Privacy policy

1. Who is responsible

The UNMD app and website are operated by Товарищество с ограниченной ответственностью «Solomon partners», business ID 140640000376. UNMD is a marketplace for venue offers: the food seller is the venue identified in the offer and order. This policy describes how the platform operator handles customer, website visitor and support user data. Sellers are responsible for the data they receive to fulfil orders within their own duties.

2. Data processed

Account data includes your name, email including an Apple relay address, Apple or Google identifier, account and session identifiers, and necessary sign-in tokens. UNMD does not receive Apple or Google passwords. Consent records contain the full name you supply, language, document version and acceptance time. Orders contain the selected venue, items and quantities, amount, collection times, statuses, payment identifiers and collection code. Support processes the sender address, message, order number and attachments you provide. If notifications are enabled, the data described in the notifications section is processed. Network services receive IP addresses and request metadata needed to handle requests and protect the service.

3. Purposes and grounds

Data is used for sign-in, linking sign-in methods, processing and collecting orders, support, abuse prevention and mandatory legal duties. Processing relies on consent and other applicable lawful grounds. Browsing the catalog does not require registration. Account consent does not include separate marketing consent.

4. Recipients and payment data

ТОО «Компания Hoster.KZ» provides UNMD server infrastructure in Almaty for the primary database, files and backups. Operator staff access is limited to support and maintenance duties. Through Telegram, a venue receives the order number, items and quantities, amount, collection information and payment or refund status. For handover, staff check the code presented by the customer through the merchant panel. Telegram Messenger Inc. processes these messages and business chat data; customers do not need their own Telegram account. Apple (Apple Inc. and applicable group companies) and Google Sign-In authenticate users. UNMD receives profile information authorised by the user and authentication data; the password stays with the provider. Google Firebase Cloud Messaging and Apple APNs deliver optional notifications containing an order identifier and general status. Gmail (Google) processes messages to unmd.support@gmail.com, sender addresses, message text and attachments. The Google legal entity applicable to a particular service is determined by its terms and the account country. АО «Kaspi Bank» and the bank whose app the customer uses to confirm a compatible QR payment process the transaction. UNMD sends the amount, purpose and identifiers needed for the operation and receives payment and refund status information. Publishing the operator’s bank details does not mean every purchase is paid to that account: check the recipient in the banking app. The operator does not receive customer bank passwords or SMS codes.

Only data needed for the stated function is shared. The merchant Telegram panel does not receive customer email addresses, Apple/Google passwords or tokens. The banking app processes payment data under its own rules; the UNMD order API does not accept card numbers, CVVs or customer bank verification SMS codes. UNMD does not sell personal data. Protection of data shared with providers must meet applicable law and this policy; referring to provider terms does not replace the operator’s duties.

5. Hosting and transfers

The primary database and backups are hosted in Kazakhstan. Hosting provider: ТОО «Компания Hoster.KZ», Казахстан, Алматы.

The primary UNMD database and its backups are in Kazakhstan, but external sign-in, notification delivery, merchant messages through Telegram and Gmail support may involve processing abroad. Apple describes processing by group companies worldwide and storage generally in the United States. Google and Firebase use global infrastructure, including in the United States; the complete set of locations depends on the service. Telegram processes messages on its distributed infrastructure; it must not be treated as located exclusively in Kazakhstan. Telegram Messenger Inc.’s registration outside Kazakhstan does not identify the data centre for each message. Only data for the purposes listed in this policy is transferred. Consent to these transfers is recorded when the documents are accepted; the operator must also meet other applicable legal requirements. Notifications are optional, and the catalog is available without signing in. Provider processing locations and terms are published at: Apple — https://www.apple.com/legal/privacy/; Google — https://policies.google.com/privacy; Firebase — https://firebase.google.com/support/privacy; Telegram — https://telegram.org/privacy. Those terms do not remove UNMD’s data protection duties or authorise unrestricted transfers.

6. Retention and deletion

The profile is retained while the account exists. Account deletion removes the profile, Apple/Google links, consent records and active sessions. Tokens needed to revoke provider access remain in an encrypted queue until revocation succeeds and are then deleted. Temporary failures are retried.

Orders are unlinked from the account, but payment identifiers and operational records may remain for fulfilment, reconciliation and mandatory record-keeping. This does not make the bank transaction fully anonymous.

UNMD sessions last no more than 30 days; ending a session ends the associated access and notifications. Inactive server notification bindings are cleared after 30 days. Protected receipts for active orders after account deletion remain valid for up to 30 days after the later of account deletion or the end of the collection window. Backups are created daily on the server in Kazakhstan; each daily cycle removes copies older than seven days. Data removed from the live database may therefore remain temporarily in a protected backup until rotation. Order, settlement and refund records remain for fulfilment, bank reconciliation, handling claims and mandatory statutory record-keeping. Support messages and technical records remain only while needed to respond, secure the service or evidence obligations. The operator reviews the grounds for continued retention and performs deletion or anonymisation; orders are not automatically deleted at a single fixed age. On request, the operator provides the retained data categories, purpose, grounds and applicable period. Data must be deleted or anonymised when no grounds remain or its purpose has been met. Account deletion does not end banks’ or other recipients’ independent lawful retention duties.

7. Your rights and security

You may request access, correction, restriction or deletion and withdraw consent through support. Account deletion is available in the app without a mandatory call or email. Legally required retention may continue after consent withdrawal; its basis and period are provided on request. Controls include HTTPS, access restrictions and provider token encryption. Absolute security cannot be guaranteed.

8. Device data and changes

Language, favourites and connection settings are stored on the device; the session secret is stored in Keychain. The current app has no advertising tracking or precise-location permission request; the map uses seller addresses. Document pages do not use analytics cookies. The policy is updated when functionality changes; material consent changes require renewed acceptance.

Order notifications

Payment, collection, cancellation, refund and pickup-time notifications use Firebase Cloud Messaging (Google) and APNs (Apple) when you enable them in your profile and grant permission on your iPhone. Delivery uses installation and device identifiers, an FCM token, language, notification preference, order identifier and general status. Push messages do not contain the collection code, email address, item details or amount. UNMD stores the token encrypted. The binding and pending deliveries are removed when the server session ends or the account is deleted; inactive bindings are cleared after 30 days. You may disable notifications in your profile and iPhone settings and continue using orders. Messages already sent to a provider cannot always be recalled. Google and Apple retain technical data under their published terms, which do not necessarily match the retention of a binding in UNMD. This feature does not use advertising notifications or Firebase Analytics.

Service operator

Service operator

Товарищество с ограниченной ответственностью «Solomon partners»

Business identification number

140640000376

Contact address

г. Алматы, ул. Райымбека, 237А

Support email

unmd.support@gmail.com