Privacy Policy

We collect the information we need to run your account and get your orders to you. That includes your name, phone number, email, and (if you sign in with Google or Apple) the basic profile info those sign-in providers share with us.

When you place an order we keep a record of what you ordered, where it was delivered, and how you paid. If you let us use your location, we use it to show nearby restaurants and to track delivery. We don't track your location when the app is closed.

If you send us a photo, we keep it. That happens in two places: evidence you attach to a support claim, and the picture of your delivery bag if you use Scan & Earn.

We also collect basic technical details: device type, OS version, app version, crash reports, and your IP address. Your IP address is used to name the city in a "new sign-in" email so you can spot an account takeover. Your phone also carries an advertising identifier, and the Ads and tracking section explains when that is used.

Your info is used to place and deliver orders, send order updates by push, SMS or email, run customer support, prevent fraud, and improve the app. If you opt in, we may also send you promos and reward updates. You can turn those off at any time in Notification Settings without losing the rest of the account.

A few things are done by automated systems rather than by a person. Review text is scored for sentiment so we can spot a restaurant going downhill. A support claim with a photo is analysed before a human looks at it. Neither one decides anything on its own: a refund, a suspension or an account closure is always a decision a person makes.

Restaurants get your name, the order itself, and any delivery or allergy instructions you wrote, so they can prepare your food. They do not get your address, your phone number, or your orders from anywhere else.

Drivers get the delivery address, your name, and a way to reach you while they are delivering. Voice calls happen inside the app, so a driver does not get your account phone number. The one exception is deliberate: if you entered a separate number for whoever is receiving the order, the driver is shown that number at the door, because they may need to call it to hand the food over.

Beyond that, your information goes only to the companies listed in the next section, which handle it on our behalf and under contract.

We do not sell your personal information, and we do not hand it to data brokers. We do show ads, and the Ads and tracking section says exactly what each ad platform receives.

These are the service providers Taeam actually uses today, what each one receives, and why. If we add one that receives personal information, this list changes with it.

• Supabase (United States): the database and sign-in system. Holds your account, your addresses and your order history.
• Railway (United States): runs our servers.
• Cloudflare: serves this website and filters malicious traffic.
• Stripe: takes payments. Stripe sees your card details; we never receive or store your full card number.
• Google Firebase: delivers push notifications and collects crash and usage analytics.
• Google Maps and Places: address search, map display and delivery routing.
• CARTO: the map images on this website. Your browser downloads them straight from CARTO, so CARTO receives your IP address.
• Aladhan: calculates the prayer times we show. Receives the location the times are for.
• Google AdMob (United States): the rewarded video ads in Watch & Earn.
• Google Sign-In and Apple Sign in: only if you use them to sign in.
• OpenAI (United States): processes your Arbaab chat messages, your support live chat messages with the details of your own recent orders, the text of a support claim, and any photo you attach to a support claim or to Scan & Earn.
• Google Gemini (United States): also processes Arbaab chat messages, and scores review text.
• Twilio (United States): sends our SMS, and bridges a restaurant's phone to your app when a restaurant calls you about an order.
• Agora (United States): carries the in-app voice calls between you and your driver.
• Resend (United States): sends our email.
• Upstash (United States): a short-lived cache holding session and role data.
• Meta: the pixel on this website. See Ads and tracking.
• ipwho.is: receives your IP address so a "new sign-in" email can name the city.
• Open-Meteo: receives an approximate location for the weather shown on the app's home screen.

Each of these is allowed to use your information only to do the job we hired them for.

Taeam is an Alberta company, but our database and most of the services above run on servers in the United States. Our main database is hosted in Ohio.

That means your personal information is stored and processed outside Canada. While it is there it is subject to the laws of that country, and United States courts, law enforcement and government agencies can apply to get access to it under United States law. We tell you this because Alberta's PIPA requires it, not because we expect it to happen.

Our obligations to you under Canadian and Alberta privacy law do not change because a server sits somewhere else. If you would rather not have your information stored this way, the honest answer is that you should not use Taeam, because there is currently no version of the service that avoids it.

In the app. Ads appear in one place: the Watch & Earn card in Rewards, where you can choose to watch a short video to earn points. Nothing plays unless you tap it. Those ads come from Google AdMob, and when you watch one Google receives your device's advertising identifier, your approximate location and general device information. Google uses that to choose the ad, to check it really played, and, depending on your device settings, to personalise ads across other apps. That is third-party advertising, and an earlier version of this policy wrongly said Meta was the only ad platform involved.

You control that identifier. On iOS we show Apple's tracking prompt when you first open the app, and if you decline it is not shared; you can change your mind under Settings, Privacy & Security, Tracking. On Android you can reset or delete the advertising ID under Settings, Privacy, Ads. Declining costs you nothing: Watch & Earn still pays the same points.

On this website. We run the Meta pixel, which reports page views and waitlist signups back to Meta so we can measure our ads. It never sends your email or anything you type. You can turn it off with No ad tracking in the cookie notice, or later under Cookie choices in the site footer, and any tracker blocker stops it too. The full list of what this site stores in your browser is on the Cookies & Storage page.

Separately from ads, we use Firebase Analytics to count things like which screens are slow and how often the app crashes, and the app stores small amounts of data on your device to remember that you are signed in and to remember your preferences such as theme, language and default address.

All traffic between the app and our servers is encrypted with TLS. Passwords aren't stored by us, because sign-in is handled by Supabase. Payment cards aren't stored either, because Stripe holds those. Access to the database is restricted row by row, so one customer's account cannot read another's. Inside the company, only the people who need access to do their job have it.

Nothing online is bulletproof. If your data is involved in a breach that could cause you real harm, we will tell you and we will report it, which is what Canadian law requires of us.

While your account is open we keep your account details and your order history, because you can see your past orders in the app.

Some things are deleted on a fixed schedule, whether or not you ask:

• Delivery photos, meaning the picture a driver takes at your door, are deleted 30 days after the delivery.
• A driver's recorded location trail is deleted after 90 days.
• Support tickets are archived once they are resolved.

If you close your account, we remove your personal details and disconnect your orders from you. We keep the anonymised order and payment records, because tax and accounting law requires a business to be able to show what it sold. Those records no longer identify you.

Under Canadian privacy law (PIPEDA) and Alberta's PIPA, you can ask us for a copy of the info we have on you, ask us to correct anything that's wrong, or ask us to delete your account. You can also opt out of marketing messages without losing the account, and you can withdraw a consent you previously gave.

To do any of these, email contact@taeam.ca from the address on your account, or delete your account here. We'll get back to you within 30 days.

If you are not happy with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada or to the Office of the Information and Privacy Commissioner of Alberta. You do not need our permission to do that.

Arbaab is an optional AI helper that can search restaurants, build a cart, and pull up your past orders so you can reorder faster. It's off by default until you turn it on.

When you chat with it, your message text and the restaurant data it needs to answer get sent to an AI provider for processing. We use two, OpenAI and Google (Gemini), depending on which one is answering. We don't send your name, phone number, address, or payment info. Arbaab can see the labels on your saved addresses, like Home or Work, so it can offer you one, but not the street lines themselves.

We don't allow either provider to train their models on your chats. They may hold a copy for a short period for their own abuse monitoring before deleting it, which is their standard practice and not something we control. We keep an audit log of any action Arbaab takes inside the app, such as adding items to a cart, for security reasons. That is the action, not the chat.

Arbaab never places or pays for an order on its own. Checkout always needs your tap. You can turn it off any time in Settings, and the rest of the app works exactly the same.

You have to be 18 to hold a Taeam account, which is also what our Terms of Service say. We don't knowingly collect information from anyone under 18. If you think someone under 18 has given us their information, email contact@taeam.ca and we'll delete it.

If we change something meaningful in here, we'll update the date at the top and let you know in the app before the change takes effect. We keep a copy of every version we have published, along with the exact text you agreed to when you signed up, so it is always possible to say what the rules were on a given day.

Privacy questions, data requests, or anything else: contact@taeam.ca.

Taeam Technologies Inc.
Edmonton, Alberta, Canada