User Data Policy

Last updated: September 1, 2026

This policy explains what data the HiewLeaw platform — the Customer, Merchant, and Rider apps (together, the "Apps") — collects, why we collect it, and how it is used, shared, and protected. By using any HiewLeaw app, you agree to the collection and use of information as described here.

1. Information We Collect

• Account information: your phone number (used to sign in via Firebase Authentication), name, and profile photo.
• Location data: precise (GPS) and approximate location, used to show nearby shops, calculate delivery distance, set drop-off points, and route riders. Collected only while the relevant app is in use.
• Photos and camera: images you choose to capture or upload, such as payment slips for order verification, proof-of-delivery photos, and profile pictures.
• Order and payment information: order contents, special instructions, order status, chosen payment method (PromptPay QR or cash on delivery), and PromptPay payment slip images when applicable. HiewLeaw does not collect or store bank account numbers or card details — PromptPay payments are made directly between customer and merchant, and cash on delivery is settled in person with the rider or merchant.
• Communications: support requests you send us.
• Ratings and reviews: ratings and feedback given to or received from shops, riders, and customers.
• Device and usage data: device model, operating system, app version, push-notification token, crash reports, and basic usage analytics (via Firebase).

2. How We Use Your Data

• To operate core features: showing nearby shops, placing and tracking orders, generating payment QR codes, and dispatching riders.
• To enable communication between customers, merchants, and riders needed to fulfill an order.
• To send order-related push notifications (e.g. order accepted, rider arrived).
• To maintain trust and safety, including ratings, dispute handling, and fraud prevention.
• To diagnose crashes, fix bugs, and improve app performance and reliability.

3. How We Share Your Data

We do not sell your personal data. We share data only as needed to run the platform:

• Between platform participants: a customer's name, order, drop-off location, and payment slip are shared with the relevant merchant and rider solely to fulfill that order.
• Service providers: we use Google Firebase for authentication, notifications, crash reporting, and analytics. These providers process data on our behalf under their own security commitments.
• Legal reasons: if required by law, regulation, or valid legal process.

4. Data Retention

We retain account and order data for as long as your account is active or as needed to provide the service, resolve disputes, and meet legal or accounting obligations. Payment slip images are retained only as long as needed to verify and resolve the related order.

5. Your Rights and Choices

• You can review and update your profile information from within the app.
• You can request access to, correction of, or deletion of your personal data by contacting us below.
• You can disable location or camera/microphone access in your device settings, though this may limit core app functionality.
• You can request account deletion at any time.

6. Security

We use industry-standard safeguards, including encrypted connections and access controls, to protect your data. No method of transmission or storage is 100% secure, and we work to continually improve our practices.

7. Children's Privacy

HiewLeaw apps are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Apps after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

Questions about this policy or your data? Email us at info@hiewleaw.com.