Privacy notice

• Your name and mobile number.
• For delivery: your address and landmark.
• For delivery, only if you choose to drop one: the pin you place on the map (the exact spot on the map, not your phone's location after you order).
• What you ordered, any notes, and the total.
• For GCash: the reference number you give, and the screenshot of your receipt if you send one.

• We keep your email address and your password. Your password is stored scrambled, so neither we nor anyone else can read it.
• We keep what you set up: your shop name, address, hours, menu, prices, promo codes and payment details you choose to show customers (such as a GCash number).
• If you turn on phone alerts, we keep the address your phone gives us so we can send you new-order alerts. You can turn alerts off at any time.
• We check every new shop before customers can see it, so we can see everything in your shop while we do.
• Your sign-in and approval emails are sent through Resend, an email service. They only handle your email address and the message.
• You can ask us to delete your shop and your account. We delete the shop, its menu and settings. Order records may be kept if the law or a dispute requires it.

Only to make and deliver your order, to confirm your payment, and to show you where your order is. For shop owners: to run your account and your shop. We do not sell your information and we do not use it for ads.

• The shop you order from, so it can prepare and deliver. Each shop sees only its own orders.
• The delivery rider or delivery service the shop uses, who get your name, mobile number, address and pin for that one delivery.
• OpenStreetMap draws the map. When you open it, your phone asks their servers for the map pictures of the area you are looking at.
• Our service providers who store the data for us: Supabase (database, in Japan), Vercel (hosting) and Resend (email). They may only handle it to run this service.
• Your receipt screenshot is read on your own phone. The picture is only uploaded when you tap send.
• The page that tracks your order is private: only people with your order code can open it.

The shop keeps order records for as long as it needs them to run its business. You can ask for yours to be deleted at any time.

Under the Data Privacy Act of 2012 you may ask to see what we hold about you, correct it, or have it deleted, and you may object to how it is used. You may also complain to the National Privacy Commission (privacy.gov.ph).

Write to us at joyfulshape.js@gmail.com. Please include your order code or your shop's web address if you have one.