Privacy Policy

This Privacy Policy explains how Laracake ("we", "us") collects, uses, shares and protects personal information when you use the Laracake mobile application and the Laracake website (together, the "Service"). The Service lets you browse partner bakeries, design custom cakes and place orders with those bakeries.

By creating an account or using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you give us

• Account information — your name, phone number, email address and password. Your phone number is used to sign you in.
• Profile information — your profile photo (avatar), your wilaya (province) and your delivery address, if you choose to add them.
• Order information — the cakes you configure (shape, flavour, covering, toppings, message, quantity), delivery or pick-up details, promo codes you enter, and the reviews and ratings you leave for a bakery.
• Payment information — when you pay online, your payment is processed by our payment provider. We receive the status and reference of the transaction; we never receive or store your full card details.
• Messages and support content — the messages you send to our in-app cake assistant, and any report or complaint you submit to us about a bakery.

Information collected automatically

• Technical data — device type, operating system, app version, IP address and the date and time of your requests. We use this to operate the Service, keep it secure and diagnose problems.
• Authentication data — access tokens stored on your device to keep you signed in.

We do not knowingly collect precise GPS location, contacts, photos other than those you upload yourself, or any special categories of personal data.

2. How we use your information

• To create and manage your account and sign you in.
• To transmit your order to the bakery you selected and allow that bakery to prepare and deliver it.
• To process payments, apply promo codes and issue refunds where applicable.
• To show you your order history, favourites and statistics.
• To send you service messages, such as order status updates and one-time codes for resetting your password.
• To answer your questions through the in-app assistant and handle reports you submit.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who we share it with

We share personal information only in the following cases:

• Partner bakeries — when you place an order, the bakery receives the details it needs to fulfil it: your name, phone number, delivery address and the contents of your order. Each bakery is responsible for the data it receives.
• Payment provider — Chargily processes online payments on our behalf and handles your payment details under its own privacy policy.
• Cloud hosting and storage providers — our servers and file storage (including profile photos and images you upload) are operated by our hosting and object-storage providers.
• AI assistant provider — the messages you send to the in-app cake assistant are processed by Google's Gemini API to generate a reply. Do not include sensitive personal information in those messages.
• Legal and safety — where we are required to do so by law, or where it is necessary to protect our rights, our users or the public.

Some of these providers operate servers outside your country, so your information may be transferred and stored abroad. We only use providers that apply appropriate safeguards.

4. Data retention

We keep your account information for as long as your account is active. Order, payment and review records are kept for as long as needed for accounting, tax, warranty and dispute purposes. When you delete your account, we delete or anonymise your personal information within 30 days, except records we are legally required to retain.

5. Your rights and choices

• Access and correction — you can view and edit your name, email, phone, avatar, wilaya and address at any time from the profile screen in the app.
• Deletion — you can request deletion of your account and associated personal data by contacting us at the address below. We will confirm and complete the deletion within 30 days.
• Objection and restriction — you may ask us to stop a particular use of your information where the law gives you that right.
• Withdrawing consent — where we rely on your consent, you may withdraw it at any time; this does not affect processing already carried out.

6. Security

Passwords are stored hashed, never in plain text. Traffic between the app and our servers is encrypted with HTTPS, and access to production data is restricted to authorised staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you of a breach affecting your data where the law requires it.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to this Policy

We may update this Policy from time to time. The "last updated" date at the top of this page shows when it was last revised. Significant changes will be announced in the app before they take effect.

9. Contact us

For any question about this Policy, or to exercise your rights, contact us at hello@example.com.