Trust & Privacy

Kasigo runs on managed cloud infrastructure provided by Lovable Cloud. Lovable provides hosting, database, authentication, and storage primitives. Kasigo is responsible for the application logic, access rules, and how your data is used inside the product. You are responsible for keeping your account credentials confidential and reporting suspicious activity to us.

You sign in with email and password or with Google. Passwords are never stored in plain text; they are managed by our authentication provider. Each user account has a role (customer, driver, restaurant owner, or admin) and the app only shows the screens and data appropriate for that role.

All customer, driver, restaurant, and financial tables are protected by row-level security. That means the database itself — not just the UI — enforces that you can only read or change your own records. Sensitive data such as withdrawal requests, partner applications, and personal contact details are not broadcast over real-time channels and are only readable by the owning user and authorised administrators.

To deliver orders we collect your name, contact details, delivery address, order history, payment status, and (for drivers and restaurants) onboarding documents and bank details required for payouts. We use anonymous session identifiers to understand which steps of the checkout flow are confusing, so we can improve them. We do not sell personal data.

Orders, payments, and payout records are retained for as long as is necessary for accounting, dispute resolution, and legal compliance. You can request deletion of your account and associated personal data by emailing us at the address below; some financial records may be retained in anonymised form where the law requires it.

For privacy questions, data access or deletion requests, or to report a security issue, contact support@kasigo.app. Please include enough detail for us to investigate, but do not send passwords or full card numbers.