Privacy Policy

1. Who we are

Nano Technologies (“Nano”, “we”, “us”) operates the Nano app and website and is the controller of the personal data described in this policy. You can reach us at [email protected] or at Nano Technologies, Erbil, Kurdistan Region, Iraq.

Independent partners — restaurants, market sellers, shops, event vendors and couriers — process some of your data for the purpose of fulfilling your order. Where they decide independently how to use it, they act as their own controllers and their own privacy notices apply.

2. What we collect

Data you give us

• Account data: phone number, name, email address, the Google or Apple account you sign in with (name, email and account identifier only — never your password), profile photo if you add one, and language and appearance preferences.
• Order data: delivery addresses, order contents, notes to the partner or courier, recipient details for Nano Express, and celebration booking details.
• Payment data: the payment method you choose and the transaction result. Card numbers are entered directly with certified payment providers; Nano does not store your full card number.
• Support data: the messages, photos and order references you send when you contact support.
• Partner and courier data: business registration documents, identity documents, vehicle details and payout details where you join Nano as a seller or courier.

Data collected automatically

• Location data: used to show what is deliverable to you, to place a pickup pin and to track an active delivery. Background or precise location is requested only for features that need it, and only with your permission, which you can withdraw in your device settings at any time.
• Device and technical data: device model, operating system, app version, language, crash reports, IP address and approximate region derived from it.
• Usage data: screens opened, searches, items viewed and orders placed, used to operate and improve the service.
• Cookies and similar technologies on the website — see our Cookie Policy.

Nano services and Nano Job

This policy covers Nano Eats restaurant orders, Nano Fresh groceries, Nano Store shopping, Nano Express door-to-door and pickup-point parcels, Nano Celebrate bookings, and the Nano Job courier app. Each service uses the order, booking and delivery details needed to provide it. If you enter another person’s name, phone number or address as a parcel recipient, provide only necessary details and let them know those details will be used for delivery.

• Nano Eats: restaurant orders, the dishes and notes you choose, delivery or pickup choice, courier speed tier, and — for Yumme dine-in — table booking details (date, time, party size, seating) and booking reminders.
• Nano Fresh: grocery and fresh-produce baskets, substitution preferences, recently viewed and repeat purchases, and the delivery zone that decides which market can serve your address.
• Nano Store: products viewed and bought, favourites, questions to sellers, and return requests. Strike-through prices and “Real deal” labels are calculated by Nano from price history, not from your data.
• Nano Express: sender and recipient names, phone numbers and addresses, parcel description, size and value, pickup-point choice, handover codes and delivery proof.
• Nano Celebrate: event date, venue or address, guest count, selected packages and vendor communications needed to deliver the booking.
• Across all services: your saved delivery-address book, order history, ratings and reviews, in-app chat with support, partners and couriers, and push notifications in the language you chose in the app.
• Personalised suggestions: we use your orders, searches and items viewed to recommend products and restaurants and to send occasional reminder notifications. You can turn notifications off in the app or device settings, and object to this profiling at any time.

• Courier onboarding: identity and eligibility documents, vehicle class, approved service, working area and availability are used to review applications and determine eligible delivery offers.
• Courier operations: location updates while online or on a delivery, pickup and drop-off routes, journey milestones, stage start times, elapsed delivery times, handover codes and proof photos where required support dispatch, delivery verification and dispute handling. Location permission can be changed in device settings; disabling it can prevent location-dependent courier work.
• Courier finance and support: delivery earnings, wallet entries, payout requests, ratings and support messages are used to reconcile work, settle payments and handle questions or disputes.
• Chat and deletion verification: a deletion request entered on the website sends a short-lived, single-use code to the registered account’s Nano Support chat. We process the phone number, challenge and attempt records, chat message, request metadata and confirmation to verify ownership and prevent unauthorized deletion. Entering a phone number or requesting a code alone does not delete an account.

If you cannot access your Nano app chat, contact [email protected] for an alternative ownership check and deletion assistance. Courier and partner accounts may require outstanding deliveries, payouts or disputes to be settled; records needed for those matters or legal obligations may be retained. Account closure and the 30-day erasure schedule are different steps. We do not promise immediate erasure of legally required records or copies retained by independent partners.

3. Why we use it, and on what legal basis

• To perform our contract with you: creating your account, taking and delivering orders, processing payments and refunds, and providing support.
• For our legitimate interests: keeping the platform secure, preventing fraud and abuse, verifying partners and couriers, measuring and improving service quality, and defending legal claims.
• With your consent: location permissions, push notifications, marketing messages, and non-essential cookies. You can withdraw consent at any time without affecting processing already carried out.
• To comply with legal obligations: tax and accounting records, consumer-protection requirements and lawful requests from authorities.

We do not sell your personal data. Delivery offers may be filtered automatically by location, approved service, vehicle and coverage. Contact support if you believe an eligibility restriction is incorrect.

4. Who we share it with

• Partners fulfilling your order — the restaurant, seller or vendor receives the order contents and the details needed to prepare it.
• Couriers and relevant pickup-point or warehouse staff — receive the sender or recipient details, addresses, parcel or order information and handover instructions needed for their part of the delivery. Contact details may be provided where the delivery requires them.
• Payment providers — certified processors that handle card authorisation, refunds and chargebacks.
• Service providers — hosting, maps and routing, messaging, analytics, crash reporting and customer-support tooling, all bound by contract to process data only on our instructions.
• Authorities — where disclosure is required by law or necessary to establish, exercise or defend legal claims.
• Business transfers — if Nano is involved in a merger or acquisition, data may transfer under the same protections, and we will notify you.

5. International transfers

Some of our providers process data outside your country. Where that happens, we rely on an adequacy decision or on standard contractual clauses together with technical safeguards such as encryption in transit and at rest.

6. How long we keep it

• Account data: while your account exists. After you ask us to delete it, existing sign-in sessions are revoked and erasure or anonymisation is scheduled 30 days later — the window in which you can still change your mind.
• Order and transaction records: for the retention period required by tax and accounting law, as applicable to the transaction and jurisdiction.
• Support conversations and courier verification records: retained for the time needed to resolve the case, administer the relationship, prevent abuse or meet applicable legal obligations.
• Precise location traces of a delivery: kept only as long as needed to resolve disputes about that delivery.
• Marketing consents: until you withdraw them, plus a record that you did.

7. How we protect it

Traffic is encrypted in transit, sign-in tokens are stored in protected device storage (Keychain on iOS, Keystore-backed storage on Android), access to production data is restricted and logged, and we run reviews before releases. No system is perfectly secure, so we also maintain an incident process and will notify you and the relevant authority where a breach is likely to affect your rights.

8. Your rights

You have the right to:

• access the personal data we hold about you and receive a copy;
• correct data that is inaccurate or incomplete;
• delete your data where we have no overriding legal basis to keep it;
• restrict or object to certain processing, including profiling for marketing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time;
• lodge a complaint with your data-protection authority.

Exercise any of these from your profile in the app, or write to [email protected]. We respond within one month and may ask you to confirm your identity first.

Deleting your account

You can start the deletion yourself, without writing to anyone: Delete your account verifies account ownership with a one-time deletion code sent to Nano Support chat in the signed-in app, asks why you are leaving, and records your confirmed deletion request while revoking existing sign-in sessions. Short-lived access tokens expire shortly afterward. Your personal data is erased 30 days later; until then you can cancel from your verified website session or contact support for ownership verification and cancellation. The records listed under “How long we keep it” survive the erasure because the law requires them, and are anonymised where they no longer need to identify you.

The reason you give is stored with the request and used to understand why people leave and to improve the service — never to advertise to you afterwards.

9. Children

Nano is intended for people aged 16 and older. Its app store rating does not make every listing suitable for all users. Products classified 16+ or 18+ have blurred images until the user meets the stated age threshold. A self-declared birthday check is not verification of identity or proof of legal purchase eligibility. If you believe a child has provided personal data, contact us so we can investigate and handle deletion requests.

Birthdays and age-restricted content

When you request access to an age-restricted product, Nano uses your saved account birthday or asks you to select and confirm it. For signed-in users, the selected birthday is saved to the account profile; the declaration is also remembered in protected device storage scoped to the account. Guest declarations are stored separately on that device. Eligible users do not need to repeat the check for each product; 16+ eligibility does not unlock 18+ content. Younger users remain restricted. Local declarations are not shared with sellers or used for advertising. Different devices may require a new check. To request correction or deletion, contact [email protected]; removing local app data removes the local declaration where supported by your platform. This check uses the birthday you declare and does not collect identity documents.

10. Changes to this policy

We update this policy when our processing changes. The effective date above always reflects the current version, and material changes are announced in the app before they take effect.

11. Contact

Privacy questions and requests: [email protected]. Postal address: Nano Technologies, Erbil, Kurdistan Region, Iraq.