User Data Policy

Last updated: October 12, 2026 · อ่านเป็นภาษาไทย

This policy explains what data the HiewLeaw platform (the Customer, Merchant, and Rider apps, together the "Apps") collects, why we collect it, and how it is used, shared, and protected. By using any HiewLeaw app, you agree to the collection and use of information as described here.

1. Information We Collect

• Account information: your phone number (used to sign in via Firebase Authentication), name, and profile photo.
• Location data: precise (GPS) and approximate location, used to show nearby shops, calculate delivery distance, set drop-off points, and route riders. Collected only while the relevant app is in use.
• Photos and camera: images you choose to capture or upload, such as payment slips for order verification, proof-of-delivery photos, and profile pictures.
• Order and payment information: order contents, special instructions, order status, chosen payment method (PromptPay QR or cash on delivery), and PromptPay payment slip images when applicable. HiewLeaw does not collect or store bank account numbers or card details. PromptPay payments are made directly between customer and merchant, and cash on delivery is settled in person with the rider or merchant.
• Promo and invite codes: the promo codes you use, your own invite code, and which friend's order used it, so discounts and rewards can be applied and paid.
• Communications: support requests you send us.
• Ratings and reviews: ratings and feedback given to or received from shops, riders, and customers.
• Device and usage data: device model, operating system, app version, push-notification token, crash reports, and basic usage analytics (via Firebase).

2. How We Use Your Data

• To operate core features: showing nearby shops, placing and tracking orders, generating payment QR codes, and dispatching riders.
• To enable communication between customers, merchants, and riders needed to fulfill an order.
• To send order-related push notifications (e.g. order accepted, rider arrived).
• To maintain trust and safety, including ratings, dispute handling, and fraud prevention.
• To diagnose crashes, fix bugs, and improve app performance and reliability.

3. How We Share Your Data

We do not sell your personal data. We share data only as needed to run the platform:

• Between platform participants: a customer's name, order, drop-off location, and payment slip are shared with the relevant merchant and rider solely to fulfill that order.
• Service providers: we use Google Firebase for authentication, notifications, crash reporting, and analytics. These providers process data on our behalf under their own security commitments.
• Legal reasons: if required by law, regulation, or valid legal process.

4. Data Retention

We retain account and order data for as long as your account is active or as needed to provide the service, resolve disputes, and meet legal or accounting obligations. Payment slip images are retained only as long as needed to verify and resolve the related order. When you delete your account (see section 5), your phone number, name, and saved payment details are removed right away; records of past orders are kept without them.

5. Your Rights and Choices

• You can review and update your profile information from within the app.
• You can request access to or correction of your personal data by contacting us below.
• You can disable location or camera/microphone access in your device settings, though this may limit core app functionality.
• You can delete your account yourself, in the app, at any time. You do not need to contact us. In the Customer and Rider apps open Profile, then Account, then "Delete account"; in the Merchant app open the Shop tab, then Account, then "Delete account". You confirm by typing the confirmation word shown. Deleting removes your phone number, name, and saved payment details (PromptPay ID and refund QR photo) and ends your sign-in. It cannot be undone.
• Records of past orders are kept after deletion, without your name or phone number, as needed for accounting, dispute handling, and legal obligations (see Data Retention).
• You cannot delete your account while you have an order in progress; finish or cancel it first. When a merchant account is deleted, its shop is closed.

6. Security

We use industry-standard safeguards, including encrypted connections and access controls, to protect your data. No method of transmission or storage is 100% secure, and we work to continually improve our practices.

7. Children's Privacy

HiewLeaw apps are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Apps after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

Questions about this policy or your data? Email us at info@hiewleaw.com.