Last updated: November 7, 2026
1. Scope
This policy applies when you visit spice-ey.com, request a demo, create or use a merchant workspace, use Spice-ey’s operator applications, sign in to a Spice-ey-powered storefront account, deliver orders with Spice-ey Deliver (section 13), or otherwise communicate with Spice-ey.
A merchant may publish an additional privacy notice for orders placed with that merchant. The merchant is responsible for its own order fulfilment and use of customer information, while Spice-ey provides the software and data-processing infrastructure.
2. Information we collect
- Contact and account information, such as name, email, phone number, business name, account role, and authentication records.
- Merchant operational information, including menus, branches, staff access, orders, settings, reports, and support communications.
- Customer and order information, such as contact details, saved addresses, order contents, fulfilment instructions, and order history with the relevant merchant.
- Billing and payment information, including plan, invoice, amount, currency, payment status, and provider references. Card details are entered into the payment provider’s checkout and are not stored by Spice-ey.
- Technical and usage information, such as IP address, browser or device details, security events, application logs, feature use, and diagnostic information.
3. How we use information
- Provide, secure, maintain, and improve the Spice-ey platform.
- Create accounts, authenticate users, and enforce permissions.
- Process orders and route information to the merchant selected by the customer.
- Provide billing, payment-status, customer support, and service communications.
- Detect fraud, abuse, security incidents, and operational failures.
- Meet legal obligations and establish, exercise, or defend legal claims.
- Send marketing only where permitted and subject to the recipient’s available consent or opt-out choices.
4. Storefront accounts and merchant separation
A verified storefront account can keep a customer’s profile and saved addresses available across Spice-ey-powered storefronts. Order history remains separated by merchant: a customer does not see orders from one merchant while viewing another merchant’s storefront.
A merchant receives the customer information required to fulfil an order placed with that merchant. Spice-ey does not provide merchants with a cross-merchant customer directory.
5. When we share information
We may share information only as needed with:
- The merchant with which a customer places an order or reservation.
- Payment providers, including Paymob, to process payments and communicate payment results.
- Service providers supporting hosting, databases, email, security, monitoring, backups, and customer support.
- AI model providers, to run AI features such as menu import, translation and the owner assistant. They process that content on our behalf under contract and don’t use it to train their models.
- Advertising and analytics partners (Google and Meta), only for visitors to spice-ey.com who accept cookies, to count visits and measure our ads. On the Conversions API we send a hashed email or phone, never in readable form, plus your IP address and browser details. Meta browser events run with its first-party cookies disabled.
- Cloudflare Web Analytics, when enabled on spice-ey.com, collects page, referrer, browser and country to count visits in aggregate. It uses no cookies or local storage and stays off if you decline tracking in Cookie settings. It does not run on merchant tools or merchants’ online stores.
لما نفعّل Cloudflare Web Analytics على spice-ey.com، بيجمع الصفحة، والموقع اللي جابك، والمتصفح والبلد عشان يعدّ الزيارات بشكل إجمالي. مش بيستخدم كوكيز أو تخزين محلي، وبيفضل مقفول لو رفضت التتبّع من إعدادات الكوكيز. ومش بيشتغل على أدوات التجار أو متاجرهم الإلكترونية.
- Authorities or professional advisers where disclosure is required by law or reasonably necessary to protect rights, safety, and platform integrity.
- A successor in a merger, financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and legal requirements.
Spice-ey does not sell personal information as a standalone business activity.
6. Storage and international processing
Spice-ey uses cloud and infrastructure providers that may process information in Egypt or other countries. Where applicable, we use contractual, technical, and organizational safeguards appropriate to the information and processing.
7. Retention
We retain information for as long as needed to provide the service, secure the platform, maintain financial and audit records, resolve disputes, and meet legal obligations. Retention periods vary by record type. After a merchant subscription ends, export access may remain available for a limited period before data is deleted or de-identified, except where longer retention is required.
8. Security
Spice-ey uses access controls, separation between businesses, encryption in transit, protected authentication, audit records, backups, monitoring, and other safeguards designed to protect information. No online service can guarantee absolute security.
9. Your choices and rights
Subject to applicable law, you may ask to access, correct, delete, or restrict certain uses of your personal information, withdraw consent where processing depends on consent, or object to certain processing. Some financial, fraud-prevention, security, and audit records may need to be retained.
To delete a Spice-ey account, open Settings → Delete account in Console, or "Delete account" in the Spice-ey for Business app, which opens the same page; you can also email hello@spice-ey.com from the account's email address. We confirm the request and then delete or de-identify the account and its personal data within 30 days, except records we must keep for tax, accounting, fraud-prevention or legal reasons, which we keep only as long as required. A workspace owner removes staff accounts in Console → Staff; staff can also email us directly.
Read the account-deletion instructions in English and Arabic.
Send a request to hello@spice-ey.com. We may need to verify your identity before completing a request.
11. Children
Spice-ey’s merchant software is intended for businesses and authorized staff. Storefront users must be legally able to place an order or use the service with the involvement of a parent or guardian where required by applicable law.
12. Changes and contact
We may update this policy as the platform or legal requirements change. The date above identifies the current version. Material changes will be communicated where required.
Privacy questions can be sent through our Contact Us page, by email at hello@spice-ey.com, or by phone at . Our business address is 6 Gezerit El Arab Street, Mohandessin, Giza, Egypt.
13. Spice-ey Deliver riders
This section is for riders who deliver orders with Spice-ey Deliver (driver.spice-ey.com and the Spice-ey Deliver apps for Android and iPhone). Spice-ey Deliver is run by D Y K, the company behind Spice-ey, which decides how rider data is used under Egypt’s Personal Data Protection Law (Law No. 151 of 2020). The rest of this policy also applies to riders.
You cannot create an account in the app. Spice-ey enrols each rider under their agreement with D Y K, and you sign in with the mobile number we enrolled and a one-time code.
What we collect
- Your name, mobile number and vehicle type, and a record of your sign-ins.
- Your precise location, only while your shift is open. Starting a shift turns location on and ending it turns it off; we do not collect your location when you are off shift. During a shift the app sends your location about every 15 seconds. On Android it runs a location service with an ongoing notification and uses location permission “while using the app”; on iPhone it keeps using location in the background until the shift ends, and the phone shows that location is in use.
- Your shifts, the delivery offers you receive and accept, each delivery step and its time, the reason for any delivery that could not be completed, and your location at the moment you mark a delivery delivered or failed.
- When the shop asks for proof of delivery: a photo of the order at handover, and the 4-digit code the customer gives you, which is checked against the order. Photograph the order, not the customer.
- The cash you collect on cash orders and hand in, and your pay records.
- Crash and error reports from the app, and basic device and browser details.
Why we use it
To offer you deliveries near you, show customers where their order is, prove deliveries and settle disputes, settle cash and pay, keep riders and customers safe, prevent fraud, and meet our legal and accounting duties. We rely on your agreement with D Y K, our legitimate interest in safety, fraud prevention and resolving disputes, and our legal duty to keep financial records.
Who sees it
- Spice-ey’s dispatch team: your location, the status of your deliveries and your cash.
- The customer whose order you are delivering: your first name and the delivery status, and your position on their order map only while you are collecting or carrying their order. We share your location with that customer for this purpose.
- The shop that sent the order: your first name, the delivery status and the cash you hand in. The shop does not see your location. When proof of delivery is on, the shop sees the handover photo and whether the code matched, never the code itself.
- The service providers in section 5 that host and run the app for us, in Egypt or other countries (section 6). Sign-in codes may be sent by WhatsApp.
How long we keep it
- Location points: deleted after 14 days. Your last known position is cleared when your shift ends.
- Your location when you marked a delivery delivered or failed: deleted after 90 days.
- Handover photos: deleted 90 days after the delivery. We keep whether proof was given and whether the code matched.
- Your name and mobile number: kept while you deliver with us, and removed 30 days after you stop.
- Shift, delivery, cash and pay records: kept under your rider ID, without your name or number once those are removed, as financial and audit records for as long as the law requires.
- Backups: our weekly backups keep copies for up to eight weeks, so deleted data can stay in a backup until that copy is replaced.
Customers’ details are in your trust
After you accept a delivery, you see the customer’s details and the amount to collect. Use them only to deliver that order. Do not save, photograph or share them, and do not contact the customer after the delivery.
Your rights and contact
You have the rights in section 9: to access, correct, delete or restrict certain uses of your personal data, and to object to certain processing. Some cash, pay, fraud-prevention and audit records must be kept. To stop delivering and have your rider account removed, follow the rider steps on the account-deletion page. Send any request to hello@spice-ey.com or call +20 122 249 9649, from or with the mobile number we enrolled; we may need to confirm it is you. You can also complain to Egypt’s Personal Data Protection Center.
مندوبو Spice-ey Deliver
هذا القسم موجّه إلى المندوبين الذين يوصّلون الطلبات عبر Spice-ey Deliver (driver.spice-ey.com وتطبيقات Spice-ey Deliver على أندرويد وآيفون). تدير خدمة Spice-ey Deliver شركة D Y K، الشركة المالكة لـ Spice-ey، وهي التي تحدد طريقة استخدام بيانات المندوبين وفق قانون حماية البيانات الشخصية المصري (القانون رقم 151 لسنة 2020). وتسري بقية هذه السياسة على المندوبين أيضًا.
لا يمكن إنشاء حساب من داخل التطبيق. تسجّل Spice-ey كل مندوب وفق اتفاقه مع شركة D Y K، ويتم تسجيل الدخول برقم الموبايل المسجّل وكود يُستخدم مرة واحدة.
ما نجمعه
- الاسم ورقم الموبايل ونوع المركبة، وسجل مرات تسجيل الدخول.
- موقعك الدقيق أثناء الشفت فقط. بدء الشفت يشغّل الموقع وإنهاؤه يوقفه، ولا نجمع موقعك خارج الشفت. أثناء الشفت يرسل التطبيق موقعك كل 15 ثانية تقريبًا. على أندرويد يعمل التطبيق بخدمة موقع مع إشعار ظاهر طوال الشفت، ويستخدم إذن الموقع «أثناء استخدام التطبيق»، وعلى آيفون يستمر في استخدام الموقع في الخلفية حتى نهاية الشفت، ويُظهر الهاتف أن الموقع قيد الاستخدام.
- الشفتات، وطلبات التوصيل المعروضة عليك والتي تقبلها، وكل خطوة في التوصيلة ووقتها، وسبب أي توصيلة لم تكتمل، وموقعك لحظة تسجيل التوصيلة على أنها تمّت أو تعذّرت.
- عندما يطلب المحل إثبات التسليم: صورة للطلب عند التسليم، وكود الاستلام المكوّن من 4 أرقام الذي يعطيه لك العميل، ويُطابَق مع الطلب. يُرجى تصوير الطلب، لا العميل.
- الكاش الذي تحصّله في طلبات الكاش وتسلّمه، وسجلات أجرك.
- تقارير الأعطال والأخطاء في التطبيق، وبيانات أساسية عن الجهاز والمتصفح.
لماذا نستخدمه
لعرض التوصيلات القريبة منك، وإظهار مكان الطلب للعميل، وإثبات التسليم وحل الخلافات، وتسوية الكاش والأجر، وسلامة المندوبين والعملاء، ومنع الاحتيال، والوفاء بالتزاماتنا القانونية والمحاسبية. ونستند في ذلك إلى اتفاقك مع شركة D Y K، ومصلحتنا المشروعة في السلامة ومنع الاحتيال وحل الخلافات، والتزامنا القانوني بحفظ السجلات المالية.
من يرى بياناتك
- فريق التوزيع في Spice-ey: موقعك وحالة توصيلاتك والكاش الذي معك.
- العميل الذي توصّل طلبه: اسمك الأول وحالة التوصيل، وموقعك على خريطة طلبه فقط أثناء استلامك للطلب أو توصيله. ونشارك موقعك مع هذا العميل لهذا الغرض.
- المحل الذي أرسل الطلب: اسمك الأول وحالة التوصيل والكاش الذي تسلّمه. ولا يرى المحل موقعك. وعند تفعيل إثبات التسليم يرى المحل صورة التسليم ونتيجة مطابقة الكود، ولا يرى الكود نفسه.
- مزودو الخدمة المذكورون في القسم 5 الذين يستضيفون التطبيق ويشغّلونه لصالحنا، داخل مصر أو خارجها (القسم 6). وقد تُرسل أكواد تسجيل الدخول عبر واتساب.
مدة الاحتفاظ
- نقاط الموقع: تُحذف بعد 14 يومًا. ويُمحى آخر موقع معروف لك عند انتهاء الشفت.
- موقعك لحظة تسجيل التوصيلة على أنها تمّت أو تعذّرت: يُحذف بعد 90 يومًا.
- صور التسليم: تُحذف بعد 90 يومًا من التوصيلة. ونحتفظ بما إذا كان الإثبات قد قُدّم وبنتيجة مطابقة الكود.
- الاسم ورقم الموبايل: نحتفظ بهما ما دمت تعمل معنا، ويُحذفان بعد 30 يومًا من توقفك.
- سجلات الشفتات والتوصيلات والكاش والأجر: تُحفظ برقم تعريف المندوب، ودون اسمك أو رقمك بعد حذفهما، بصفتها سجلات مالية وسجلات تدقيق للمدة التي يتطلبها القانون.
- النسخ الاحتياطية: تحتفظ نسخنا الاحتياطية الأسبوعية بنسخ لمدة تصل إلى ثمانية أسابيع، لذلك قد تبقى البيانات المحذوفة في نسخة احتياطية حتى تُستبدل تلك النسخة.
بيانات العملاء أمانة لديك
بعد قبول التوصيلة تظهر لك بيانات العميل والمبلغ المطلوب تحصيله. يُرجى استخدامها لتوصيل هذا الطلب فقط، وعدم حفظها أو تصويرها أو مشاركتها، وعدم التواصل مع العميل بعد انتهاء التوصيلة.
حقوقك والتواصل معنا
لك الحقوق المذكورة في القسم 9: الاطلاع على بياناتك الشخصية وتصحيحها وحذفها أو تقييد بعض استخداماتها، والاعتراض على بعض أوجه معالجتها. ويجب الاحتفاظ ببعض سجلات الكاش والأجر ومنع الاحتيال والتدقيق. للتوقف عن التوصيل وحذف حساب المندوب، يُرجى اتباع خطوات المندوبين في صفحة حذف الحساب. يمكنك إرسال أي طلب إلى hello@spice-ey.com أو الاتصال على +20 122 249 9649، من رقم الموبايل المسجّل أو مع ذكره؛ وقد نحتاج إلى التأكد من هويتك. ويمكنك أيضًا تقديم شكوى إلى مركز حماية البيانات الشخصية في مصر.