Privacy Policy

Food City Privacy Policy Last updated: 6 July 2026 1. WHO WE ARE Food City ("we", "us", "our") is a school-canteen meal-subscription service operated by Food City Bahrain (under the management of Food Co W.L.L.) (Commercial Registration CR number pending business confirmation), registered in the Kingdom of Bahrain at No. 12, Building Y98, Hajiyath Road 3929, Block 939, Riffa 939, Kingdom of Bahrain. This Policy explains what personal information we collect through the Food City mobile application and related services, how we use it, and your choices. 2. WHO USES THE SERVICE The app is used by parents and guardians to purchase canteen meal plans for their children (students) and to monitor and manage their meals. Because the service concerns minors, a parent or legal guardian is responsible for the account and provides consent on the child's behalf. 3. INFORMATION WE COLLECT (a) Account & guardian data: the mobile number, email address and, where used, Scholar ID used to sign in (via one-time password), and language preference. (b) Student (child) data: name, gender, date of birth, address, school, class/division, Scholar ID, profile photo, wallet/NFC card number, wallet and credit balances, spending limits, and subscription history. (c) Health-related data: allergy and dietary information you choose to add for your child, used only to display allergen warnings. (d) Payment data: transaction records, amounts, method, gateway references, authorization codes and the card type and last four digits. We do NOT store full card numbers, CVV or card expiry — these are entered directly on the payment gateway's secure hosted page. (e) Device & usage data: device platform and app version, Firebase push-notification tokens, IP address and technical logs of key actions for security and audit. (f) Communications: OTP messages, notifications, and any feedback or complaints you submit. 4. CHILDREN'S PRIVACY The service is designed to be operated by adults on behalf of children. We collect children's data only as needed to provide meals and canteen services. The guardian controls the child's profile and may request correction or deletion (subject to legitimate retention — see section 8). 5. HOW WE USE YOUR INFORMATION To create and manage accounts; process meal-plan purchases, wallet top-ups, refunds and credits; generate meal schedules; operate the NFC meal card and canteen point-of-sale; display allergen warnings; send OTPs, reminders and service notifications; issue invoices; prevent fraud and abuse; provide support; and comply with legal obligations. 6. PAYMENT PROCESSING Card and online payments are processed by BENEFIT (the Bahrain national payment gateway) and by Mastercard Payment Gateway Services (AFS). Card details are entered on the gateway's own secure page; we receive only a result, references and the card's last four digits. Wallet balance held in your account is stored value used within the platform only. 7. HOW WE SHARE INFORMATION We do not sell your data. We share it only with service providers acting for us, including: BENEFIT and Mastercard/AFS (payment processing); Firebase Cloud Messaging – Google (push notifications); our WhatsApp messaging provider (OTP and alert delivery); email/SMTP providers (OTP, invoices and receipts); Google Cloud Storage (secure storage of uploaded images such as profile photos); and, where an in-app assistant feature is used, Google's generative-AI service. We may also disclose information where required by law or to protect our rights and users' safety. 8. DATA RETENTION Student and transaction records are retained for as long as the account is active and thereafter as required for accounting, audit and legal purposes. Student profiles are deactivated ("soft-deleted") rather than immediately erased so that wallet, payment and meal history remain accurate and auditable. 9. SECURITY Passwords and login codes are stored using industry-standard hashing; one-time passwords are stored only as irreversible hashes and expire quickly. Access to administrative systems is restricted, and key actions are logged. No system is perfectly secure, but we take reasonable measures to protect your data. 10. YOUR RIGHTS You may access and update most account and student details in the app, including contact details (changes to email or mobile are verified by OTP). You may request a copy, correction or deletion of personal data by contacting us at support@foodcityschoolmeals.com. Some data must be retained for legal and accounting reasons. 11. INTERNATIONAL TRANSFERS Some providers (e.g. Google/Firebase) may process data outside Bahrain. Where this happens we rely on the provider's safeguards for such transfers. 12. CHANGES TO THIS POLICY We may update this Policy from time to time. The "Last updated" date shows the latest version; continued use of the service after changes means you accept the updated Policy. 13. CONTACT US For any privacy question or request: support@foodcityschoolmeals.com / +973 38200057 / +973 17878777, Food City Bahrain (under the management of Food Co W.L.L.), No. 12, Building Y98, Hajiyath Road 3929, Block 939, Riffa 939, Kingdom of Bahrain.