Privacy Policy

Last updated: March 24, 2026

This Privacy Policy explains how Kitse ("we", "us", "our") collects, uses, and protects your personal information when you use our Service.

1. Information We Collect

Category	Data	Purpose
Account	Phone number, name, email (if Google sign-in)	Authentication, account identification
Profile	Display name, bio, photos, location	Public profile display, map placement
Meals	Meal names, descriptions, prices, photos	Chef menu display
Orders	Purchase history, delivery notes	Transaction processing
Messages	Text messages between users	Communication feature
Device	IP address, browser type, device info	Security, rate limiting, analytics
Location	GPS coordinates (with your permission)	Map centering, nearby content

2. How We Use Your Information

• Provide the Service: Display your profile and products on the map, process transactions, deliver messages
• Authentication: Verify your identity via phone number or Google
• Communication: Send verification codes, order notifications, and service updates
• Safety & Security: Prevent fraud, enforce Terms of Service, protect users
• Improvement: Analyze usage patterns to improve the Service

3. Information Sharing

We do not sell your personal information. We may share data with:

• Other users: Your profile, photos, products, and approximate location are visible to other users
• Payment processors: Stripe receives payment information to process transactions
• SMS providers: Twilio receives your phone number to send verification codes
• Google: If you use Google sign-in, Google processes your authentication
• Law enforcement: When required by law, court order, or to protect safety

4. Location Data

We request your location to center the map and show nearby content. Location access is optional — you can use the Service without granting location permission. If you set a profile location, it will be visible to other users on the map.

5. Data Storage & Security

Your data is stored on servers we control. We implement reasonable security measures including:

• Session tokens with expiration
• HttpOnly cookies to prevent XSS
• Rate limiting on authentication endpoints
• Input validation and sanitization

No system is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-out: Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@mapapp.com.

8. Cookies

We use a session cookie (mf_session) to maintain your login state. This is a functional cookie required for the Service to work. We do not use tracking or advertising cookies.

9. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.

10. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what data we collect, request deletion, and opt-out of data sales. We do not sell personal information.

11. Changes

We may update this Privacy Policy periodically. We will notify users of material changes via the Service or email. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or requests, contact us at privacy@mapapp.com.