PRIVACY POLICY

1. General Provisions

1.1. This Privacy Policy defines the rules for collecting, processing, storing, transferring, and protecting personal data when using the services provided through the Plan and Eat mobile application and related web interfaces (together, the Platform).

1.2. This Policy is prepared in accordance with the Law of the Republic of Azerbaijan On Personal Data and other applicable regulations, and is applied together with the Terms of Service.

1.3. Terms used in this Privacy Policy, including Services, have the meanings given in the Terms of Service. If there is a conflict, this Privacy Policy prevails for personal data processing and privacy matters.

1.4. Services on the Platform are provided by SABAH STUDIO LLC (TIN: 1704113041; legal address: AZ1003, Baku city, Sabail district, Neftchi Gurban Abbasov street, building 5, apartment 5) (the Company, we, us). The Company organizes personal data protection and is the responsible party under this Policy.

1.5. This Policy applies to all users of the Platform. By using the Platform, users confirm that they have read this Policy and consent to the processing of personal data as described here.

2. About Us

2.1. We are a digital food-service aggregator that enables users (employees of corporate subscribers) to pre-select weekly or monthly meal plans according to their nutrition, calorie, and diet needs.

2.2. The Platform is not a payment service provider. Cashless payments are processed through the infrastructure of authorized payment providers. We do not accept, hold, or distribute funds; we only provide technical interfaces for payment initiation and status display.

3. Consent to This Privacy Policy

3.1. By accepting this Policy, users provide explicit and informed consent to the collection, processing, and storage of their personal data while using the Platform. Consent is expressed by completing registration, OTP verification, logging in, and/or actual use of the Services.

3.2. We may use personal data in the following cases:

• to operate the Platform and ensure uninterrupted service delivery;
• to improve services and user experience through analytics and anonymized statistics;
• to identify users and maintain security;
• to communicate with users via email, SMS, push, in-app notices, and calls;
• to respond to requests, feedback, complaints, and other inquiries;
• to disclose data when required by law or competent public authorities.

3.3. Users agree that we may send account and service updates, security notices, and service-related messages via email, SMS, push notifications, and phone.

3.4. This Policy applies only to data processed by us within the Platform. Data processed independently by payment providers and third-party service providers is subject to their own privacy policies.

3.5. Users may withdraw consent where allowed by law. Withdrawal applies only to future processing and may limit access to certain services.

3.6. Data is stored for as long as necessary for the purposes stated in this Policy. As provided in the Terms, audit logs and related records may be retained for up to 5 years when needed for dispute resolution, security, or legal compliance.

4. Scope of Data

• registration and account data: first name, last name, phone number, email (if provided), date of birth (if provided);
• identity data: FIN and serial number of identity document;
• corporate subscription and delivery data: company details and delivery office address;
• physical and nutrition data: age, height, weight, gender, meal preferences, favorites, allergens, and diet restrictions;
• other voluntary data shared in support requests, feedback, surveys, and communication.

5. Data Sources

We obtain personal data from:

• data provided directly by users (registration, account settings, requests, etc.);
• data provided by corporate subscribers;
• technical data from payment providers and integrations (for example, payment status identifiers).

6. Purposes of Processing

• service delivery and account management, including OTP-based activation;
• creating personalized meal plans and recommendations;
• AI-based calorie and nutrition calculations;
• logistics and delivery coordination;
• health and allergen safety support;
• technical support for payment status tracking and payment initiation;
• support operations for user inquiries and complaints;
• security, fraud prevention, legal compliance, and audits;
• analytics, diagnostics, and service improvements.

The Company does not collect or store sensitive payment card details. Depending on integration, card entry may happen in the payment provider environment.

7. Data Sharing and Transfers

We share personal data only to the extent necessary and only for the purposes in this Policy, including with:

• suppliers (kitchens), limited to required diet/allergen/calorie preferences;
• courier and logistics partners, for delivery fulfillment;
• payment service providers, for secure cashless payment processing;
• IT and infrastructure providers, under strict contractual confidentiality obligations;
• competent state authorities when legally required.

8. Third-Party Personal Data

If users provide personal data of third parties, users must ensure that those individuals are informed and, where required, have given prior consent.

By providing third-party data, users represent that the data is accurate and that they have lawful authority to provide it for the purposes stated in this Policy.

9. Data Deletion and Retention

9.1. Personal data is retained only as long as needed for the stated purposes, unless a longer retention period is required by law.

9.2. Users may request deletion of their personal data through the contact channels listed in this Policy. Where legally applicable, such data may be deleted from our servers.

9.3. Certain records may remain stored after a deletion request when retention is required for legal, audit, dispute, or security reasons.

10. Changes to This Policy

10.1. We may update this Privacy Policy from time to time. The updated version becomes effective when published on the Platform.

10.2. Continued use of the Platform after publication of changes means acceptance of those changes.

11. Final Provisions and Contact

The Company conducts Platform operations in accordance with the laws of the Republic of Azerbaijan.

For questions, complaints, or additional information regarding this Privacy Policy, contact us at info@planandeat.az.

Original document: Privacy Policy (HTML)