TimePer Privacy.

We use standard JSON Web Tokens (JWT) for stateless authentication between the mobile app and our Next.js backend.

Your auth tokens are stored locally on your device using secure storage systems (iOS Keychain and Android Keystore via expo-secure-store).

No passwords or unencrypted credentials are ever stored on the device or shared with third parties.

The mobile client communicates exclusively with our backend via HTTPS REST API endpoints. It does not establish direct connections to the database.

Network requests are encrypted using industry-standard SSL/TLS protocols, ensuring all transactions, cart updates, and account revisions remain secure.

We utilize your device's location to display nearby vendor shops and verify ordering eligibility based on shop delivery radiuses.

Your coordinates are processed in-memory during shop searches and checkout and are never persistently tracked or sold to third-party data handlers.

Location Access (Fine & Coarse): Required to show local shops and place delivery pins on the map.

Internet & Network State: Required to fetch product listings, menus, process checkout, and synchronize carts.

Camera & Storage (Optional): Required if you decide to capture or upload a custom profile picture.

You retain complete rights over your account records. You can request account deletion at any time in settings.

Upon verification, your profile records, active sessions, and address templates are permanently and cleanly purged from our database.