Privacy policy
We collect as little as we can and we don't sell any of it. Munch Express (Australia) follows the Australian Privacy Principles.
What we collect
Your name, email, mobile (optional), the stops you follow, your orders, dietary preferences, points balance and the device tokens needed to send push notifications. If you flag the truck down in a roaming zone we take one GPS reading so the driver can find you — we don't track you otherwise. Your location for "stops near me" stays in your browser and is never sent to us.
Why we collect it
To take your order, tell the driver who's collecting it, ping you when the truck's close, run Munch Rewards and keep the lights on (tax records). That's it.
Payments
Card payments are handled by Stripe. We receive a confirmation and the last four digits — never your full card number.
Who sees it
Munch staff who need it to do their job (drivers see the name on a pickup, not your email). Our hosting and push providers process data on our behalf under contract. We don't sell or rent your details to anyone.
Notifications and email
ETA pings and order updates are part of the service — switch each one on or off under Account. Marketing email is opt-in and you can turn it off any time.
How long we keep it
While you have an account, plus what tax law requires (7 years for order records). Delete your account from the Account page: we remove your profile and stop all notifications straight away.
Your rights
Ask us for a copy of your data, to fix it or to delete it: [email protected] or 1300 655 526. If you're not happy with how we handle a complaint, you can go to the Office of the Australian Information Commissioner (oaic.gov.au).
Cookies
One session cookie to keep you signed in and a local setting for your theme and cart. No ad trackers.
Kids
Munch isn't for under-16s. If we learn we've got a younger person's account we'll remove it.
Changes
If this policy changes in a way that matters we'll tell you in the app before it takes effect.
See also the terms of use.