Privacy Policy
Last updated
Timo Livrări is a food ordering app operated by Bringes Technology SRL. This page explains what the app collects, why it needs it, who else touches it, and how to get it back or get it deleted. It is written to be read, not to be survived — if anything here is unclear, write to support@bringes.io and we will answer in plain words.
Who is responsible for your data
The app is used by several independent marketplaces, each with its own restaurants. The marketplace and the restaurant you order from decide what they sell, where they deliver and how they handle your order — for that order, they are the data controller. Bringes Technology SRL operates the platform they all run on and is the controller for your account itself (your sign-in identity and the settings attached to it).
Contact for any privacy question, in either role: support@bringes.io.
What we collect, and why
| Data | Why we have it |
|---|---|
| Phone number | It is your account. We text you a 6-digit code to sign you in, and the restaurant or driver uses it to reach you about a live order. |
| Name | So the restaurant and the driver know whose order it is. You choose what to put here. |
| Email address | Optional. An alternative way to sign in (we email you a code instead of texting one). |
| Delivery address | Street, number, apartment, postal code, city — plus the map pin you set — so the driver can find you. Kept with the order and, if you save it, on your profile. |
| Your orders | What you ordered, the prices, any coupon or note, and the status timestamps. This is your order history and the restaurant’s accounting record. |
| Notification token | The anonymous device token Apple or Google gives us, so we can tell your phone that your order was accepted, is on its way, or has arrived. |
| IP address and device info | Recorded with requests. Used to keep the service running and to stop abuse — sending sign-in codes costs real money, so we count attempts per number and per network. |
| Marketing consent | A single yes/no, off unless you turn it on, plus when you last changed it. |
| Photos | Only if you are a restaurant owner or staff member using the owner tools to photograph a dish or a cover image. Ordinary customers are never asked for photos. |
| How you use the app | Which screens you open, what you tap, and a screen recording of your session — so we can see where the app is confusing or broken and fix it. Anything you type is hidden from the recording, including your phone number, your sign-in code, your address and any card details. We use PostHog for this; it stores the data in the European Union. |
We do not collect anything for advertising and we do not track you across other apps or websites. The one measurement tool we do use is PostHog, described above, and it is there to tell us how our own app is working — nothing it records leaves it or is sold on.
What the app asks your phone for
- Location — only when you tap to use it at checkout, to drop the delivery pin. Your phone turns the pin into a street address on the device itself; the coordinates are stored with that order so the driver can navigate. Say no and you can type the address instead.
- Notifications — order updates, and for kitchen and driver accounts, new-order alerts. Say no and the app still works; you just have to open it to see where your order is.
- Camera — scanning QR codes (a coupon, a restaurant link, or a staff sign-in code). Nothing is recorded; we only read the code.
- Photo library — only in the owner tools, to pick a dish or cover photo.
Why we are allowed to hold it
- To give you what you asked for (GDPR Art. 6(1)(b)) — your account, your orders, and delivery to your address.
- Our legitimate interest (Art. 6(1)(f)) — keeping the service secure and stopping abuse of the sign-in codes, which are charged to us per message.
- Your consent (Art. 6(1)(a)) — marketing messages, notifications, and location. Each is off until you allow it, and each can be switched back off.
- Legal obligation (Art. 6(1)(c)) — keeping the accounting record of a completed order for as long as tax law requires.
Who else processes it
These are our sub-processors. They act on our instructions only, and none of them is allowed to use your data for their own purposes. We do not sell data to anyone.
| Company | What it sees |
|---|---|
| Cloudflare | Hosts the service at the network edge, so it sees requests in transit — including your IP address — and runs the bot check on the sign-in screen. |
| Turso | The database. It stores everything listed above, at rest. |
| Telnyx | Sends the sign-in SMS. It sees the phone number and the code, never your orders or address. |
| Resend | Sends the sign-in email, when you use the email door. It sees the email address and the code. |
| Apple and Google | Deliver push notifications to your phone. They see the device token and the text of the notification (for example “Your order was accepted”). |
| PostHog | Measures how the app and the website are used, and stores the screen recordings described above, on servers in the European Union. It sees which screens you opened and what you tapped, and — once you are signed in — an account number that lets us follow one session end to end. It is never sent your name, your phone number, your email or your address. |
How long we keep it
- Your account — until you delete it. Nothing expires on its own while you are still using the app.
- Orders — automatically stripped of personal details after 24 months. The money, the status and the timestamps survive as the restaurant’s accounting record; the name, phone number and exact address do not.
- If you delete your account — the same stripping happens immediately to your past orders, and your sign-in identity is deleted outright. The address on an old order is reduced to a street name and city, with no house number, apartment or map pin.
Your rights
- Get a copy of your profile and every order you placed, in a machine-readable format — email us and we will send it.
- Delete everything — in the app, open Profile and tap Delete my data. Step-by-step instructions, and exactly what survives, are in Deleting your account below.
- Correct your name, phone number or addresses — all editable in the app.
- Withdraw consent — the marketing toggle lives in Profile → Preferences; notifications and location can be revoked in your phone’s system settings at any time.
- Complain — if we get it wrong you can complain to your national data protection authority. In Romania that is ANSPDCP, dataprotection.ro.
Deleting your account
You can delete your account yourself, in the app, in under a minute — no email, no waiting. This covers the Timo Livrări app (Android package io.bringes.fooddelivery), operated by Bringes Technology SRL.
In the app
- Open the app and go to Profile (the account icon).
- Scroll to the bottom and tap Delete my data — or Delete account, if you also work for a restaurant.
- Confirm on the warning screen. Deletion happens immediately and cannot be undone; you are signed out at once.
One exception: if you are the only owner of a marketplace, the app asks you to hand ownership to someone else first, so a live business is not left with nobody able to run it.
If you cannot open the app
Email support@bringes.io from the email address on the account, or tell us the phone number you sign in with. We will verify that it is you and delete the account within 30 days, usually much sooner.
What is deleted
- Your sign-in identity — the phone number and email address you use to log in.
- Your profile: name, saved delivery addresses and map pins, language and app preferences.
- Your notification tokens, so your phone stops receiving anything from us.
- Your marketing consent record and any coupon or offer state tied to you.
- Your restaurant reviews and call feedback are unlinked from you.
What is kept, and why
Orders you already placed are not erased — a completed sale is the restaurant’s accounting record, and tax law requires them to keep it. Instead the order is stripped of everything that identifies you:
- Removed from the order: your name, phone number, email, house number, apartment, delivery notes and the exact map pin.
- Left on the order: the items and prices, the status and timestamps, and a coarse location — street name and city only — used for nothing but the marketplace’s own statistics.
- The fact of the deletion is written to an append-only audit log, so we can prove to a regulator that your request was carried out. It records that an account was deleted and when, not what was in it.
The same stripping runs automatically on every order older than 24 months, whether or not you ever ask us to delete anything.
Getting a copy first
Deletion cannot be undone, so if you want your order history, ask us before you delete: email support@bringes.io and we will send your profile and every order you placed as a machine-readable file.
How it is protected
Everything travels over encrypted connections. Each marketplace’s data is fenced off from every other one at the database level, and staff access is limited to the restaurant a person actually works for. Sensitive actions — an administrator acting on behalf of a marketplace, an account deletion, a data export — are written to an append-only audit log.
Children
The app is meant for adults ordering food. It is not directed at children, and we do not knowingly create accounts for anyone under 16.
Changes to this policy
If we change what we collect or who processes it, we update this page and the date at the top. Material changes are announced in the app before they take effect.