1. What this policy covers
This policy covers Gigi's apps and the systems behind them:
- Gigi, the customer app: food delivery and pickup from local stores, and rides where they are offered.
- Coffee First: the Coffee First stamps card, branch map and order-ahead pickup.
- Gigi Merchant, the app stores use to take orders, and the merchant portal on this website.
- Gigi Rider, the app riders use to take and deliver jobs.
The Gigi app and Coffee First share one account system: an account made in either app is the same account in both, with the same email, so changing or deleting it in one changes or deletes it in the other. Rider accounts are made by Gigi, and store staff logins by the store, in the same system.
2. Information we collect
Your account
- Your name and email address, and your mobile number if you give one.
- In Coffee First: your password and, if you give them, your birthday and profile photo. Passwords are stored only as a one-way hash.
- Codes we email you to sign up, sign in or confirm deleting your account. They expire after a few minutes.
Orders, rides and payments
- What you order, from which store, the prices, fees and tips, your notes, ratings, and the order's progress and times.
- Pickup and drop-off addresses with their map pins, and the name and mobile number given for the delivery. Places you save, and stores you mark as favourites.
- Payments: which method you used (wallet, cash or QR Ph) and, for QR Ph, the payment's status, amount and reference from our payment provider, PayMongo. We don't receive your bank or card details.
- Your Gigi wallet balance and its history (top-ups, payments, refunds and tips).
- In Coffee First: order chat messages and the photos you send in them, and payment proof photos.
Coffee First stamps
Your stamps card is kept by our stamps service (the Stamps platform run by GigiPOS). It holds your Gigi account number, the name, email and (if you gave one) mobile number your card was made with, and your stamps and rewards history.
Your phone and the apps
- A push notification token, so we can send you order updates. We remove it when you delete your account.
- Each request tells our servers which app and version sent it, and comes from an internet address. We use these to keep the service working and to limit abuse; usage is counted per app and version, not per person.
- Coffee First sends crash reports, with your account number, to our crash reporting service, Sentry. The Gigi app has no crash reporting, analytics or advertising.
Riders
- Name, email, mobile number, rider code, vehicle and plate number.
- Documents you give us to ride, incident reports, and cash remittances.
- Jobs taken, earnings, your rider wallet and its withdrawals, and the payout accounts you add.
- Your location, as described in section 5.
Stores
- Store owners and staff: names, emails and mobile numbers, passwords (stored as a one-way hash), and the devices signed in to Gigi Merchant.
- For payouts: the store's payout account details and the business documents it sends us.
This website
If you use the contact form, we receive your name, email, the topic and your message by email.
3. How we use it
- To sign you in, and to keep each account to its owner.
- To take orders and rides to the store and the rider, and to show you their progress.
- To take payments, refund them, and keep the records that payments and payouts need.
- To run your Coffee First stamps card.
- To send order updates and the codes you ask for.
- To help when something goes wrong with an order, and to stop fraud and abuse.
We don't sell your information, and we don't use it for advertising.
4. Who sees it
- The store you order from sees your name, your order and notes, the drop-off address, and the rider who takes it.
- The rider sees the drop-off area and distance before taking a job, and the recipient's name, address, mobile number and note once they take it.
- You see your rider's first name and last initial, rating and vehicle, and for a ride the plate number. While your order or ride is under way you also see their full name and mobile number, and their live position as they come to you.
- If a store books an outside courier for your order, the store gives the courier the pickup and drop-off details.
- Companies that run parts of the service for us: PayMongo (QR Ph payments), SendGrid (email), Expo, Apple and Google (push notifications), Google (road distances, from the map points we send it, and maps on Android), Apple (maps on iPhone), Photon by komoot (address search: what you type and the area you are in), the Stamps platform by GigiPOS (Coffee First stamps), Sentry (Coffee First crash reports), and the companies that host our servers, database and photo storage.
- Gigi staff, to run orders and help customers, stores and riders.
- Authorities, when the law requires it.
5. Location
Customers
The Gigi app and Coffee First use your location only while you are using them, to show nearby stores and branches and to set pickup and drop-off points. What we keep is the addresses and pins of your orders and the places you save, not a history of where you have been.
Riders
- Gigi Rider sends your position while you are online with the app open, so nearby jobs can be offered to you.
- During a job it also sends your position when the app is in the background, for example while you follow directions in a maps app, and stops when the job ends. Android shows that your location is in use.
- We keep only your latest position, which each new one replaces. It is shown to the customer while their order or ride is on its way, and to Gigi staff running orders.
- You can turn location off in your phone's settings. Gigi Rider can't offer you jobs or track a delivery without it.
6. Deleting your account
How
- In the Gigi app: Account → Delete account. We email you a code to confirm.
- In Coffee First: Account → Delete account. Confirm with your password, or with a code we email you if your account has no password.
- By email: write to ddemetillar@dxform.ph from the email on your account, with the subject "Data Deletion Request". We delete the account the same way the apps do.
The Gigi app and Coffee First are one account, so deleting it in either app deletes it in both. Riders close their accounts by asking Gigi, and store staff logins are removed by the store owner.
When it has to wait
An account can't be deleted while:
- an order's payment, or a wallet top-up you started, is still going through;
- an order or ride is under way;
- your Gigi wallet still has money in it.
The app tells you which one, and how to reach us. If an order or ride seems stuck, write to us with its order number, at the contact the app gives you or at ddemetillar@dxform.ph, and we'll sort it out.
Money left in your Gigi wallet is refunded to you, never kept. Ask us for it the same way, from the email on your account: we send the balance to you by GCash or bank transfer and empty the wallet, and then you can delete the account.
What deleting removes
- Your name, which becomes "Deleted user", and your email, which becomes a placeholder that can't receive mail. You can sign up again later with the same email, as a new account.
- Your mobile number, password, birthday, profile photo link and Apple sign-in link.
- Your saved places, favourite stores and push notification tokens.
- Your access: the account is switched off, and every device signed in to it is signed out the next time it contacts us.
- For riders: your last position. Job offers you hadn't answered are declined.
What deleting keeps
These stay in our records, attached to the deleted account rather than to your name:
- Your past orders and rides, including their pickup and drop-off addresses and the name and mobile number given for each delivery.
- Payments and their PayMongo records, and your wallet history, including a refund of your balance.
- Coffee First order chats and the photos sent in them, payment proof photos, and support tickets.
- Your profile photo file, if you had one (only the link to it is removed).
- Your Coffee First stamps card at the Stamps platform, with the name, email and (if you gave one) mobile number it was made with. Deleting your account doesn't remove it.
- A scrambled copy of your email address (a one-way hash, which can't be turned back into the address), and, if you had a Coffee First welcome coffee, its record: when it was given and used, where, and the stamps card it was on. We keep these so the welcome coffee stays one per person when an account is deleted and made again.
- Crash reports Coffee First already sent to Sentry.
- For riders: documents, incident reports, remittances, earnings and wallet history, payout accounts, vehicle details and rider code.
- Notes Gigi staff made about the account, such as a block and its reason.
7. How long we keep it
Account details stay until you delete the account. The records listed under "What deleting keeps" stay after that, for our payment, refund and payout records and to handle disputes. Coffee First order chats (the messages between you and the branch about an order, and any photos in them) are kept for 90 days after the chat closes, which is 2 hours after the order is collected or cancelled, and then deleted. We don't yet delete the other records automatically after a set time; if that changes, we'll update this page. Usage counts per app and version are deleted after 13 months.
8. Security
- The apps talk to our servers over encrypted connections (HTTPS).
- Passwords are stored only as one-way hashes, and so are the codes we email to sign in to the Gigi app or to delete an account.
- Each of those codes allows three tries, an account gets at most ten wrong codes a day of each kind, and sign-in attempts are rate-limited.
- Sessions end when an account is deleted, blocked by Gigi, or its password is changed.
9. Your choices
- Email us to see a copy of the information we hold about you, to correct it, or to delete it.
- Turn location or notifications off in your phone's settings at any time.
- Delete your account in the app, as described in section 6.
10. Children
Gigi is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information.
11. Changes to this policy
When the apps change what they collect or what deleting does, we update this page and the date at the top.
12. Contact us
For questions or requests about your information:
- Email: ddemetillar@dxform.ph
- Address: Meridan By Avenir, Golam Dr., Barangay Kasambagan, Cebu City, Philippines, 6000