What we collect
When you order, we store your name, phone number, optional email, delivery addresses you enter, your order history and the record of your text-message consent.
Your phone number is your account. We use it to send order updates and look up your past orders for one-tap reorders.
Payments
Card payments are processed by Clover. Your card number is entered in a Clover-hosted form (or through Apple Pay / Google Pay where available) and never touches our servers. We keep only the last four digits and the payment reference needed for refunds.
SMS messages
When you place an order and enter your mobile number, we text you about that order: confirmation with the pickup or delivery time, ready for pickup, courier on the way, and one question afterwards on how it went. If you ask to sign in with a text code, we text you a one-time sign-in code. These are the only texts we send unless you choose otherwise below.
Message frequency varies by order. Message and data rates may apply. Reply STOP to any message to opt out: you get one confirmation and nothing more. Reply START to rejoin and HELP for help.
Marketing texts are optional and separate from the order texts above. If you check "Text me Mangal offers" at checkout, you agree to receive Mangal marketing texts: Text me Mangal offers. Up to 4 msgs/month. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Consent is not a condition of purchase.
We keep a record of each consent and opt-out (phone number, time, the wording you agreed to) for 4 years, as carrier rules require.
Your mobile number and your consent are used only for the messages described here and are never shared with or sold to third parties or affiliates for their own purposes.
If you give an email, we send your receipt there. Every marketing email has an unsubscribe link.
The Mangal app
If you use the Mangal app and turn on notifications, your phone gives us a push token. We store it with your phone number and the location you chose, so we can tell you when an order is received, ready or on the way, and send an occasional offer if you keep that switch on. Turning the switches off in the app stops both kinds of notification to that token; the token itself is deleted when you delete your data. If you keep the app after deleting your data, it registers again for order updates the next time you open it, with offers off until you turn them on in Settings.
The app also tells us its platform (iOS or Android) and its version, and sends a crash report when something breaks. Crash reports contain no personal data.
If you allow location access, the app uses your position once to suggest the nearest Mangal. Your position is not stored.
To delete your account from the app, open Settings and choose Delete my data. On the web the same page is mymangal.com/account/delete. What is deleted and what is kept is described under Deleting your account below.
Who else sees your data
Only the services that make your order happen: Clover (payments and kitchen orders), our delivery partners (Uber Direct today; DoorDash Drive if we enable it) who receive your name, address and phone for delivery orders, Twilio (SMS), Resend (email), Cloudflare (hosting; request logs are kept up to 30 days), ClickUp (catering requests only), ElevenLabs (the phone assistant, which records and transcribes calls) and Anthropic (the order chat).
We use Google Analytics, Google Ads, Meta and PostHog to understand how the site is used and to measure ads. These tools receive usage events and, for ad measurement, hashed identifiers (a one-way hash of your phone or email), never your card details.
How long we keep it
Order records are kept for as long as accounting rules require. SMS consent records are kept 4 years. To delete your account and data, see Deleting your account below.
Deleting your account
You can delete your account yourself at any time: on the web at mymangal.com/account/delete, in the Mangal app under Settings, Delete my data, or from the Rewards page once you are signed in. Sign in with a text code, tick the confirmation, and the deletion happens at once. We send one final text to confirm it, unless you have opted out of texts.
What is deleted at once: your name, email and birthday, your phone number from your account, your points, your saved addresses, the push registration of your devices, and the link between your phone number and your finished orders.
What is kept: the order records and receipts themselves, for the period accounting and tax rules require, with your name, phone number, email and street address removed from them. SMS consent and opt-out records are kept 4 years, as carrier rules require. We also keep a keyed one-way hash of your phone number, which cannot be turned back into the number and has no name, orders or points attached, only so that one-time codes such as a first-order code cannot be used again on the same number. A catering request you sent keeps its copy in our task tracker and mailbox. Messages you sent to the order chat are deleted after 30 days on their own. If you called our phone assistant, the caller number and name of that call are cleared, but the written summary of the call the assistant made stays and may repeat what you said.
Copies held by the companies that serve you are not recalled by this deletion and stay under their own retention rules: Clover, which prints and charges every order, keeps its own copy of each order with the name, phone number and, for delivery, the address on the kitchen ticket; the courier company keeps its delivery record; ElevenLabs, which runs the phone assistant, keeps the call recording and transcript; Google and Meta keep the usage events and hashed identifiers already sent for measurement; and our text and email providers keep their delivery logs. The customer card Clover holds for you at each of our locations is deleted, usually within a day.
An order still in progress keeps your name, phone number and address until it is done, so the kitchen and the courier can finish it, and texts about it are still sent until then; those details are removed the night after it ends, and within 14 days in any case. A complaint still being handled keeps your number and message until the manager has closed it, at most 14 days. If you keep the Mangal app, it registers your device again for order updates the next time you open it, with offers off until you turn them on in Settings. You can order again any time; a new account starts from zero points.
Contact
Questions about privacy: email info@mangalcorporate.com.