FlavorFly privacy policy
Last updated: September 19, 2026.
Vayliron LLC operates FlavorFly, FlavorFly Driver and the associated merchant and HQ web portals. This policy explains the information processed when you use these services. Collection depends on your role, the features you use, and permissions you grant. Contact support@vayliron.com for privacy questions or requests.
Intended audience
FlavorFly Customer is intended for adults aged 18 and over. Do not create a customer account if you are under 18.
If you believe a child has provided personal information to FlavorFly, contact support@vayliron.com so we can review the account and the appropriate deletion request. The customer audience requirement is separate from driver eligibility and age verification for restricted products.
Information and purposes
- Account and contact details: name, email, phone, account identifiers, authentication/session records and delivery addresses, to sign you in, communicate and fulfill requests.
- Orders and payments: selected items, preferences, instructions, order history, receipts, payment-provider references, masked saved-payment details, refunds, credits and payout/earnings records, to process and reconcile services. Payment credentials are handled through the configured payment service; FlavorFly’s saved-card feature stores provider references and masked details, not a reusable full card number or card security code.
- Location: addresses and precise coordinates you provide or permit, for service availability, delivery destinations and active rider assignments. Customers can view an assigned rider’s delivery location during the applicable active delivery, not unrestricted rider history. Device location permission can be revoked in your device settings.
- Uploads and communications: selected profile photos, order messages, support requests, ratings, shopping lists, receipts and delivery evidence, to operate and support the service. Driver onboarding also processes identity documents, licenses, vehicle details and insurance evidence for review by authorized staff. These documents are not public store content.
- Technical and activity information: network and authentication events, security/audit records and service errors, to protect and maintain the service. Where enabled, Vercel analytics and performance tools process page interactions, approximate location and device/browser performance information.
Optional voice ordering and Siri
When you record an order, audio is sent for transcription to Groq in the current voice configuration. The resulting text, or text you type, and relevant catalog entries are processed through Vercel AI Gateway by the configured order-interpretation model (Google or OpenAI). Do not include payment credentials, identity-document numbers or unrelated sensitive information in an order request.
The FlavorFly voice endpoint does not save raw recordings or transcripts to its application logs. Provider processing and retention are separate: Groq describes limited reliability/abuse retention in its data policy. We do not promise zero retention by every provider. Siri is provided by Apple; its speech processing is subject to Apple’s settings and privacy information. A pending Siri draft can be kept on the device until handled or expired.
You can decline microphone permission and browse or type instead. Voice requests prepare a selection for review; they do not automatically charge you or place an order.
Who receives information
Relevant order information is shared with the participating store, assigned rider/shopper and authorized operations or support staff as needed to fulfill and resolve your request. Service providers include Supabase for authentication/database/files, Vercel for hosting and configured analytics/AI routing, Groq and the configured AI model provider for optional voice/text interpretation, and Paystack or M-Pesa services for applicable payment workflows. Map tiles and external navigation services receive requests when their features are used.
Providers may process information outside your country, including in the United States. Their own legal obligations and retention practices may also apply. FlavorFly does not include an advertising-tracking SDK in these app builds. Operational location sharing is different from advertising tracking.
Permissions, device storage and security
Camera, photos, microphone and location access are requested for relevant features, and you can change permissions in device settings. Saved sign-in, preferences and pending drafts use device/browser storage. Face ID, Touch ID or device-unlock checks happen through the operating system; FlavorFly does not receive biometric templates. Signing out and deleting an account are different actions.
Role and account checks restrict private records; sensitive uploads use protected access. No internet service can guarantee perfect security. Never give support your password, verification code or full payment credentials.
Retention, deletion and your choices
Account and service records are kept to provide the features you use. Transaction, settlement, security, tax and dispute records may need to remain after account deletion. Retention depends on the type of record, unresolved matters and applicable obligations; there is no single retention period for all data. Backups and providers can retain information separately from active application records.
You can update available profile details and request account deletion in the app or on the web. The deletion flow removes the login and associated personal data, redacts retained operational records, and queues retryable private-receipt erasure where needed. Contact us for access, correction, deletion or information about specific retained records. We may verify your identity before acting. You may also raise concerns with your applicable data-protection authority.
Changes and contact
We will update this page when service practices change. Check the date above and review permissions before using an optional feature. For help or privacy requests, use FlavorFly support or email support@vayliron.com.