Privacy Policy

1. Data we collect

Account: your name, email address and whether you are a customer or a cook. Passwords are handled by our sign-in provider and are never visible to us.

Orders: your delivery address, phone number, delivery instructions, the dishes you order and any reviews you write.

Cooks: bio, availability, home-business licence number, menu, and records of earnings, commission and payouts.

Cookies: we use essential cookies only, to keep you signed in and remember your language. We do not use advertising cookies, and we do not currently collect card details.

2. Why we use it

To run your account, pass your order to the cook, verify cooks, calculate earnings and commission, prevent fraud and abuse, provide support, and meet our legal obligations.

We process your data with the consent you give when you create your account, and as needed to provide the service you request.

3. Who we share it with

The cook you order from sees your name, delivery address, phone number and instructions while your order is in progress. Your address and phone number are hidden from the cook once the order is finished. For pickup orders the cook sees your name, phone number and instructions, and you see the kitchen's exact location and the cook's pickup note, only while the order is active.

Reviews you write are public on the dish page with your rating, comment and date. They show only your first name and the initial of your last name, never your email. We may hide reviews that break our rules.

Photos cooks upload are public. Before we store them we remove all hidden photo data, including the location where the photo was taken.

Service providers who run the platform for us: Supabase (database and sign-in), our hosting provider and our email provider. They may only use the data to provide their service to us.

Authorities, when Omani law requires it. We do not sell your personal data.

4. Storage outside Oman

Our database is hosted by Supabase in Mumbai, India, so your data is transferred outside Oman. By creating an account you consent to this transfer. We use providers with strong security commitments and protect data in transit with encryption.

5. How long we keep it

We keep account data while your account is open. Order and financial records are kept for as long as Omani accounting and tax rules require, then deleted or anonymised.

6. Your rights

You can ask to access, correct or delete your personal data, object to its processing, or withdraw your consent, by emailing [email protected]. Withdrawing consent may mean we can no longer provide your account. We will respond within the time the law requires.

7. Security

We use encrypted connections, restrict access to personal data to what each person needs, and keep the database closed to direct public access. If a breach affects your data, we will notify you and the authorities as the law requires.

8. Children

HomeMade is for people aged 18 and over. We do not knowingly collect data from children.

9. Changes and contact

We will show the date of the latest version of this policy and ask for your agreement again after significant changes. Contact: [email protected]