What we know about you, and what we do with it.

• Account details: name, email, password (stored hashed by our authentication provider), phone number if you give one. To run your account and contact you about your orders. Legal basis: performing our contract with you.
• Delivery address and access notes: address, postcode, coordinates, entry instructions, any photo you add to help the driver find the door. To deliver, to plan routes and to show the driver where to go. Legal basis: contract.
• Nutrition and allergen details: calorie tier, protein, carb, veg and salt targets, allergens, dietary preferences and any severe-allergy flag, for you and any household member you add. Allergen and health-related preferences are special category data; we process them only with your explicit consent, given when you enter them, and only to portion and check your meals. You can remove them at any time, which also removes the protection they give.
• Orders, picks and feedback: what you ordered, swapped, skipped or rated, and any review or dispute you submit with its photos. To cook and deliver, to suggest meals you are likely to want, to resolve problems and to pay kitchens fairly. Legal basis: contract and our legitimate interest in running the service well.
• Payment: handled by Stripe. We receive a customer reference, the card type and last four digits, and the status of each payment. We never see your full card number. Legal basis: contract.
• Messages: support, driver and kitchen chats inside the app, including replies from our automated assistant. To help you, and to train nobody: chat content is not used to train AI models.
• Camera and photos: in the Back Kitchen app, only when you choose to scan a card, photograph a delivery problem or your door, or send a photo in chat. Only the photos you take or pick are uploaded. Legal basis: contract.
• Device and usage data: push notification tokens if you opt in, and analytics events on the website and apps once you have accepted analytics cookies. Legal basis: consent.

The Suppa Driver app collects what we need to check you can drive safely, offer you routes and pay you:

• Account and contact: name, email, password (stored hashed), mobile number. To run your account and send route offers. Legal basis: contract.
• Vehicle and availability: vehicle type, registration, home postcode and the days and hours you can work. To offer you routes that fit. Legal basis: contract.
• Identity documents: photos of your driving licence, a proof of identity and a selfie, stored in a private bucket only you and our admins can open. An automated check (Anthropic’s Claude) compares them and gives a decision with its reasons. Legal basis: legal obligation and our legitimate interest in knowing who carries customers’ food.
• Location: your phone’s position while a route is in progress, only with your permission and only while the app is open, so customers on your route see you coming and get an accurate arrival time. It is not collected between routes. Legal basis: contract.
• Camera and photos: used to scan meal labels, take proof-of-delivery photos and send photos in customer chat. Only the photos you take or choose are uploaded.
• Pay: what each route earned and when it was paid. Bank details are held by Stripe through Stripe Connect; we never see them. Legal basis: contract and tax law.
• Messages: chats with customers on your route, kept with that customer’s order.

Customers on your route see your first name, your live position while you are on the way, and your messages. They never see your phone number. You can delete your driver account yourself at any time from Settings in the app; the steps and what is kept are on our delete your account page.

We share only what each party needs to do its job, under contracts that bind them to protect your data:

• Our restaurant partners: your meal specs, allergens, a label code and your first name. Never your address or contact details.
• Our drivers: your name, address, access notes and any photo of the door, your phone number only through the in-app call or chat, and the day's items.
• Stripe: payment processing. Resend and our SMS provider: order confirmations and delivery-day messages you have asked for. Mapbox and Google: address lookup and routing (your address, not your identity).
• Our hosting and database providers (Supabase, Netlify), which store data in the UK or EU, or under standard contractual clauses where not.
• Anthropic's Claude, which powers the automated parts of support, review moderation and partner-application screening. It sees the text of the request and relevant order context, not your payment details.

We do not sell your data and we do not share it with advertisers. We may share data where the law requires it.

Your account, address, nutrition profile and order history stay while your account is open. Notification logs and automated review records are kept for 365 days (about 12 months) and then deleted. Dispute photos are deleted once the dispute is closed and any related claim period has passed.

You can delete your account yourself at any time, in the Back Kitchen app (More, then Profile, then Delete account) or on the website under Account, then Delivery address. It happens straight away: your plan is cancelled and your account, profile, orders and chats are deleted. Payment and invoice records are kept by Stripe, our payment provider, for up to seven years for tax law, and database backups roll off within 30 days. The full list is on our delete your account page.

You can ask us to:

• See the data we hold about you, and get a copy.
• Correct anything that is wrong (most of it you can edit yourself in your account).
• Delete your data, or restrict how we use it.
• Stop any processing based on consent, including analytics and allergen data, at any time.
• Give you your data in a portable format.

Ask through the in-app support chat. We reply within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).

Data is encrypted in transit and at rest. Access inside Suppa is limited to the people who need it for their role, and every table is protected by row-level access rules so a kitchen or driver can only ever see the orders assigned to them.

The website uses essential cookies to keep you signed in and analytics cookies only after you say yes. The full list is on our cookie policy.

If we change how we use your data in a way that matters, we tell you by email and in the app before it takes effect. The date at the top shows when this page last changed.