Skip to content
Get the app

Privacy Policy

Last updated: 6 October 2026

Khorak is operated by Carpal Plus LTD, a company registered in England and Wales (company number 16980854). Khorak (“we”) runs the Khorak food and grocery delivery app and the Khorak Partners website in Afghanistan. This policy explains what personal information we collect, why, who we share it with, and the choices you have.

Information we collect

  • Account: your name, email address and/or phone number from the sign-in method you choose (Google or Apple).
  • Delivery addresses and location: addresses you save and, only if you allow it, your device location while you use the app — to show nearby restaurants and place your delivery pin. We do not track your location in the background.
  • Orders: what you order, prices, notes to the restaurant, payment method (card, Apple Pay or cash), and the order’s progress.
  • Card payments: card and Apple Pay payments are handled by Stripe. Your card number goes straight to Stripe; Khorak never sees or stores it. We keep only the amount, the payment status and Stripe’s reference for the payment.
  • Riders: while a Khorak rider is delivering an order, the rider’s location is shared with that order so the customer can follow it.
  • Khorak Rider app: a rider’s name and SMS-verified mobile number; for the identity check, photos of both sides of their tazkira, a selfie, the tazkira number and their current home address with the phone’s location when they send it; their location while online or on an order (only while the app is open); a photo of each order at the door as proof of delivery; earnings and cash collected; and, for withdrawals, the HesabPay number they give. Identity photos are seen only by Khorak staff and kept while the person rides for Khorak and for up to one year after, unless the law requires longer. Delivery photos are seen only by Khorak staff, to settle “my order never came” complaints.
  • Partner applications: name, phone, email, business name and city that restaurants and riders send us on this website.
  • On your device only: your cart, favourites, recent searches and language are stored on your phone.

How we use it

  • to take your order, pass it to the restaurant and a rider, and deliver it;
  • to contact you about an order and to provide support;
  • to pay restaurants and riders and keep accounting records;
  • to keep the service secure and prevent fraud.

We do not sell your personal information and we do not use it for advertising tracking.

Who we share it with

  • The restaurant or shop you order from: your order, name and — when they deliver themselves — your phone and address.
  • The rider delivering your order: your name, phone and delivery address.
  • Service providers: Stripe (card and Apple Pay payments), Google Firebase (sign-in, database and website hosting), Google Maps (maps), OpenStreetMap routing (the route between restaurant and address), and Apple/Google for sign-in. They process data only to provide their service to us.
  • Authorities, only when the law requires it.

How long we keep it

We keep your account information until you delete your account. Order records are kept as long as needed for accounting and legal duties; when you delete your account we remove your name, phone number and addresses from them within 30 days.

Your choices

  • Delete your account: in the app go to Account → Settings → Delete my account, or see Delete your account.
  • Location access can be turned off at any time in your phone settings; you can still type your address.
  • To see or correct the information we hold about you, contact us.

Children

Khorak is not meant for children under 13, and we do not knowingly collect their information.

Security

Data is sent over encrypted connections and stored with Google Firebase. Access rules make sure customers, restaurants and riders only see the orders that concern them.

Changes and contact

If we change this policy we will update the date above and, for important changes, tell you in the app. Questions or requests: