This policy explains, in plain language, how [Legal entity name – to be confirmed] handles your personal data when you use this website. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act). We collect only what we need to cook and deliver your food.

What we collect

• Phone number, to sign you in with a one-time code and to contact you about your order.
• Name, so the kitchen and rider know whose order it is.
• Delivery addresses and their map location, to check we deliver there, work out the fee and send the rider.
• Order history: what you ordered, when, what you paid and how. Payment details stay with Razorpay; we receive only a payment reference and status.
• Diet preferences (optional), such as “build muscle” or “keto”, if you choose to tell us. We use them only to suggest dishes.
• Technical data: basic logs (IP address, browser type) kept to keep the website secure.

Why we use it

• To take, prepare, deliver and support your order. This is necessary to provide the service you ask for.
• To send order updates by SMS or WhatsApp.
• To send offers, only if you turn them on. You can turn them off at any time.
• To keep tax and accounting records, as the law requires.
• To prevent fraud and misuse of coupons.

We do not sell your data and do not use it for advertising profiles.

Who we share it with

• Delivery partners: your name, phone number and address, only for the order they carry.
• Razorpay, to process payments.
• SMS and WhatsApp providers, to send one-time codes and updates.
• Hosting and database providers that store data for us under contract.
• Government authorities, only when the law requires it.

How long we keep it

• Account, addresses and preferences: while your account is active, and erased within 30 days of deletion.
• Invoices and order records: 8 years, as required by GST and income tax law.
• Security logs: up to 180 days.
• Accounts with no orders for 3 years are deleted automatically.

Your rights

• Get a summary of the personal data we hold about you and how we use it.
• Correct or update inaccurate data, such as your name or an address.
• Withdraw consent for optional uses such as offers or diet preferences.
• Ask us to erase your data, except what the law requires us to keep.
• Nominate someone to exercise these rights if you are unable to.
• Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

You can download or delete your data from the privacy centre in your account. We respond to requests within 30 days.

Security

Data is encrypted in transit, access is limited to staff who need it, and we never store card or UPI details.

Children

This website is meant for people aged 18 and over. We do not knowingly collect data about children.

Grievance officer

[Grievance officer name – to be confirmed]
[Legal entity name – to be confirmed], [Shop number and street – to be confirmed], Basaveshwara Nagar, Bengaluru 560079
Email [support email – to be confirmed]

We acknowledge grievances within 48 hours and resolve them within 30 days.

Changes

If we change this policy in a way that matters, we'll tell you on the website before it takes effect.