Policy last updated:
This policy explains how Las'at Filfala processes information when you use its Android or iPhone customer app or website to browse the menu, create an account, place collection or delivery orders and track them, whether as a guest or an account holder.
Information we process
Information includes your name and phone number, and optional email, gender and profile photo; ordered items, quantities, options, notes, prices, status and payment method; saved addresses, coordinates and delivery instructions; and order chat messages and photos you send. We also process account, session and notification identifiers, language, platform, and necessary connection and security information.
Service operator and contact
Las'at Filfala operates the customer app, company app and https://lasatfilfala.com. For privacy questions and access, correction or deletion requests, contact info@lasatfilfala.com. Branch contact details are linked below. Never send support passwords or verification codes.
Information sources and purposes
You can browse without an account. Account creation requires phone verification; ordering requires a name and phone number and, for delivery, an address. Email, gender, photo and optional address details are not required to browse. Information comes from you, account and order activity, and your device with relevant permissions. We use it to verify identity, operate accounts, save carts and addresses, calculate prices and coverage, fulfil orders and payments, provide tracking, chat, notifications, restaurant offers and support, manage branches and sales, prevent misuse and meet legal obligations. Permission review and optional permissions can be deferred or declined; granting permission does not grant access to all device information.
Customer addresses and location
With permission, available precise or approximate location helps select an address, check delivery coverage and find nearby branches. You can select a map point or enter coordinates manually instead. Confirmed coordinates are sent to the service to check coverage and associate addresses and orders. Both permanent and quick addresses are saved: guest addresses stay on the device and signed-in customers' addresses are stored with their accounts. They can be removed from the address list. The customer app does not track customer location in the background. Maps, search and routes use Google Maps, Places and related services; Google may receive necessary queries, coordinates, IP addresses and technical information.
Delivery employee location in the company app
This concerns employees in the company app, not customer location tracking. With active assigned deliveries and location permission, precise location, accuracy, heading and capture time are sent to the service for tracking. The order holder can access location through the tracking link, as can authorized staff. On Android, a visible foreground location service may continue sharing while changing screens or locking the device, subject to operating-system restrictions. Sharing stops when no active assigned orders remain or the employee signs out. Location permission can be withdrawn in device settings.
Camera, photos and order chat
Camera or photo-picker access is used when you choose a profile photo or chat attachment; staff-selected files are used for content images. Selecting a photo does not grant access to the whole library, and camera permission does not automatically upload photos. Profile and chat images are resized and re-encoded to remove embedded location metadata before upload. Profile photos are accessible to the account holder and authorized customer-management staff. Order chat messages and images are accessible to authorized order participants and retained for fulfilment, support and disputes. We do not request contacts, microphone access or access to all device files. Never send card information, passwords or verification codes in chat.
Phone verification and notifications
The customer app uses Google Firebase Authentication. Requesting an SMS code lets Google/Firebase process the phone number, IP address and browser or device details needed for verification and abuse prevention. Supported devices may suggest the code without permission to read all SMS messages. Both apps use Firebase Cloud Messaging and, on supported iPhones, Apple's notification service for order, chat, offer and operational notifications according to the application and permissions. This involves Firebase installation IDs, notification routing identifiers or tokens, platform, language and account association when registered. Displaying notifications needs the relevant permission and can be disabled in device or browser settings.
Payment information
We record payment method, amounts, fees, payment status and transaction identifiers associated with orders. Account and chat interfaces do not request card numbers or security codes. When online payment through Moyasar is available, its payment flow opens; information provided directly there is subject to its privacy policy linked below. Do not send card information to support email or order chat.
Local storage, account security and biometrics
Language, appearance, cart and necessary usage information are stored locally. The website uses browser local and session storage; remembered sign-in on phones uses operating-system secure storage. Refresh sessions may remain valid for up to 365 days after their last successful renewal unless revoked. Signing out clears the local session and disables biometric sign-in in the app but does not delete the account. Optional fingerprint or face checks are performed by the device operating system; we do not receive fingerprint or face images or biometric templates. We use HTTPS, access controls and credential protection. Keep order tracking links private: someone holding a link may be able to view its tracking information.
Advertising and tracking
We do not sell personal information or use it for advertising tracking across other companies' apps and websites. Restaurant offers in the service and notifications are part of the service. The current version does not include a third-party advertising-network SDK or enable Google Analytics for Firebase; order and sales reports come from service records. External operational services may process technical and security information under their policies; this does not mean selling data or operating advertising tracking.
Retention and exceptions
We retain account details, addresses and photos while needed to operate the account, until you remove available data or account deletion is completed. Order, payment and chat information is retained as needed for fulfilment, support, disputes, security and legal obligations. After deletion, limited transaction, invoice or security records may be retained when required by law, fraud prevention or claims, restricted to that purpose, then deleted or de-identified when no longer needed. Retention depends on purpose and obligation; the account-deletion deadline does not authorize destroying records that must be kept. Providers may retain backups and security records during removal cycles described in their policies, without keeping an account available for use because a backup remains.
Account and data deletion within five business days
Customers can start from Profile → Request account deletion, or https://lasatfilfala.com/account-deletion/?lang=en, then sign in to verify ownership and submit. No additional call or email is needed after successful in-app submission. We complete deletion of the account and associated personal information from our active systems within five business days after ownership verification and confirm completion. This covers profile information, photo, addresses, sign-in and notification associations, and other associated data not required to be retained. Submission records a request for review and fulfilment rather than immediate deletion. Blocking or disabling an account or uninstalling the app is not a substitute for deletion. The legal-record and backup exceptions above still apply. If sign-in is unavailable, email info@lasatfilfala.com with your name and registered phone number, without verification codes. For company employee account information, contact the company administrator or privacy email for handling under permissions and employment-record requirements.
Your rights and withdrawing permissions
You can edit available account details, change or remove your photo, delete addresses, and request access, correction or deletion through the privacy email after ownership verification. Location, camera and notification permissions can be withdrawn in device or browser settings; notifications and biometrics can also be disabled in app settings where available. Denying a permission may prevent its feature without preventing menu browsing; an address can be selected manually. Clearing browser or app data may remove the local cart and guest addresses but does not automatically delete your account or server-side orders.
Children's privacy and policy updates
The service is not specifically designed for children. Accounts and orders should be managed by a person with the necessary capacity, or under parental supervision, as applicable law requires. Parents may contact the privacy email about information provided by a child without necessary permission, for verification and appropriate handling or deletion. We publish policy changes with the update date on this page and in the app, explain new purposes and obtain consent where required before use. For questions, contact info@lasatfilfala.com.