Privacy Policy

1. Introduction

Welcome to the BURR mobile application ("App"), operated by Beyin Digital Technology Limited, United Arab Emirates ("we", "us" or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the App. Please read it carefully. If you do not agree with this Privacy Policy, please do not use the App.

2. Information We Collect

We collect information that you provide directly, information that is collected automatically when you use the App, and limited payment information.

• Full name — collected during account registration to personalise your experience and process orders.
• Email address — used for account creation, order confirmations and customer support communications.
• Phone number — required to verify your account with a one-time password (OTP) sent by WhatsApp or SMS, and for delivery coordination.
• Delivery addresses — the addresses you save for order delivery.
• Problem reports — what you write when you report a problem with an order, and any photos you choose to attach to it.
• Gift recipients — the name and phone number of the person you choose to send a gift to.
• Location data — only as described in Section 4.
• Device information — device type, operating system version and device identifiers, for app functionality and crash reporting.
• Push notification tokens — used to send order updates and, if you allow them, offers and news; collected only when you grant notification permission.
• App usage data — interaction patterns, feature usage and performance metrics, to improve the App.
• Payment card details — processed exclusively by our payment processors, Stripe, Inc. and Paymob, both PCI-DSS certified. We never store, process or have access to your full card number, CVV or expiry date.
• Apple Pay and Google Pay — processed through Apple’s and Google’s payment systems. We receive only a transaction confirmation and a token, not your card details.
• Wallet top-up and purchase history — records of amounts added to your in-app wallet and of your orders, for bookkeeping, loyalty points and customer support.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders, including delivery coordination.
• Verify your identity and secure your account through OTP verification.
• Sort branches by distance while the App is open and, only if you turn it on, tell you when you are near a branch (see Section 4).
• Send push notifications about your orders (for example, “Your order is ready for pickup” or “Your order is out for delivery”).
• Manage your loyalty points, rewards tier and achievements.
• Process payments and wallet top-ups securely through Stripe or Paymob.
• Send offers and exclusive rewards, only with your notification consent.
• Handle the problem reports you submit and respond to support requests.
• Improve the App, our services and your experience.
• Comply with legal obligations and protect our rights.

4. Location Services

Location permission is optional. You can use the App without it, although branches will then not be sorted by distance. You can change location access at any time in your device Settings.

While the App is open (foreground location), and only if you allow it, we use your location to sort branches by distance and show you the nearest one. If location access is already granted when you place an order, your location at that moment is attached to the order so the branch can fulfil it.

Background location is used only if you turn on “Tell me when I am near a branch” in the App’s Notifications settings. This setting is off by default, and your device asks for your permission separately before it can work. When it is on:

• The App registers geofences with your phone’s operating system around our branches, with a default radius of about 200 metres. The operating system detects when you enter one.
• When your phone enters a geofence, the App sends a single check to our server. Your coordinates are not stored — only your distance from that branch at that moment.
• Our server may then send you a notification, at most once every 12 hours per branch, and only while offers and news notifications are turned on.
• There is no continuous tracking and no history of your routes.
• Turning the setting off removes the geofences from your device.

5. Push Notifications

You can manage notification preferences at any time in the App’s Notifications settings or in your device Settings. Turning notifications off does not affect your ability to use the App or make purchases.

With your permission, we send push notifications for:

• Real-time order status updates (confirmed, ready for pickup, out for delivery, delivered).
• Loyalty rewards and tier upgrades.
• Offers, news and limited-time promotions, if offers and news notifications are on.
• A reminder when you are near a branch, only if you have turned that setting on (see Section 4).

6. Photo Library

The App does not use your camera. It asks for access to your photo library only when you choose to attach photos to a problem report about an order, and only the photos you select are uploaded. The App never saves anything to your photo library, and there are no profile pictures.

This permission is entirely optional. Attached photos are uploaded to our secure servers and are used only to handle your report.

7. Contacts

The App does not read your address book. When you choose a gift recipient, you can open your device’s system contact picker. Only the name and phone number of the contact you pick are used, to send that gift. Your address book is never uploaded.

8. Payment Processing and Security

All payment transactions are processed by Stripe, Inc. or Paymob, both certified PCI service providers. Which processor handles a payment depends on the payment method you choose.

For more information, see https://stripe.com/privacy and https://paymob.com/privacy-policy. In short:

• Your card information is encrypted and transmitted directly to the processor’s servers.
• We never store full credit or debit card numbers on our servers.
• Apple Pay and Google Pay transactions use tokenised payment methods for additional security.
• Wallet balances and transaction history are stored securely in our database with encryption at rest.

9. Data Sharing and Third Parties

We do not sell, rent or trade your personal information. We share your data only with:

• The store you order from — the order details and the contact information needed to fulfil your order and handle any problem report about it.
• Stripe, Inc. and Paymob — for secure payment processing.
• Our cloud hosting provider — for secure database hosting and application infrastructure.
• Delivery partners — limited to the delivery address and order details needed to fulfil your order.
• Legal authorities — when required by applicable law, regulation or legal process.

10. Data Security

We use industry-standard security measures to protect your personal information:

• All data transmitted between the App and our servers is encrypted using TLS 1.2 or later.
• Database encryption at rest using AES-256.
• Access controls that ensure users can access only their own data.
• OTP-based authentication to prevent unauthorised access.
• Regular security reviews and monitoring.

11. Account Deletion

You can delete your account at any time. In the App, open Profile, tap “Delete my account” and confirm by following the on-screen steps.

When your account is deleted, the data listed below is permanently removed within 30 days. We may retain certain records where the law requires it (for example, financial transaction records for tax and audit purposes), even after your account is deleted.

• Your profile information (name, email address, phone number).
• Your order history.
• Your saved addresses.
• Your loyalty points and tier status.
• Your wallet balance (any remaining balance is forfeited).

12. Your Rights

To exercise any of the rights below, contact us at [email protected].

Depending on where you live, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data (see Section 11).
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to our processing of your personal data.
• Right to withdraw consent — withdraw consent you have given at any time.

13. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

14. International Data Transfers

Your information may be transferred to and processed in countries other than the United Arab Emirates, including countries where our service providers (Stripe, Paymob and our hosting provider) maintain their servers. We make sure appropriate safeguards are in place for such transfers, including contractual data protection obligations and compliance with applicable data protection regulations.

15. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy:

• Account data — kept while your account is active, and deleted within 30 days of an account deletion request.
• Order history — kept for 3 years for customer support and legal compliance.
• Payment records — kept for 7 years as required by financial regulations.
• Analytics data — aggregated and anonymised after 12 months.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will tell you about material changes by publishing the updated policy, updating the “Last updated” date and, if you have notifications turned on, sending a push notification. Continuing to use the App after a change means you accept the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns or requests about this Privacy Policy or how we handle your data, contact us:

• Email: [email protected]
• Company: Beyin Digital Technology Limited
• Address: United Arab Emirates