DraftPending management / legal review

Dropfy Privacy Policy

Last updated: 1 June 2026. This Privacy Policy explains how MeritEdTech OÜ ("we", "us") collects, uses, and protects your personal data when you use the Dropfy platform.

1. Data we collect

Account data (name, email, phone), order data (items, addresses, prices), location data (when you use the app or drive for us), device data (push tokens, app version), and support communications.

2. How we use it

To create your account, take payments, dispatch and deliver orders, communicate order status, prevent fraud and abuse, improve the Service, and comply with legal obligations.

3. Location data

Customers: used to find nearby restaurants and deliver to your address. Drivers: real-time location is used while you are online to dispatch and track active orders, and is retained per our operational retention policy (currently 7 days).

4. Sharing

We share necessary order details with merchants and drivers to fulfill orders. We use trusted service providers (hosting, push notifications, mapping, payment processors when enabled). We do not sell personal data.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to satisfy legal, accounting and dispute-resolution requirements.

6. Your rights

Subject to applicable law, you can request access, correction, deletion or export of your data by contacting support@dropfy.co.

7. Security

We use industry-standard safeguards including TLS in transit, role-based access controls, and database row-level security. No system is perfectly secure; please use a strong password.

8. Children

Dropfy is not directed to children under 18.

9. Contact

Privacy questions: support@dropfy.co.