Privacy Policy

• Your account: your name and email address. Your password is stored only as a one-way hash — nobody at Ligabaw can read it.
• Your bookings: the name and email on the booking, party size, dates and times, and any messages you exchange with the business about it. If you review a visit, we keep the review.
• Your orders: what you ordered, any note you add (such as a message for a cake), the pickup or delivery time, and the name, email and phone number you give so the shop can reach you. For delivery, the address you choose and how far it is from the shop.
• Event tickets: the name and email the tickets are issued to, how many, and whether they've been used at the door.
• Allergies, diet and access needs, if you save them: whatever you choose to tell every business you book with — allergies, dietary needs, access needs, seating and a note. Allergies and access needs are health information, so we treat them narrowly: a business sees them only on bookings you make while signed in, only until that visit is over, and never on a booking where you switched sharing off. A kitchen sees only the allergies and diet. They're never copied into emails or into the business's own records, so when you change or clear them, that takes effect everywhere at once.
• Notes a business keeps about you: businesses you book with can add private notes to their guest records (for example, a seating preference). Only that business can see them.
• If you use Ligabaw inside Telegram: your Telegram account number and username, so the Mini App knows you next time and your booking and order updates can reach you there. An account created that way has no email address of its own and no password — Telegram is how you sign in.
• Your preferences: notification settings, and whether you've turned on two-factor authentication.
• Mobile app notifications: if you allow them, a push token so we can send you booking updates.
• Location: on the website, if you choose to sort by distance, your location stays in your own browser and isn't sent to us. In the mobile app, if you turn on nearby offers, your location is sent to find businesses close to you. It's used for that check and not stored; we only record which offers we've already shown you so you don't get the same one twice.
• Business accounts: the business's details, its services and menu, and its team members' names and email addresses.

• To make, change and cancel bookings, and to let you and the business talk about them.
• To pass your orders and tickets to the business, check a delivery address is within the distance the shop delivers, and let the shop contact you about your order.
• To send the emails and notifications you'd expect — confirmations, reminders, password resets.
• To keep accounts secure and to stop fake bookings and abuse.

We don't sell your data, and we don't use it for advertising.

• The business you book with sees your booking details, your messages, and any notes its own staff add. A shop you order from sees your order, contact details and delivery address; an event organiser sees the name and email on your tickets.
• Ligabaw platform staff can see account and business records to approve businesses, handle support and deal with abuse.
• Service providers that run parts of the platform for us: our hosting provider, an email delivery service, and — in the mobile app — Expo, Apple and Google, which deliver push notifications. If you use Ligabaw inside Telegram, Telegram carries the messages our bot sends you, as it carries any chat. If error reporting is enabled, crash reports go to Sentry with personal details removed.

To show maps and text, pages load fonts from Google Fonts and map images from OpenStreetMap. Those services receive your IP address, as any website you visit does. We don't use analytics trackers or advertising networks.

When you search for a delivery address, our server sends the text you typed to OpenStreetMap's Nominatim service to find it on the map. The request comes from us, not your device, and carries nothing that identifies you.

Telegram's own script loads only on the Mini App pages, which are the ones you reach from Telegram. An ordinary visit to this website never contacts Telegram.

We use two cookies, both needed to keep you signed in. We don't use tracking or advertising cookies. Your browser also stores a few settings on your own device — for example, a location you chose to save for distance sorting.

Most payments happen directly between you and the business, and we never see them. Where you pay online — a deposit, a ticket, an order, a gift voucher or a tip — you pay on Ligabaw Pay, our separate payment service, either through a payment provider (Chapa for mobile money and local cards, Stripe for international cards) or by bank transfer. Your PIN, card number and wallet login go to the provider and never reach us. For a bank transfer we keep the receipt you upload, so our payments team can check it against our bank statement. We keep the amount, how it was paid, and whether it was paid or refunded. What a business is owed from your payment is held by Ligabaw and paid out to the business.

• You can change your name, notification settings and nearby offers from your account page.
• You can delete your account yourself from your account page, on the website or in the app. That signs you out everywhere, cancels upcoming bookings and orders (the business is told, and anything you paid for an order by card is refunded), and removes your name and email from your bookings, orders, tickets, reviews and waitlist entries — along with the phone number and delivery address on your orders — the messages you sent in booking chats, your stamp cards and notifications, and any notes a business kept about you. Gift vouchers you bought or were given keep working but no longer carry your name. What remains is that a booking, order or ticket existed, with no way to tell it was yours, because businesses need their own records to stay complete. An account you created inside Telegram is deleted the same way, except that Telegram confirms it's you instead of a password — and deleting it also removes your Telegram account number from our records.
• You can download a copy of the personal data we hold about you, as a single file other services can import, from your account page — on the website, or from the link in the app. We email you whenever a copy is downloaded. Notes a business wrote about you are its own records, so ask that business for them. To have anything corrected, write to contact@ligabaw.com.

Connections are encrypted, passwords are hashed, and you can add two-factor authentication to your account. Signing out of one device doesn't sign you out elsewhere, but changing or resetting your password ends every session.

If we change what we collect or who we share it with, we'll update this page and its date first.