Hello Super App (HSA)
We collect personal information you provide when creating an account: full name, phone number, and email address. We also collect delivery addresses, order history, payment method details (tokenized — we never store full card numbers), device information (model, OS version, app version), and location data when you enable delivery tracking. Anonymous usage analytics help us improve the app experience.
Your data is used to: process and fulfill orders, coordinate pickup and delivery logistics, communicate order status updates via push notifications and SMS, manage your loyalty program (Angkorian Stars and Sleung Coins), personalize your experience with relevant shop recommendations, prevent fraud and ensure platform security, and comply with Cambodian regulatory requirements. We do not use your data for purposes beyond what is described here.
We share limited data with: partner Shops (your name, phone, delivery address, and order details — only what's needed to fulfill your order), logistics partners (delivery address and contact number for pickup/delivery coordination), payment processors (tokenized payment information for transaction processing), and law enforcement (only when required by Cambodian law or valid court order). We never sell your personal data to advertisers or third-party data brokers.
We implement industry-standard security measures including: encryption of data in transit (TLS 1.3) and at rest (AES-256), secure token storage for authentication credentials, regular security audits and penetration testing, role-based access controls for internal staff, and automated threat detection systems. Our infrastructure is hosted in the Asia-Pacific region with Supabase, which maintains SOC 2 Type II compliance.
You have the right to: access all personal data we hold about you, correct inaccurate information in your profile, request deletion of your account and associated data, export your data in a portable format, withdraw consent for optional data processing (e.g., marketing notifications), and lodge a complaint with the relevant data protection authority. To exercise any of these rights, contact [email protected] or use the in-app settings. You can also permanently delete your account at any time from Account > Edit Profile > Delete Account.
Our mobile app uses minimal tracking: device identifiers for push notifications, anonymous analytics events (screen views, feature usage) via privacy-respecting tools, and Apple's App Tracking Transparency (ATT) prompt — you can opt out of cross-app tracking. We do not use third-party advertising cookies. Our web presence uses essential cookies only for session management. You can manage notification preferences in Account > Settings.
Last updated: March 1, 2026 · Contact: [email protected]