Privacy Policy
This policy explains how Madar handles personal data in the Madar point-of-sale and ordering platform.
1. Who is responsible for your data
Madar is used by restaurants to run their business, and that shapes who is responsible for what.
- When you order food, make a reservation, or take a delivery, the restaurant you ordered from is responsible for that data — it is the controller. Madar processes it on the restaurant's behalf, on its instructions, as its processor.
- Madar is directly responsible only for the data of its own account holders — the people who log in to manage a restaurant — and for our own business records.
To have your order data corrected or deleted, contact the restaurant you ordered from. When they instruct us, we act on it, and we will help you reach them.
2. What we collect
Delivery orders and reservations
| Data | Why |
|---|---|
| Name | to identify the order |
| Phone number | to confirm the order and contact you about delivery |
| Delivery address — street, floor, landmark | to deliver the order |
| Order contents and amount | to fulfil and bill the order |
Your phone number is verified with a one-time code sent over WhatsApp.
There is no marketing database. This data exists to fulfil your order. We do not build profiles from it and we do not sell it.
Madar accounts (restaurant staff and managers)
Name, email address, a securely hashed password, and the branches and permissions assigned to you. Your password itself is never stored.
Payments
Card payments are handled by the payment provider. Madar never receives or stores card numbers — only which method was used and the amount.
3. What we do not do
- No advertising identifiers, no cross-app tracking, no ad networks.
- No selling or renting of personal data.
- No storage of card numbers.
- No third-party AI services.
4. Who we share data with
Only what running the service requires. The current providers, what each receives and where it operates are listed at Sub-processors.
One disclosure worth stating plainly: menu item names are sent to Google Cloud Translation to produce translated menus. No customer data is involved — only the names of dishes.
Where a restaurant asks us to send its order data to another system it uses — for example an in-house shopping-mall reporting system — we do so only on that restaurant's written instruction. The restaurant is responsible for that disclosure.
5. Where data is stored
Primary systems are hosted in Europe. Backups are held on separate infrastructure under our control. Some providers listed under Sub-processors operate outside Egypt; that is identified there.
6. How long we keep it
Set out in full in the Data Retention Schedule. In summary: order records are kept for 5 years to meet accounting and tax requirements; account data is kept while the account is active; diagnostic error reports are deleted after 30 days.
7. Your rights
Under Egyptian data protection law you may request access to your data, its correction or deletion, and may object to how it is used. Because the restaurant is the controller of order data, requests about orders go to them and we assist.
To delete a Madar account, see Delete your account.
8. Security
How the platform is secured is described in Security.
9. Children
Madar is a tool for businesses and their customers. It is not directed at children.
10. Changes
We will notify material changes through the product. Every previous version of this policy remains available with its effective date.