Spinach Spinach
Get the app

Policy

Privacy Policy

How Spinach collects, uses, shares, and protects information across the platform.

Last updated: 24 May 2026

1. Who We Are

Spinach is a food marketplace that connects local home cooks, grocery sellers, and buyers through our mobile app. Our platform includes meal and grocery ordering, WhatsApp-based social circles, and live streaming from sellers.

When this policy says “Spinach”, “we”, “us”, or “our”, it refers to the team operating the Spinach platform.

2. What Information We Collect

We only collect information that is necessary to run the platform and give you a good experience.

Account & Identity

  • Your name and profile photo provided by you.
  • Your phone number, used to verify your identity via WhatsApp.
  • Your Firebase authentication token, generated when you sign in.

Location

  • Your approximate location, used to show you nearby sellers and meals.
  • Location is only accessed while you are using the app and is not stored permanently.

Orders & Transactions

  • Items you order, delivery addresses, and order history.
  • For sellers: bank account details needed to process payouts, collected securely.

WhatsApp & Social Circles

  • When you join or create a circle, we link your Spinach account to a WhatsApp group.
  • We receive messages sent to our official WhatsApp number via the WhatsApp Cloud API, but we do not read private conversations between users.

Images

Profile photos and product images you upload are stored securely in Google Cloud Storage.

Live Streaming

When sellers go live, stream data is handled via AWS IVS (Interactive Video Service). Viewers’ watch activity is not stored or sold.

3. How We Use Your Information

We use your data to:

  • Create and manage your account.
  • Show you relevant nearby meals and grocery options.
  • Process and fulfil your orders and notify sellers.
  • Send you order updates and important service notifications.
  • Enable seller payouts to their bank accounts.
  • Power WhatsApp circle features and seller communications.
  • Keep the platform secure and prevent fraud.
  • Improve the app based on how it is used, using aggregated, non-personal data.

We do not use your data for advertising, and we do not sell your personal information to third parties.

4. Who We Share Data With

We share data only where it is necessary to run the service:

  • Sellers receive your name, order details, and contact information needed to fulfil your order.
  • Google (Firebase & Cloud Storage) supports authentication and image hosting.
  • MongoDB Atlas is our secure cloud database provider.
  • Amazon Web Services (IVS) provides live streaming infrastructure.
  • Meta (WhatsApp Cloud API) routes WhatsApp messages for circle features.

All third-party providers are bound by their own privacy and security commitments. We do not share your data with advertisers or data brokers.

5. How Long We Keep Your Data

We keep your account data for as long as your account is active. If you delete your account, your personal data is removed from our systems within 30 days, except where we are legally required to retain certain records, for example transaction records for financial compliance.

Images you delete from the app are removed from our storage promptly.

6. How We Protect Your Data

We take security seriously. Your data is protected by:

  • Encrypted connections (HTTPS/TLS) between your device and our servers.
  • Firebase authentication tokens, not passwords, to verify your identity.
  • API keys required for all inter-service communication within our backend.
  • Access controls so only authorised personnel can access production data.

No system is perfectly secure, but we follow industry best practices and take reasonable steps to protect your information.

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correct — update inaccurate or incomplete information in your profile.
  • Delete — ask us to delete your account and associated personal data.
  • Object — ask us not to process your data for a particular purpose.
  • Withdraw consent — for optional features like location access, you can withdraw consent at any time through your device settings.

To exercise any of these rights, contact us using the details in the section below.

8. Children’s Privacy

Spinach is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children. If you believe a child has created an account on our platform, please contact us and we will remove the account promptly.

9. Changes to This Policy

We may update this policy from time to time as our service evolves. When we make significant changes, we will notify you through the app or via WhatsApp. The “Last updated” date at the top of this page always reflects the most recent version.

Continuing to use Spinach after changes are posted means you accept the updated policy.

10. Contact Us

If you have any questions about this policy or how we handle your data, please reach out:

Spinach Privacy Team

Email: [email protected]

We aim to respond to all privacy-related requests within 7 business days.