use location-based features (with your permission)
  • Device Information: Device type, operating system, push notification tokens, and app version

2. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Process and fulfill your orders and delivery requests
  • Facilitate communication between customers, businesses, and riders
  • Send order updates, receipts, and delivery notifications
  • Verify your email address when you register, and confirm your identity when you contact support
  • Verify your email address for account security
  • Improve our services and user experience
  • Send push notifications about order status and promotions (with your consent)
  • Ensure platform safety and prevent fraud

3. Information Sharing

We share your information only in the following circumstances:

  • With Business Owners: Your name, delivery address, and order details are shared with the business fulfilling your order. Under section 9.10 of our Terms a business may use this only for that order: not to contact you about anything else without a lawful basis, not to pass on, and not to publish
  • With Delivery Riders: Your name, delivery address, and contact information are shared with the rider delivering your order
  • With Customers: Business information and rider details (name, photo, location) are shared during active orders
  • In Reviews: A review you leave is shown publicly on the business's page and on the rider's profile. Your name is NOT shown: it appears only as initials, such as "M***** S*****" for Maria Santos, and your profile photo is never shown. Your rating and comment are public
  • Service Providers: DigitalOcean (application hosting, database and file storage, in Singapore); Expo (push notifications); Semaphore (the SMS verification code sent to your mobile number); Google (sign-in, if you choose to sign in with Google); Namecheap Private Email (the messages we send you); OpenStreetMap, Nominatim and OSRM (maps, address lookup and routing)
  • Legal Requirements: When required by Philippine law, regulation, or legal process

4. Data Storage and Security

We take reasonable measures to protect your data:

  • Your data is held in a managed PostgreSQL database on DigitalOcean, in their Singapore region, encrypted at rest and reachable only by our own servers
  • Images are stored in DigitalOcean Spaces, uploaded directly from your device over a short-lived, single-use link
  • Menu photos, store images and profile pictures are public, because they are shown to everyone browsing the app. Rider documents, government IDs, dispute evidence and proof-of-delivery photos are not: they are kept private, and are shown only to the people involved in that delivery or dispute and to our staff, through a link that expires after a few minutes
  • Passwords are never stored. We keep only a scrypt hash, which cannot be reversed into your password
  • We do not store card or bank details. Cash on delivery is the only payment method, so there is nothing of that kind to hold

5. Your Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data — see Deleting Your Account below for how, and for the records we are obliged to keep
  • Object: Object to the processing of your personal data for certain purposes
  • Portability: Request your data in a structured, commonly used format

6. Deleting Your Account

You can delete your account yourself, at any time, and it takes effect immediately. In the app, open Profile (customers) or Settings (riders and business owners), scroll to the bottom and tap Delete Account. Full instructions, including what to do if you can no longer sign in, are on our account deletion page.

What is deleted. Your name, email address, phone number, profile photo, saved addresses, password, favourites, reviews and push notification tokens. For riders, your driver's licence details, licence photo and insurance records. For business owners, your business permit, government ID and registration documents. Every signed-in session ends.

What is kept. Your past orders, deliveries and payment records remain, with your name and contact details removed. They become anonymous entries that cannot be traced back to you.

We keep them because other people's records depend on them. A business's earnings are calculated from the orders it fulfilled, and a rider is paid for the deliveries they completed. Deleting those entries would change what other people earned, and what we owe them, because you closed your account — and would leave us unable to account for money that genuinely moved. The record of the transaction survives; the record of you does not.

7. How Long We Keep Your Data

  • While your account is open: for as long as you use PaspasFood
  • After you delete your account: identifying information is removed immediately; anonymised transaction records are kept indefinitely for accounting and tax purposes
  • Location data: a rider's live position is kept only for the duration of the job and is not retained afterwards
  • Support conversations: kept while the ticket is open and for a reasonable period afterwards, so a reopened issue still has its history

8. Location Data

We collect location data only when you explicitly grant permission through your device settings. Location data is used for address auto-fill, delivery tracking, and map-based features. You can revoke location permissions at any time through your device settings.

9. Push Notifications

We send push notifications for order updates, delivery status, and promotional offers. You can manage notification preferences through your device settings at any time.

10. Cookies and Website

Our website (paspasfood.com) is a static informational site that does not use cookies or tracking technologies. No personal data is collected through the website.

11. Children's Privacy

PaspasFood is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it.

12. Changes to This Policy

We may update this Data Policy from time to time. We will notify users of significant changes through the App or via email. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding your data, please contact us at support@paspasfood.com or call TBA.