Privacy Policy

Effective August 11, 2026

Isleat provides food delivery, taxi requests, Marketplace, chat and related local services in the U.S. Virgin Islands. This policy explains how we handle information when you use Isleat.

Information we collect

We may collect account details, contact information, delivery and pickup addresses, location when you choose to provide it, order and taxi request details, Marketplace posts and messages, device and app diagnostics, and payment references. Card details are processed by our payment provider; Isleat stores only the payment token and limited card description needed to show a saved method.

App installation and security information

To operate and secure Isleat, we assign a random identifier to each app installation and may also receive a Firebase Installation ID. We associate the installation with limited technical information such as platform, device model, operating system and Isleat version, language, first and last activity dates, current notification token, and the Isleat account IDs used on that installation. We may keep security events, promotion-use history, review decisions and restriction history when reasonably necessary to prevent abuse and resolve disputes. Firebase App Check may provide an attestation result indicating whether a request came from an authentic Isleat app; Isleat does not receive an IMEI, hardware serial number, full hardware fingerprint or advertising identifier for this purpose.

How we use it

We use information to provide and secure the service, process orders, connect customers with restaurants and drivers, deliver notifications, provide support, determine eligibility for limited-use promotions, investigate abuse, measure app performance and comply with law. A risk indicator can prioritize a manual security review, but Isleat does not automatically block an installation solely because of that indicator.

Sharing

Information is shared only as needed with the restaurant, assigned driver, people you message, and service providers such as Firebase, Google Analytics, OneSignal and MagiPay. We may disclose information when legally required or to protect users and the service.

Location

Location is used for delivery, pickup, distance and taxi features. You can deny or change location permission in device settings. Isleat does not require continuous background location from customer accounts.

Retention and deletion

Profile data is kept while your account is active. When you delete the account, profile data, saved payment methods, Marketplace posts and conversations are removed. Short-lived security rate-limit counters are scheduled to expire after they are no longer needed. Installation activity and risk events are reviewed for deletion or de-identification after 24 months of inactivity; security reviews, block history and administrator audit records are reviewed after 36 months. Completed order and promotion-redemption records may be kept longer when reasonably needed for accounting, disputes, fraud prevention, service security or legal obligations. A legal hold or active investigation can extend these periods. You may contact us to request access to or deletion of installation information, subject to those obligations.

Your choices

You may update your profile, manage permissions and notifications, or permanently delete your account from Account → Security → Delete Account. See the account deletion page for details.

Contact

Questions or privacy requests: elisaul@isleat.com.