Tukkafy Privacy Policy
Effective date: August 9, 2025
Who we are
Tukkafy is operated by Braventa group PTY Ltd (“we”, “us”, “our”). We are the data controller for personal information processed in connection with the Tukkafy mobile application and related services (the “App”).
Contact: contact@tukkafy.com
Address: 12 ALEXANDER AVENUE, ASHFORD, SOUTH AUSTRALIA 5035, Australia
What we collect
- Account and profile: name, email, phone number, and profile details you add.
- Location: approximate and precise location when you grant permission (“While Using the App”).
- Orders and payments: order details and payment method metadata (brand, last4, expiry). We do not store full card numbers or CVV.
- Addresses: saved addresses for pickup/delivery context.
- Device and app info: device OS/version, app version, language/locale, time zone, diagnostics, and crash logs.
- Support: information you provide when contacting support.
How we use information
- Provide and operate the App (account, authentication, nearby stores, orders, payments).
- Communicate with you about transactions, updates, and security.
- Improve reliability, performance, and user experience.
- Prevent fraud, secure the service, and comply with laws.
- Personalize in-app content where permitted.
Legal bases (GDPR/UK GDPR)
- Contract: providing the App and processing your orders.
- Consent: location and any optional permissions or communications.
- Legitimate interests: security, fraud prevention, and service improvement.
- Legal obligation: tax, accounting, and regulatory compliance.
Sharing and disclosures
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
We share data with service providers solely to operate the App, under contractual obligations:
- Payments: Stripe, Inc. (tokenization and payment processing) — Stripe Privacy Center
- Backend/hosting: Supabase (managed Postgres and APIs) — Supabase Privacy Policy
- Maps/places: Google Maps Platform (map tiles, geocoding, places autocomplete) — Google Privacy & Terms
- Diagnostics: native platform logs and limited diagnostics
We may disclose data to comply with law, enforce agreements, or protect rights, safety, and property.
Location data
- Purpose: show nearby stores, compute distance, and improve local relevance.
- Access: only when you grant permission (“While Using the App”); no continuous background tracking by default.
- Retention: processed as needed; we do not store precise GPS histories.
You can change location permissions in your device settings. Some features may not work without location.
Payments
Payments are processed by Stripe. We do not store full payment card numbers or CVV. We store only non-sensitive references (e.g., last4, brand, expiry) and Stripe customer/payment method IDs as needed to manage orders and payments.
Data retention
- Account/profile: retained while your account is active; deleted or de-identified upon account deletion unless legally required.
- Orders/payments: retained as required by law (e.g., tax/accounting) and then deleted or de-identified.
- Diagnostics/logs: retained for a limited period necessary for troubleshooting.
- Backups: retained per standard backup cycles and then securely purged.
Security
We use appropriate technical and organizational measures to protect your data, including TLS in transit, least-privilege access, and secure tokenization for payments. No method is 100% secure.
International transfers
We and our service providers may process data in countries outside your own. Where required, we use safeguards such as Standard Contractual Clauses.
Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete your personal data.
- Port your data.
- Object to or restrict processing.
- Withdraw consent (e.g., for location).
- Lodge a complaint with a supervisory authority.
How to exercise: use in-app account settings (including Delete Account) or contact contact@tukkafy.com.
CCPA/CPRA (California)
- We do not sell or share your personal information for cross-context behavioral advertising.
- You may request access, deletion, and correction, and to limit sensitive data use where applicable.
Contact: contact@tukkafy.com
Children’s privacy
The App is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child provided data, contact us to delete it.
Cookies and similar technologies
The App uses local/device storage for secure sessions and preferences. We do not use advertising SDKs, IDFA, or cross-app tracking.
Changes to this policy
We may update this policy from time to time. We will post the updated version with an updated “Effective date”. Material changes may be communicated in-app or by email.
Contact
Email: contact@tukkafy.com
Address: 12 ALEXANDER AVENUE, ASHFORD, SOUTH AUSTRALIA 5035, Australia
Legal entity: Braventa group PTY Ltd