Your privacy matters
This Privacy Policy explains what information LastBag (“LastBag”, “we”, “us”) collects, how we use it, who we share it with, and your rights. LastBag is a food rescue app operated in Nepal. By creating an account or using LastBag, you agree to this policy.
1. Who we are
LastBag is the controller of your personal data for the purposes described here. Privacy: privacy@lastbag.app · Support: support@lastbag.app
2. What we collect
Account details (name, phone, email, role, city/area, optional preferences and photos); partner business details and subscription records; reservations, cancellations, missed pickups, chat messages, reviews; support Contact us messages; device/app info and push tokens; analytics events; location and camera only when you grant permission for a feature.
We do not collect payment card details for rescue bags — customers pay partners at pickup (cash, eSewa, Khalti, or other methods the partner accepts).
3. How we use your information
To run accounts and Google sign-in, show nearby bags, process orders and pickup confirmation, enable chat, send notifications, support partners and customers, operate subscriptions, improve the product, prevent abuse, and meet legal obligations. We do not sell personal data or show third-party ads in the app.
4. Who we share your data with
Partners: for a reservation we share your name, phone, and order details with that restaurant so they can prepare and contact you. Order chat is visible to both sides.
Service providers: we use providers that process data to operate LastBag, including:
- Expo — app builds/updates and Expo Push Notification delivery
- Supabase — auth, database, storage, and realtime (Singapore region where configured)
- Vercel — website and API hosting
- Google — Google Sign-In (if used) and Google Maps links/directions
- Apple — App Store / iOS system services and Apple Maps where applicable
- Resend — transactional and support email
- PostHog — product analytics
- Apple App Store / Google Play — app distribution
- Map SDKs / system maps when you use map features
Providers may process data outside Nepal under their own privacy terms, only as needed to provide services to us. We may also disclose data for legal/safety reasons or in a business transfer.
5. Payments
LastBag does not process customer payments for rescue bags. Partner subscription records may be stored in our systems; we do not store full card numbers where we are not the card processor.
6. Push notifications
With permission, alerts are sent via Expo Push (confirmations, reminders, messages, partner alerts). You can disable them in device settings or Profile → Notifications.
7. Retention & your rights
We keep account data while active. After account deletion we delete or anonymise personal data within 30 days, except where longer retention is required for legal or fraud reasons (order history may be kept around 12 months or longer if required).
You may request access, correction, or deletion by emailing privacy@lastbag.app. You can withdraw optional permissions (notifications, location, camera) in device or app settings.
8. Security, children & changes
We use standard security measures (including encrypted connections). LastBag is not for children under 13. We may update this policy and will change the “Last updated” date; significant changes may also be announced in the app.
9. Contact
Email privacy@lastbag.app or support@lastbag.app. In the app: Help & Support → Contact us.