BiteOut Privacy Policy

Your privacy is important to us

We protect your information and aim to be clear and honest about how we use it. If you have questions, contact us (details at the end).

What information do we collect?

We collect personal information when you register or use the Service.

We collect (typical for a discount/points app):

• Basic profile: full name, mobile number, email address, (optional) profile photo, (optional) date of birth.
• Account details: password (stored as a hash), OTP verification status.
• Transactions & redemptions: partner merchant, items/amount, time/place, coupon/points used, voucher codes, refunds.
• Usage & device: app pages/screens viewed, clicks, crash logs, device model/OS, app version, IP address, advertising ID.
• Communications: content you share with us by phone, email, SMS, chat, or in-app support.

We do not collect:

• National identity numbers (citizenship/PAN), passport or driver's license details.
• Payment card numbers. (Payments—if any—are processed by third-party gateways; we receive only status/tokens.)

If any of your details are incomplete, we may contact you by email or phone to verify them.

How do we collect your information?

• Online: when you register or use our website/app.
• By message: when you send documents or details via email/SMS/messaging apps.
• By phone: when you provide information during support calls.
• Automatically: via cookies/SDKs (to keep you signed in, remember preferences, measure performance, and prevent fraud).

App permissions (you control these)

With your prior permission, the app may access:

• Location (to show nearby offers/participating merchants).
• Camera/Photos (e.g., scan QR codes, upload a profile photo or receipt).

You can enable/disable these anytime in your device settings. Some features may not work without them.

How do we use your information?

We use your information to:

• Verify your identity (OTP etc.) and provide the Service you requested.
• Provide discounts, deals, and points accrual/redemptions with partner merchants.
• Operate and improve our website/app and overall customer experience.
• Communicate about account updates, security, and support.
• Send offers similar to what you already use (unless you opt out).
• Analyze usage to improve features, fight fraud/abuse, and measure campaigns.

Who do we share your information with?

We do not sell your personal information. We share only what's needed with:

• Partner merchants/businesses to apply discounts/points, validate redemptions, settle campaigns, and prevent abuse.
• Service providers (hosting, analytics, crash reporting, SMS/OTP, email/push, customer support) who process data for us under confidentiality.
• Affiliates/advisors (e.g., auditors, accountants, legal) when reasonably necessary.
• Regulators/law enforcement when required by law or to protect rights, safety, and property.
• Business transfers: if we merge, sell, or reorganize, your data may transfer under this Policy.

Keeping your information safe

We use technical and organizational measures (encryption in transit, access controls, hardened infrastructure, monitoring, backups). Data is stored in password-protected systems and accessible only to authorized staff trained in data protection.

We keep your information only as long as needed to provide the Service or as required by law. When no longer needed, we reasonably de-identify or delete it.

Cookies & SDKs

We use cookies and mobile SDKs to keep you signed in, remember preferences, personalize content, measure performance, and prevent fraud. You can control cookies in your browser and app permissions in your OS; some features may not function without them.

International transfers

Some trusted vendors (e.g., cloud hosting/analytics) may process data on servers outside Nepal. By using the Service, you consent to such transfers. We take reasonable steps to ensure protections consistent with this Policy and applicable law.

Your rights (Nepal)

Under the Privacy Act 2075 (2018) and other applicable laws, you may request to access, correct/update, or delete your personal information, and to opt out of direct marketing. We may request reasonable identity verification before acting on a request.

Making a privacy complaint

If you believe we mishandled your personal information or breached the Privacy Act 2075 (2018):

1. Contact us (see below).
2. We'll respond within 30 days with a written decision.
3. If we can't resolve it in 30 days, we'll explain the delay, reasons, and give a reasonable date for a decision.

All complaints are handled free of charge.

Legal references (Nepal)

We follow the Privacy Act 2075 (2018) and the Electronic Transactions Act 2063 (2008) as applicable to electronic records and fraud/abuse cooperation.

Changes to this Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We'll post updates here and revise the "Effective date" above. Material changes may be notified via app/email. Please review periodically.