Privacy Policy
Last updated: March 2026
Summary: We collect only the data necessary to process and deliver your food orders. We never sell your personal data to third parties.
1. Who We Are
Akl Baladi ("we", "our", "us") is a home-based Egyptian food delivery service operating in Berlin, Germany. We can be contacted at hello@akl-baladi.de.
2. Data We Collect
When you use the Akl Baladi app, we collect the following information:
- Account information: full name, email address, phone number
- Delivery address: street, house number, postal code, city, optional door/entrance pin
- Order data: items ordered, delivery date and time slot, total price, promo codes used
- Device data: device token for push notifications (FCM)
- Authentication data: if you sign in via Apple or Google, we receive only the name and email they provide
- Communications: messages sent through the in-app chat
We do not collect payment card details. All current orders are cash-on-delivery only.
3. How We Use Your Data
- To create and manage your account
- To process, fulfil, and deliver your orders
- To send you order status push notifications and emails
- To respond to your messages and support requests
- To improve our service and menu based on order patterns
- To comply with legal obligations under German and EU law
4. Legal Basis (GDPR)
We process your data under the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR) – to fulfil your orders
- Legitimate interest (Art. 6(1)(f) GDPR) – to improve our service and prevent fraud
- Consent (Art. 6(1)(a) GDPR) – for marketing communications (you can opt out at any time)
5. Data Sharing
We do not sell your personal data. We share data only with:
- Google Firebase / Firestore – cloud database and authentication (servers in Europe, Frankfurt region)
- Resend – transactional email delivery
- Apple / Google – only when you choose to sign in via their services
6. Data Retention
We retain your account data for as long as your account is active. Order records are kept for up to 3 years for legal and tax compliance. You may request deletion at any time (see Section 8).
7. Cookies and Tracking
The Akl Baladi mobile app does not use cookies. The app does not contain any advertising trackers or analytics SDKs that share data with third parties.
8. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability – receive your data in a machine-readable format
- Withdraw consent at any time for consent-based processing
To exercise any of these rights, contact us at hello@akl-baladi.de. We will respond within 30 days.
9. Data Security
All data is stored in Google Firebase with encryption in transit (TLS) and at rest. Access to our admin systems is protected by authentication and App Check. We regularly review our security practices.
10. Children's Privacy
The Akl Baladi app is not directed at children under 16. We do not knowingly collect data from users under 16. If you believe we have inadvertently collected such data, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the revised policy.
12. Contact
For any privacy-related questions or requests:
