Privacy Policy

Who we are

Gu Zao Wei (202503051002) is responsible for your personal data in this app. The app and its servers are run for us by Inove Sdn Bhd, which processes your data only on our instructions.

What we collect

• Your mobile number — to sign you in with a one-time SMS code.
• Your name, and optionally your birthday, gender and preferred language — for your member card and birthday treats.
• Your orders: dishes, pickup time, amounts, receipts and pickup status.
• Your points, vouchers, and a referral code if you entered one.
• A notification token for your device, if you allow notifications.
• Technical records our servers keep for security, such as IP address and request times.

What we do not collect

We never see or store your card or bank details: payments are made on the syok2pay payment page. We do not use advertising trackers, and we do not sell your data.

How we use it

• To create and secure your account and sign you in.
• To take, prepare and hand over your pickup orders, and to show their status.
• To give and redeem points, vouchers and referral rewards.
• To send you order updates and, if you allow them, shop news and offers.
• To prevent fraud, keep records required by law, and resolve disputes.

Who we share it with

Only with the service providers the app needs to work:

• Inove Sdn Bhd — runs the app, the servers and the shop's point-of-sale system.
• iSMS Malaysia — sends your sign-in codes by SMS.
• syok2pay — processes your payments and refunds.
• Google Firebase Cloud Messaging — delivers notifications to your device.
• Authorities, where the law requires it.

How long we keep it

We keep your account while you use it. When you delete your account we remove your name, phone number, email, birthday and device tokens, and your account can no longer be used. Receipts and transaction records are kept for seven years because Malaysian tax law requires it; they are no longer linked to your name or number.

Your choices and rights

• See and correct your name, birthday and language in the app under Me → Profile.
• Turn notifications off in your phone's settings at any time.
• Delete your account in the app under Me → Profile → Delete account, or by emailing us.
• Ask us for a copy of your data, or to correct it, by emailing gzw.kitchen@gmail.com.

Security

Data is sent over encrypted connections, sign-in uses one-time codes, and payment keys are stored encrypted. No system is perfectly secure; if a breach affects you, we will tell you.

Children

The app is not meant for children under 13. If you believe a child has signed up, contact us and we will delete the account.

Changes

If we change this policy we will update the date above and, for important changes, tell you in the app.