This Privacy Policy explains how Home Bites (“Home Bites”, “we”, “us”, or “our”) handles your information when you use the Home Bites mobile application and website (together, the “Service”). By using the Service you agree to this Policy. If you do not agree, please do not use the Service.
1. Who we are
Home Bites is a marketplace that connects buyers with independent home-based bakers — who prepare homemade food, from everyday meals and snacks to cakes and celebration orders — in Sri Lanka. We act as the platform that facilitates browsing, ordering, holding payments safely, and handover confirmation between buyers and sellers.
2. Information we collect
We only collect data we need to run the Service. The table below summarises the main categories — it mirrors the disclosures in our Google Play Data Safety form and Apple App Privacy details.
| Category | Examples | Why we collect it |
|---|---|---|
| Account & profile | Name, email, phone number, password (stored securely, never in plain text), role (buyer/seller), profile photo | Create and secure your account, sign you in |
| Seller / KYC data | Business name, address, NIC/ID image, selfie, bank details (sellers only) | Verify sellers and enable payouts |
| Orders & requests | Cart items, custom requests, delivery address, order notes, order history | Process and deliver your orders |
| Payment data | Bank slip image, payment reference, payment status | Verify payments and hold them safely (we do not store full card numbers) |
| Wallet & rewards | Wallet credit balance and history, referral code, bonuses earned | Operate refunds-to-wallet, referrals, and promotions |
| Location | Approximate or precise device location (only with your permission) | Set an accurate delivery point and show nearby bakers |
| Photos & media | Images you upload (food, bank slips) via camera or gallery | Listings, order proof, and payment verification |
| Device & technical | Device model, type and manufacturer, OS and version, app version and build, language/locale, time zone, push token, IP address, crash logs | Deliver notifications, keep the app reliable and secure, and detect fraud or abuse such as duplicate or fake accounts |
| Reviews & content | Ratings, reviews, messages you send | Operate ratings and buyer–seller communication |
The device and technical details above are limited to standard, first-party information your device exposes to apps. We do not collect your device’s advertising identifier, and we do not track you across other companies’ apps or websites. Each phone number may be linked to only one account.
We do not knowingly collect data from children under 13 (or the minimum age in your country). The Service is intended for adults who can lawfully place food orders.
3. How we use your information
- To create your account, authenticate you, and operate the marketplace.
- To process orders, custom requests, payments, safekeeping, and handover confirmation with a one-time code.
- To verify sellers and reduce fraud and abuse.
- To send transactional and order-status push notifications and emails.
- To provide customer support and resolve disputes.
- To improve, debug, and secure the Service (analytics and crash diagnostics).
- To comply with legal obligations.
We do not sell your personal information, and we do not use your data for third-party advertising.
4. How we share information
We share data only as needed to run the Service:
- Between buyers and sellers: when you place an order or post a request, the relevant seller receives the details needed to fulfil it (e.g. items, delivery address, contact for delivery). Sellers’ store and menu details are shown to buyers.
- Service providers who act on our behalf under confidentiality obligations, such as:
- Secure hosting and storage for the app and the images you upload.
- A push-notification provider that delivers order updates to your device.
- Reliability and diagnostics tools that help us keep the app stable and fix crashes.
- Legal & safety: to comply with law, enforce our Terms, or protect the rights and safety of users and the public.
- Business transfers: if we are involved in a merger, acquisition, or asset sale, data may be transferred under this Policy.
5. Device permissions
The app requests these permissions only for the features that need them; you can decline or revoke them in your device settings:
- Location — to set your delivery point and find nearby bakers.
- Camera & Photos — to upload food images and bank slips.
- Notifications — to send order updates and offers.
6. Data retention
We keep your information for as long as your account is active or as needed to provide the Service. After account deletion we remove or anonymise personal data within 30 days, except where we must retain certain records (e.g. transaction and tax records) to comply with legal obligations or resolve disputes. See Delete Your Account.
7. Security
We use industry-standard safeguards — encryption in transit, securely stored passwords, and access controls. Held funds are only released after an order is confirmed received with a one-time code. No system is perfectly secure, so we cannot guarantee absolute security, but we work hard to protect your data.
8. Your rights & choices
- Access & update: edit your profile in the app at any time.
- Delete: delete your account in-app or via our deletion page.
- Permissions: control location, camera, photos, and notifications in device settings.
- Marketing: opt out of non-essential notifications in app settings.
Depending on where you live, you may also have rights to access, correct, port, or restrict processing of your data. Contact us to exercise them.
9. International users
The Service is operated from Sri Lanka. If you access it from elsewhere, your information may be processed in countries with different data-protection laws.
10. Changes to this Policy
We may update this Policy from time to time. We will post the new version here and update the “Last updated” date. Material changes may also be notified in the app.
11. Contact us
Questions about this Policy or your data? Email us at privacy@homebites.app or support@homebites.app. Postal: Kandy, Sri Lanka.
Related: Terms of Service · Delete Your Account · Support