Privacy Policy

1. Introduction

We dream of a world where good food doesn’t go to waste. At Daily Foodie (“Daily Foodie”, “we”, “us”) we’re on a mission to give surplus food a second chance and make quality meals more affordable, by connecting Users of our App with Stores that have surplus food.

This Privacy Policy (“Policy”) explains how we collect and process personal information from Users, Partners, and anyone else we interact with through the Platform. This Policy complies with, and facilitates the obligations required by, the South African Protection of Personal Information Act, No. 4 of 2013 (“POPIA”), as amended.

Please read this Policy together with any other privacy notice we may give you on specific occasions when we collect or process your personal information, so you understand how and why we’re using it. This Policy supplements those notices and doesn’t override them.

2. About this Policy

This Policy, which incorporates our Cookie Policy, is designed to help you understand our information practices depending on your relationship with us. It should be read together with any other applicable terms and conditions in place between you and us.

If you access our Platform from South Africa, the entity responsible for collecting your personal information is:

Daily Foodie (Pty) Ltd
6 Adamson Street, SE6, Vanderbijlpark
South Africa

Company registration number: 2026/508289/07

3. Terms of reference

To make this Policy more user-friendly, here’s what we mean by some of the key terms used in it.

• “App” refers to the Daily Foodie app that can be downloaded to your phone or tablet.
• “Cookie Policy” refers to the cookie policy applicable to users of the Platform.
• “Platform” describes our Website, App, and any online services and products together.
• “Store” or “Partner” refers to the businesses (e.g. bakeries, cafés, restaurants, grocers) using the Platform to make surplus food available for purchase.
• “Surprise Bag” refers to the discounted bags available for purchase in the App, filled with a mix of a Store’s surplus food items.
• “Daily Foodie” (and variously “we”, “us”, “our”) refers to Daily Foodie (Pty) Ltd, registration number 2026/508289/07.
• “Website” covers all domains on dailyfoodie.co.za.
• “User” refers to you as a consumer using the Daily Foodie Platform.

4. Information we collect from Users

4.1 Information needed to use the App

When you use the App, we collect some personal information about you as a User. Without it, we wouldn’t be able to provide the service you’ve asked for. This includes:

• Geo-location: your country and your precise or approximate location, depending on whether you choose to share your device location with us.
• Responses from trusted payment providers: we don’t collect or store your card details. When you place an order, we receive a payment confirmation from our payment processor, Peach Payments.
• Order and pickup information: when you order a Surprise Bag, we collect your name, and — if you’ve added them to your profile — your email and phone number, so we and the Store can identify you at collection and send you order updates.

We process this personal information because it’s necessary for performing our agreement with you to provide the Platform.

With respect to geo-location, we process this information based on your consent, which you give (and may withdraw at any time) in your device settings.

We may also process this personal information based on our legitimate interests to:

• provide, improve and develop our Platform;
• communicate with you; and
• provide, tailor, measure, and improve our marketing,

as further explained in section 6 of this Policy. Where required by law, we’ll ask for your consent before using your personal information for marketing purposes, including direct marketing communications.

4.2 Information you choose to give us

You may choose to give us additional personal information, such as:

• Additional profile information: name, phone number, email, your gender, birth date, and preferences you choose to share with us, e.g. favourite Stores.
• Other information: such as when you fill in a form, respond to a survey, or contact our support team — which may include information you volunteer, including health-related information such as allergies, if you choose to share it.

Our legal basis for this processing is our legitimate interest, or, where required by law, your consent (which we’ll specifically ask for where needed).

We will never ask for or require that you submit sensitive personal information (also known as special categories of personal information) to us. However, if you choose to share health information — e.g. allergy information — with our support team on your own initiative, we process it based on our legitimate interest in being able to assist you safely, and, where necessary, to establish, exercise or defend a legal claim.

4.3 Information automatically collected when you use the Platform

• Usage information: the pages or content you view, searches you make, and orders you place.
• Log data and device information: IP address, access dates and times, hardware and software information, device type, unique device identifiers, crash data, and the pages you viewed before or after using the Platform.
• Cookies and similar technologies: as described in our Cookie Policy.

We process this personal information based on our legitimate interests to provide, improve or develop our Platform, as further explained in section 6.

4.4 Information collected from recipients of our email communications

If we send you email communications (e.g. order confirmations or, where you’ve opted in, marketing updates), our email service provider may record standard delivery metrics such as whether an email was opened and which links were clicked. We use this information to understand which communications are useful to you and to improve future emails. We process this based on our legitimate interest in sending you relevant, well-targeted communications.

5. Information we collect from our Partners and business contacts

5.1 Information needed to use the Platform

When you register a Store account to make Surprise Bags available for order, we collect some personal information about you as a contact person for the Store, including:

• Profile information: name, email address, phone number, Store address, Store name, type of business, and your role at the Store.
• Tax and banking information: your Store’s VAT number and bank details, for payouts.

If you’re an individual Store owner, we process this because it’s necessary for performing our agreement with you. If you’re an employee of a Store, our legal basis is our legitimate interest in being able to provide the Platform to your business.

5.2 Information automatically collected when using the Platform

The same categories described in section 4.3 (usage information, log/device data, cookies) also apply when you use the Store side of the Platform, processed on the same legitimate interest basis.

5.3 Information you choose to give us

Information you provide as part of email correspondence, support queries, or any other interaction you have with us on your own initiative. Our legal basis is our legitimate interest, or, where required by law, your consent.

6. How we use the information we collect

6.1 Provide, improve, and develop the Platform

For Users, this includes:

• creating and managing your account, and processing your orders;
• personalising your experience based on your search history, order history, and preferences, e.g. showing you nearby Stores on the map;
• performing analytics, debugging, and conducting research to keep the Platform working well.

For Store/Partner users, this includes:

• creating and managing your Store’s account, and processing orders for your Surprise Bags;
• notifying you of orders, payments, and required actions;
• notifying Users of updates from your Store, e.g. a cancelled order;
• managing payouts for Surprise Bags sold.

6.2 Communicate with you

• responding to your emails or support enquiries;
• sending you notifications of a technical or legal nature, e.g. if we update this Policy, or if a Store cancels your order;
• sending you notifications and updates via email, SMS, and/or push notification, where you’ve opted in to receiving them.

6.3 Provide, tailor, measure, and improve our marketing

Where you’ve opted in, we may use your information to send you promotional messages about Daily Foodie, personalise those messages based on your preferences, and measure how effective they are. We do not currently share your personal information with third-party advertising networks for targeted or cross-context behavioural advertising. If that changes, we’ll update this Policy and ask for your consent first where required by law.

7. Reasons we share information

7.1 Sharing with your consent or at your direction

Where you give consent, we share your information as described at the time — for example, if you choose to link a third-party account to Daily Foodie, or take part in a promotional activity with a Partner.

7.2 Data processors

We share personal information with service providers who help us run the Platform, including to:

• process payments for orders and refunds (Peach Payments);
• store and manage our database and user authentication (Supabase);
• provide hosting and infrastructure for the Platform;
• render maps and calculate distances to Stores near you (Mapbox);
• deliver push notifications and transactional emails;
• provide customer support tooling.

Whenever we use a service provider to process personal information on our behalf, we make sure they’re contractually bound to protect it, by way of a data processing agreement.

7.3 Third-party mapping services

We use Mapbox to display Stores and Surprise Bags on a map and to calculate your distance to them. If you allow location access, your approximate or precise location may be shared with Mapbox for this purpose, based on your consent as described in section 4.1. Mapbox’s own privacy practices are described at mapbox.com/legal/privacy.

7.4 Location data (GPS and coordinates)

We may collect and process your real-time or approximate location data, including GPS coordinates, when you use the Platform. This is used to:

• show you Surprise Bags and Stores near you on the map;
• improve our services and understand where our Users are, in aggregate.

Location data is only collected:

• where you’ve explicitly granted permission through your device settings; and
• while you’re actively using location-based features of the app.

You can withdraw this permission at any time by disabling location access for the app in your device settings. We will not collect precise location data without your permission, and we handle it in accordance with POPIA.

7.5 Public authorities

We may disclose your personal information to courts, law enforcement, or governmental authorities, but only if and to the extent we’re required or permitted to do so by law.

7.6 Business transfers

If we’re involved in a merger, acquisition, or reorganisation, your personal information may be transferred as part of that transaction. This Policy will continue to apply to your information after any such transfer.

8. International data transfers

We may process your personal information outside of South Africa, for example for cloud storage or hosting. Whenever we transfer personal information out of South Africa, we ensure a similar degree of protection is applied — either because the destination country has data protection laws comparable to South Africa’s, or because we’ve put contractual safeguards in place with the service provider. Contact us if you’d like more information about a specific transfer.

9. Storage period

We retain personal information for as long as needed for the purpose it was collected for, and consistent with applicable law. This depends on:

• how long you keep an account with us and keep using the Platform;
• whether we’re legally required to keep records of a transaction for a certain period; and
• whether retention is advisable in light of a legal claim, dispute, or regulatory matter.

10. Data security

We’ve put in place appropriate technical and organisational measures — including encryption in transit and access controls on our database — to protect your personal information from accidental or unlawful destruction, loss, alteration, or unauthorised access. We only use service providers who implement appropriate security measures in line with industry practice.

11. Your rights

Subject to the conditions and exceptions in POPIA, you have the right to:

• Access: ask us to confirm and give you access to the personal information we hold about you.
• Rectification: ask us to correct inaccurate or outdated information.
• Erasure: ask us to delete personal information we’re no longer entitled to hold.
• Restriction and objection: ask us to restrict our processing of your information, or object to it.
• Data portability: ask to receive your personal information in a structured, commonly used, machine-readable format.
• Withdraw consent: withdraw any consent you’ve given us at any time, without affecting the lawfulness of processing carried out before withdrawal.

You won’t have to pay a fee to exercise these rights, unless your request is clearly unfounded, repetitive, or excessive — in which case we may charge a reasonable fee or decline the request. We may ask you for information to help us confirm your identity before acting on a request. We try to respond to all legitimate requests within one month.

11.1 Easy access in the App

You have direct control over your own information from your account settings in the App, including options to update your profile, request a copy of your data, or delete your account.

11.2 Still have questions, or want to complain?

If the in-app options haven’t resolved your query, contact us at privacy@dailyfoodie.co.za. You always have the right to lodge a complaint with the Information Regulator of South Africa if you’re not satisfied with our response — though we’d encourage you to reach out to us first so we can try to help.

12. Children’s privacy

Our Platform is intended for Users aged 18 and older, and we don’t knowingly collect personal information from anyone under 18. If you believe we might hold information from or about a child, please contact us using the details in section 14.

13. Changes to this Policy

We may update this Policy from time to time. We’ll update the “Last updated” date above, and if we make a material change, we’ll notify you on the Platform or by email.

14. Contact information

If you have any questions about how we process your personal information, please contact our privacy team:

Daily Foodie (Pty) Ltd (registration number 2026/508289/07)
6 Adamson Street, SE6, Vanderbijlpark
South Africa

Email: privacy@dailyfoodie.co.za