Last updated: 7 July 2026 Operated by: Propera Pvt Ltd ("Propera"), trading as Eveyla Contact: hello@propera.io
This Privacy Policy explains what information Eveyla collects, why we collect it, how we use and share it, how long we keep it, and the rights and choices you have. It applies to everyone who uses Eveyla: customers who browse and order, the shops, restaurants, and home kitchens that sell through Eveyla, and visitors to the platform.
Eveyla is an online storefront and ordering platform operated by Propera Pvt Ltd, a company incorporated in the Republic of Maldives ("Eveyla", "we", "us", "our"). This policy works alongside our Customer Terms and, for shops, our Shop Terms.
We have written this policy to meet our obligations under applicable Maldivian data protection law, including the Personal Data Protection framework as it comes into force, and to follow widely recognised data protection principles.
Please read section 6 ("Shops are independent") to understand the part the Shop plays, since each Shop is a separate business.
Propera Pvt Ltd, trading as Eveyla, is responsible for the personal information described in this policy, in the ways explained in section 2.
For any privacy question or request, or to exercise your rights, email hello@propera.io. We will respond within a reasonable time, as described in section 14.
If you are in the Maldives, you also have the right to complain to the relevant data protection authority. This function currently sits with the Information Commissioner's Office, which is expected to carry the Privacy Commissioner role under the new data protection law. We would, however, appreciate the chance to address your concern first.
Eveyla is the controller (the party that decides how and why information is used) for the platform itself. This includes shop owner and staff accounts, monthly-fee billing, analytics, security and fraud prevention, and the general operation of the service.
When you place an order, you are dealing with an independent Shop. The Shop decides to use your order information to accept, prepare, fulfil, and deliver your order, so the Shop is responsible for its own use of that information. Eveyla provides and runs the technology that carries your order to the Shop and stores the records, and Eveyla also uses limited order information for its own purposes, such as keeping the service secure, preventing fraud, keeping records, and analytics.
In short: for your account and the platform, Eveyla is responsible. For the order information a Shop uses to serve you, the Shop and Eveyla each have their own responsibilities. Shops also have their own obligations under our Shop Terms and under data protection law.
If you include health or other personal details in a note (for example allergy information), you are choosing to share that with the Shop so it can prepare your order. We handle it only to deliver your order. Please see section 16.
To make ordering easier, your cart, the name, phone number, and address you last used, and links to your recent orders are stored locally in your browser. This stays on your device, is not used to create an account, and you can clear it at any time in your browser. We do not receive a copy of this on-device information unless you submit an order.
If you rate an order, we collect your first name as entered, your rating, and any comment. Reviews are shown publicly on the Shop's page.
If you turn on order notifications (for example as a Shop owner), we store the information needed to send them, such as your browser or device push subscription, or your Telegram chat identifier if you connect Telegram. You can turn notifications off at any time.
Storefront pages, product listings, and reviews are public by design and can be seen by anyone who visits them.
We use personal information for the purposes below. The lawful basis for each is shown in brackets.
Where we rely on legitimate interests, we have considered your rights and only proceed where our interest is not overridden by them. Where we rely on consent, you can withdraw it at any time (see section 14).
Eveyla does not process or hold any money. You pay the Shop directly by cash on delivery or bank transfer. There is no card payment, so we never collect card details. Bank-transfer receipts you upload are stored so the Shop, and for monthly fees Eveyla, can confirm payment. Eveyla cannot verify, reverse, or recover any bank transfer.
Each Shop is a separate business responsible for fulfilling your order. When you order, the Shop receives the information it needs to prepare and deliver your order, including your name, phone number, address, island, order details, and any note. How a Shop handles your information is the Shop's own responsibility as an independent controller, and Shops are required under our Shop Terms to handle it lawfully and use it only to provide their service.
If you contact a Shop through WhatsApp or Viber, that conversation happens inside those apps and is governed by their own terms and privacy policies. We do not control those apps.
We share personal information only as needed to run the service, and with the following types of recipients:
We do not sell your personal information, and we do not share it for third parties' own advertising.
Some of our providers store and process information outside the Maldives. The infrastructure that runs Eveyla (including Supabase, Lovable, and Google) operates data centres in various countries, which may include locations in South Asia, the United States, the European Union, and elsewhere.
When information is transferred outside the Maldives, we take steps to make sure it remains protected, including using reputable providers that offer recognised security and contractual protections, and limiting what is transferred to what is needed. By using Eveyla, you understand that your information may be processed in these locations. If the law requires additional safeguards for a transfer, we will put them in place.
We use cookies and similar technologies for two purposes:
You can control or block cookies in your browser settings, and you can opt out of Google Analytics using Google's browser opt-out tools. If you block essential cookies or local storage, some features may not work. Where consent is required for analytics, we rely on the choice you make.
We keep personal information only for as long as we need it:
When we no longer need information, we delete it or remove the details that identify you.
We use reputable providers and reasonable technical and organisational measures to protect personal information. These include encryption of information in transit, storing passwords in hashed form through our login provider, database access controls (including row-level security) so that each Shop and customer can access only what they should, restricting access to uploaded files, and keeping credentials and secrets in a protected vault.
No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to keep your information safe and to keep our measures up to date.
If a personal data breach occurs that is likely to affect your rights, we will take steps to contain and investigate it and, where the law requires, notify the relevant authority and affected individuals without undue delay.
We do not make decisions about you that produce legal or similarly significant effects based only on automated processing. Security measures such as abuse limits and fraud checks are used to protect the service, not to make individual decisions about you.
Subject to Maldivian law, you have the right to:
To exercise any of these, email hello@propera.io. We may need to confirm your identity before acting. We aim to respond within 30 days, and will tell you if we need more time or cannot fully meet a request, with the reason.
Some information must be kept even after a deletion request, for example to meet legal, tax, or accounting obligations, or to resolve a dispute. Information saved on your own device is cleared by you through your browser.
Eveyla is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact us and we will remove it.
We do not ask for sensitive information such as health, religious, or biometric details. Please do not include it unless it is needed for your order, for example noting an allergy so a Shop can prepare your food safely. If you do share such a detail, you are asking us and the Shop to use it to fulfil your order, and we handle it with care and only for that purpose.
We may create and use aggregated or anonymised information that does not identify anyone, for example overall usage trends, to operate, analyse, and improve the service. This information is not personal information and is not subject to this policy.
We may update this policy from time to time. When we do, we will change the "Last updated" date above and post the updated policy on the platform. If a change is significant, we will take reasonable steps to make it clear. Continuing to use Eveyla after a change means you accept the updated policy.
Propera Pvt Ltd, trading as Eveyla Email: hello@propera.io
This policy is governed by the laws of the Republic of Maldives.