Privacy Policy

Vendor accounts. When you create a kitchen account we collect your email address, name, and the kitchen details you enter (name, area, hours, menu, payment instructions). If you sign in with Google, we receive your name and email from Google.

Customer orders. Customers do not create accounts. When someone places an order we collect the details they enter — name, phone number, email (optional), delivery address (for delivery), and the items ordered — so the order can be passed to the kitchen.

Technical data. Basic logs and session cookies needed to keep you signed in and to operate the service.

We use it to operate Khao: to create your kitchen’s ordering page, to route each order to the correct kitchen, to show vendors their orders, and to provide support. We do not sell your information.

An order’s details are shared with the kitchen you ordered from, so it can prepare and fulfil the order. We use trusted service providers to run Khao — including Supabase (database and authentication), Vercel (hosting), and Google (sign-in) — who process data on our behalf.

Payments are made directly between the customer and the kitchen (for example cash or Interac e-transfer). Khao does not process or store card or banking details.

We keep account and order information for as long as your account is active or as needed to operate the service and meet legal obligations. You can ask us to delete your account and associated data.

You may request access to, correction of, or deletion of your personal information by contacting us. Customers who want an order record removed can contact the kitchen or us.

Khao is not directed to children and is intended for use by adults operating or ordering from home kitchens.

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Questions about this policy? reach out to us and we’ll respond as soon as we can.