Privacy Policy

PL8ED ("PL8ED", "we", "us") runs a marketplace at pl8ed.app and in the PL8ED mobile apps that connects customers with local home cooks. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. We handle your information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Information we collect

Information you give us:

• Account details: your name, email address, password (stored hashed) and phone number.
• Delivery and pickup addresses you enter when placing an order.
• Orders, reviews and messages you send through PL8ED.
• For cooks: kitchen name, menu items and photos, cooking schedule, and the business and food-safety documents you submit for verification.

Information we get when you sign in with Google or Apple:

• Your name, email address and, if available, profile picture, as shared by your Google or Apple account. We only request these basic profile scopes. We do not access your contacts, Gmail, Drive, calendar or any other Google data.

Information collected automatically:

• Your approximate location, only if you allow it, to show cooks near you.
• Device and browser information, and a push notification token if you turn on notifications.
• Cookies that keep you signed in and remember your preferences. We do not use advertising cookies.

How we use your information

• To create your account and sign you in, including with Google or Apple.
• To take orders, process payments and connect customers with the cook they ordered from.
• To send order updates and account emails, such as confirmations and password resets, by email, push notification, SMS or WhatsApp.
• To verify cooks and their food-safety registration.
• To keep PL8ED secure, prevent fraud, and fix and improve the service.

We do not sell your personal information, and we do not use it for advertising. Information received from Google APIs is used only to sign you in and set up your account, in line with the Google API Services User Data Policy, including its Limited Use requirements.

Who we share it with

• Cooks and customers: when you order, the cook sees your name, order and the delivery or pickup details needed to fulfil it. Customers see a cook's kitchen name, menu and pickup area.
• Service providers that run parts of PL8ED for us: Supabase (accounts and database), Vercel (hosting), Stripe (card payments; we never see or store your full card number), Resend (email), Twilio (SMS and WhatsApp) and Google or Apple (sign-in and push notifications). Some of these providers store data outside Australia, including in the United States.
• Authorities, if the law requires it or to protect the safety of our users.

How long we keep it

We keep your information while your account is open. When you delete your account, we delete or anonymise your personal information within 30 days, except order and payment records we must keep for tax and legal reasons (usually up to 7 years).

Security

We protect your information with encryption in transit, hashed passwords, and access controls that limit who can see your data.

Your choices and rights

• You can view and update your account details at any time in the app.
• You can ask for a copy of your information, or ask us to correct or delete it, by emailing us.
• You can turn off notifications and location access in your device settings.
• If you signed in with Google, you can remove PL8ED's access at any time at myaccount.google.com/permissions.
• If you're unhappy with how we handled a privacy concern, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Children

PL8ED is not meant for children under 16, and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update the date at the top of this page and, for important changes, let you know by email or in the app.

Contact

For any privacy questions or requests, email us at support@pl8ed.app.