Last updated Tue, 6 Oct
About this policy
This policy explains what personal data Ghar Ka Tiffin (“we”, “us”) collects when you use our website at https://gharkatiffin.food and our app, why we use it, who we share it with, how long we keep it and the choices you have. We handle personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
What we collect
Your mobile number, which is how you sign in and how we reach you about deliveries.
Your name and delivery addresses, one for lunch and one for dinner if they differ, with a landmark and a pin on the map if you add one.
Your email address, only if you give it, so we can send order emails.
Your orders, plans, meal choices, skips and pauses, payments, amounts owed, credit, lunch box deposit and the lunch boxes you hold.
Your language and your message settings.
Notes we make when you call us, so we can help you next time.
Technical data needed to run the service safely: a sign-in token and your language, kept on your device, and our server records of requests (such as the internet address and time), kept for a limited time for security.
What we do not collect
We do not see or store your card, bank or UPI details: you enter them on Razorpay’s own payment page. The app does not read your device’s location, contacts, photos or files, and we do not use advertising or analytics trackers.
Why we use it
To sign you in; to take, cook and deliver your orders and plans; to send you messages about your orders, meal choices, renewals, lunch boxes, refunds and days the kitchen is closed; to take payments and send refunds; to keep the accounting and tax records the law requires; to prevent fraud and keep the service secure; and to answer your questions. We use your data only for these purposes. We process it with the consent you give when you create an account, and for the uses the law allows, such as meeting legal duties.
Who we share it with
Service providers that work for us and use your data only to provide their service to us: Razorpay for payments, MSG91 for SMS, our email provider for emails, Google Maps for address search (the text you type and the map pin), and the company that hosts our servers.
Our delivery person sees your name, phone number, address and what to deliver, only for the deliveries they are making.
Government authorities, when the law requires it.
We do not sell your personal data, and we do not share it for advertising.
How long we keep it
We keep your data while your account is open. When you delete your account, your name, phone number, email and addresses are removed from your records. Records of payments, refunds and deposits are kept without them for as long as tax and accounting laws require, generally up to eight years. Server records are kept only for a limited time for security.
Your rights and choices
You can see and correct your details in the app under Account, and change your language and message settings there. Messages about sign-in codes, money and kitchen closures cannot be switched off, because the service needs them.
You can delete your account in the app under Account, or at https://gharkatiffin.food/account/delete. An account can be deleted once no plan is running, nothing is owed, every lunch box has been returned and no deposit refund is waiting; the page tells you what to settle first. Credit on your account is not paid out as money when the account is deleted.
You can ask us for a summary of your data and how we use it, ask us to correct or erase it, withdraw your consent (by deleting your account), name a person to act for you if you are unable to, and complain to us. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Security
Your data travels over encrypted connections (HTTPS). Sign-in uses one-time codes, staff see only what their role needs, and payments are handled by Razorpay, which is certified to the card industry’s security standard (PCI DSS). No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
Children
Accounts are for adults aged 18 or over. A parent may order meals for a child, but we do not knowingly collect personal data from children.
Cookies and storage on your device
We store only what the service needs on your device: what keeps you signed in, and your language. We do not use advertising cookies.
Changes to this policy
The date at the top of this page shows when this policy last changed. We tell you in the app or by SMS about an important change.
Contact and grievance officer
For a question, a request about your data or a complaint, call or WhatsApp +919219164448 or write to support@gharkatiffin.in, and our grievance officer will answer. We acknowledge a request within 48 hours and answer it within one month.