Privacy Policy

1. Who we are

LyaiDeu is a delivery platform operating in Birendranagar, Surkhet, Karnali Province, Nepal. We deliver food, groceries, beverages and other everyday items from local partner stores. In this policy, "LyaiDeu", "we", "us" and "our" mean the LyaiDeu service, and "you" means the person using our website or Android app. You can reach us at [email protected] or 9769955973.

2. Information we collect

We only collect what we need to run the service. That includes:

Account details — your name, email address, phone number, date of birth and password (stored only as a secure hash, never in plain text). If you sign in with Google, we receive your name, email address and profile photo from Google.

Delivery details — the delivery addresses you save or enter at checkout, and any delivery instructions you add.

Orders and payments — the items you order, order totals, delivery fees, promo codes used, order status and your order history. We do not store card numbers, wallet PINs or other payment credentials; cash and wallet payments are handled by the payment provider or collected on delivery.

Photos you upload — a profile picture, and identity documents if you apply to become a delivery rider. Rider documents are stored in a private folder that only authorised staff can open.

Location — if you allow it, the app and website may read your device location to fill in your delivery address and show nearby stores. You can refuse or revoke this permission at any time in your device settings; the rest of the service still works, you just type the address yourself.

Messages — the content of messages you send us through the Contact page or the account deletion form.

Device and technical data — a push notification token for your device (so we can notify you about your order), the app version, and standard server logs such as IP address, browser type and pages requested, kept for security and troubleshooting.

3. How we use your information

We use your information to create and secure your account; to prepare, deliver and track your orders; to let you know when an order is confirmed, on the way or delivered; to handle support requests, refunds and complaints; to prevent fraud and abuse; to keep the service working and fix problems; and to send you occasional offers, which you can opt out of at any time.

We do not sell your personal data, and we do not show third-party advertising or use advertising trackers in the app.

4. Who we share it with

We share only what is necessary for the service to work:

Partner stores and riders — your first name, delivery address, phone number and the items ordered, so the order can be prepared and handed to you.

Google — if you choose "Sign in with Google", Google processes your sign-in and returns your name, email and profile photo to us.

OneSignal — our push notification provider receives a device identifier so it can deliver order notifications to your phone.

Our hosting and email providers — they store the website, database and support mailbox on our behalf.

Authorities — where we are legally required to disclose information, or where disclosure is necessary to protect someone's safety or our legal rights.

We do not share your data with advertisers or data brokers.

5. Cookies and local storage

We use one session cookie to keep you signed in and to remember your cart and preferences, plus your browser's local storage for small interface settings. We do not use advertising or cross-site tracking cookies. Clearing your browser data or logging out ends the session.

6. How long we keep it

Account details are kept while your account is open. Order records are kept for as long as needed for accounting, tax and dispute resolution. Support messages are kept until the issue is resolved and for a reasonable period afterwards. Server logs are kept for a short period. When you ask us to delete your account, we delete or anonymise your personal data as described on the account deletion page.

7. How we protect it

Passwords are hashed, traffic to the site and app is encrypted in transit (HTTPS), rider identity documents are kept outside the public web folder and served only to authorised staff, and access to the admin panel is limited to named staff accounts. No system is perfectly secure, but we take these steps to protect your data and we review them as the service grows.

8. Your rights

You can review and correct your details in your profile at any time. You can also ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete your account and the personal data linked to it;
• stop sending you marketing messages;
• withdraw a permission you previously granted, such as location or notifications.

To make a request, email [email protected] or use the account deletion page. We respond within 30 days.

9. Children and alcohol

LyaiDeu sells alcoholic beverages, so the service is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it. Alcohol products must not be purchased by, or delivered to, anyone under 18, and a rider may ask for age identification on delivery.

10. Where your data is stored

Our servers and service providers may store data outside Nepal. Where that happens, we require the provider to protect it to a standard consistent with this policy.

11. Links to other sites

The service may link to other websites, such as Google or a payment provider. Those sites have their own privacy policies, and this policy does not cover them.

12. Changes to this policy

We may update this policy as the service changes. The current version is always on this page, with the date shown at the top. If a change is significant, we will tell you in the app or by email.

13. Contact us

Questions about this policy or your data? Email [email protected], call 9769955973, or write to us in Birendranagar, Surkhet, Karnali Province, Nepal. We aim to reply within 30 days.