Effective date: 1 January 2025 Last updated: 8 September 2026
This Privacy Policy explains how Food Run Technologies (“Food Run”, “we”, “us”, “our”), operating in Pakistan, collects, uses, shares, and protects personal information when you use the Food Run mobile apps, website (foodrunpk.com), and related services (together, the “Services”).
Food Run is a multi-service marketplace in Pakistan. Customers can order food, groceries, pharmacy items, and courier deliveries. Riders deliver orders. Restaurants and stores (“Vendors”) list products and fulfil orders.
The Services are for users 18 years or older. By creating an account or using the Services, you agree to this Policy. If you do not agree, please do not use the Services.
1. Who this Policy covers
This Policy applies to:
Customers who browse, order, pay, and receive deliveries
Riders who apply, complete verification, and deliver orders
Vendors (restaurants and stores) who register and manage listings
Website and admin users who access Food Run online tools
Guests who browse without an account (limited data only)
2. Information we collect
We collect information in three ways: you give it to us, we collect it automatically, and we receive it from partners.
2.1 Information you provide
Account details: full name, mobile number, email address, password, and optional referral code
Profile and addresses: delivery addresses, city, area, street, building, and saved places
Orders: items ordered, special instructions, delivery notes, and order history
Support: messages, tickets, and any files you send to support
Rider application / KYC: CNIC number, driving licence number, vehicle type and number, emergency contact, service area, and photos (CNIC front/back, selfie, utility bill, bike registration, bike photo, licence document) plus your typed agreement name
Vendor details: store name, type, location pin, and registration information
Wallet activity: in-app wallet balance and transaction history (top-up and card payments may be limited until payment providers are live)
2.2 Information collected automatically
Device data: device model, OS version, app version, language, and similar technical data
Usage data: screens viewed, taps, crashes, and performance logs
Approximate identifiers: app instance IDs used for analytics, crash reporting, and push notifications
Network data: IP address and connection type when you use the Services
2.3 Location
If you grant location permission, we may collect precise or approximate location to:
suggest your city and delivery area
show nearby stores and estimate delivery
assign orders to riders and show live rider tracking to customers
help riders navigate to pickup and drop-off
You can turn location off in device settings. Some features (dispatch, live tracking, map pin for a shop) will not work without it.
2.4 Information from third parties
Google Sign-In: name and email if you choose to sign in with Google
Maps and places: map tiles, geocoding, and place search from Google Maps / Places
send marketing messages only where you have agreed, and you can opt out in app settings
prevent fraud, abuse, and security incidents
improve the app, fix bugs, and understand how features are used
comply with law, resolve disputes, and respond to lawful requests
4. How we share information
We do not sell your personal data to advertisers.
We share limited information only as needed to run the Service:
Vendors: order items, customer first name / contact details needed for fulfilment, and delivery notes
Riders: pickup and drop-off address, customer name and phone for that order, and order contents needed for delivery
Customers: rider first name, vehicle details, and live location while an order is in progress
Service providers: Google Firebase (auth, database, storage, notifications, analytics, crash reports), Google Maps, and payment processors when those features are enabled
Legal and safety: if required by law, court order, or to protect users, riders, vendors, or Food Run
Business transfers: if we merge, sell, or reorganise, data may transfer to the successor under this Policy
5. Payments
Cash on Delivery is currently the live checkout method. Wallet and card checkout may be shown as coming soon until Pakistani bank / JazzCash / EasyPaisa / card APIs are connected.
When electronic payments are enabled, card and wallet top-up data is processed by PCI-compliant payment partners. Food Run does not store full card numbers, CVV, or PIN on our servers.
6. Push notifications and communications
We use Firebase Cloud Messaging to send order, account, and (if enabled) promotional notifications. You can disable non-essential notifications in the app. Device settings can also block all push notifications. Transactional messages (OTP, order status) may still be sent by SMS or email where needed to run your account.
7. Cookies and similar technologies
The website and admin tools may use cookies or local storage for login, language, and basic analytics. The mobile apps use similar on-device storage (for example session tokens and preferences). You can clear app data or website cookies in your device or browser settings.
8. Data retention
Account profile: kept while your account is active
Orders and payments: kept for a reasonable period for support, refunds, accounting, and legal compliance
Rider KYC documents: kept while you are a rider and for a limited period after you leave, as needed for safety and regulatory review
Support tickets: kept as long as needed to resolve your issue and improve support
Crash and analytics logs: kept for a short operational period
When you delete your account, login access is removed immediately. We delete or anonymise personal data within 30 days, except records we must keep (for example completed orders for tax, fraud, or legal claims). See Account deletion for the full list.
9. Security
We use industry-standard measures including encrypted connections (HTTPS), Firebase Authentication, access-controlled cloud storage, and app integrity checks. No method of transmission or storage is 100% secure. Please keep your password private and do not share OTPs.
10. Your rights and choices
Subject to applicable law, you may:
access and update name, email, mobile, and addresses in the app
turn location and notifications on or off in device / app settings
delete your account in the app under Profile → Delete Account, or request deletion at Account deletion
We may need to verify it is you before we act on a request. We may refuse requests that are unlawful, abusive, or would break records we are required to keep.
11. Children’s privacy
The Services are only for users 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email privacy@foodrunpk.com and we will delete it.
12. International processing
Food Run is operated for users in Pakistan. Some processors (including Google Firebase and Google Maps) may store or process data on servers outside Pakistan. Where that happens, we rely on their contractual and security safeguards.
13. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top will change. Material changes may also be shown in the app or by email. Continued use after an update means you accept the revised Policy.
This document is provided for the Food Run product. It is not formal legal advice. Have a lawyer in Pakistan review it if you need a signed legal opinion.