Privacy policy.

Account information. Name, email address, and phone number, used to create and secure your account and to coordinate orders and deliveries.

Delivery addresses (customers). The addresses you save or enter so restaurants and riders can deliver to you.

Location. Customers: if you allow it, your device location is used to suggest nearby restaurants and place your delivery pin — the product works without it. Riders: while you are online, your location is used to offer you nearby deliveries and to show customers their order’s live progress; sharing stops when you go offline.

Orders and deliveries. Your order and delivery history, including amounts (in MUR) and cash-on-delivery confirmation records.

Reviews. Review text you choose to post, shown with your first name.

Device and diagnostics. Push notification tokens (to notify you about your orders) and crash reports (to fix defects). Crash reports are processed by Sentry in the European Union.

What we do not collect. Payment card numbers (orders are cash on delivery), your contacts, your photos, or advertising identifiers. We show no ads, we sell no data, and we do not track you across other companies’ apps or websites.

This website sets one cookie: dx_customer_refresh, a secure, HTTP-only session cookie that keeps you signed in. It is strictly necessary — the site cannot keep a sign-in without it — and it is set only when you sign in and cleared when you sign out.

The site also uses your browser’s local storage for conveniences that never leave your device: your cart and any promo code on it, the delivery point you chose, and cached copies of pages you have already seen so they open instantly. Nothing in local storage is transmitted to us or to anyone else.

We use no analytics, advertising, or third-party tracking cookies of any kind. Because every cookie we set is strictly necessary, no cookie consent is required — there is nothing to opt in or out of. If that ever changes, this page will change first and consent will be asked before any new cookie is set. The full inventory, entry by entry, is in the Cookie Policy.

To operate the marketplace: routing orders to restaurants, dispatching riders, showing live tracking, paying delivery partners, handling support, preventing fraud and abuse, and meeting legal obligations in Mauritius (including tax and accounting records).

Restaurants see the order details and delivery area needed to prepare and hand over your order. Riders see the pickup restaurant, your first name, delivery address, and the cash amount to collect.

Processors acting for us: Sentry (crash reports, EU), Google Firebase Cloud Messaging and Apple Push Notification service (notifications), and Google Maps Platform (address lookup). They process data on our instructions and cannot use it for their own purposes.

We do not sell personal data. We disclose it only as described here or when required by law.

We keep your data while your account is active and as long as Mauritian law requires financial records to be kept. You can delete your account in the app or on this website (Account → Delete my account) or by emailing info@grabbly.mu. Deletion removes or anonymises personal data not subject to a legal retention duty.

Data moves over TLS, is stored with tenant-level access controls, and passwords are stored only as modern salted hashes. Access to production data is restricted and audited.

You may request access to, correction of, or deletion of your personal data under the Mauritius Data Protection Act 2017. Contact info@grabbly.mu. You may also lodge a complaint with the Mauritius Data Protection Office.

We will post any changes to this page and update the date above. Material changes are announced in the apps.