myTiffin ("we", "our", "the platform") connects customers with independent home-kitchen and tiffin vendors for meal ordering and delivery. This page explains what information we collect through our website and apps (customer and vendor-admin), how we use it, and the choices you have.
Information We Collect
We collect only what's needed to take and deliver your order:
- Account info — your name and, when you sign in with Google, your email address and profile name. If you sign in with mobile OTP instead, we collect your phone number for verification.
- Contact & delivery details — mobile number, delivery address (home society/flat number, or office/company and employee ID for office delivery).
- Order information — meals ordered, quantities, delivery dates, order status, and payment method selected (Cash on Delivery or UPI) — we do not collect or store card, UPI PIN, or banking credentials; payments are handled outside the app.
- Location — with your permission, your device's approximate GPS location, used only to show kitchens near you and estimate delivery distance. You can decline this and browse by area instead.
- Push notification token — if you enable notifications, a device token (via Firebase Cloud Messaging) used to send you order-status updates.
- Language preference and basic device/browser info needed to run the app correctly.
How We Use Your Information
- To take, process, and deliver your orders, and let the relevant kitchen (vendor) manage them.
- To send order-status notifications (e.g. "your order is being prepared" or "delivered").
- To show you kitchens near your location.
- To let you view your order history and manage bulk/party order requests.
- To communicate important account or service updates.
We do not sell your personal information to third parties, and we do not use your data for third-party advertising.
Who We Share Information With
- The specific kitchen (vendor) you order from — they receive your name, phone number, delivery address, and order details needed to prepare and deliver your order.
- Service providers we use to operate the platform — Google (Sign-In, Sheets/Apps Script for order storage, Firebase Cloud Messaging for push notifications) and an SMS provider for OTP delivery. These providers process data only to provide their service to us, under their own privacy terms.
Data Storage & Security
Order and account data is stored in Google Sheets accessed via Google Apps Script, scoped separately per vendor kitchen. We take reasonable measures to protect your information, but no online service can guarantee absolute security.
Data Retention & Deletion
We retain order and account information for as long as your account is active, or as needed to resolve disputes and comply with our legal obligations. To request deletion of your account and associated data, contact us using the details below.
Children's Privacy
myTiffin is not directed at children under 18. We do not knowingly collect personal information from children.
Your Choices
- You can deny or later revoke location permission from your browser/device settings — the app still works via manual area browsing.
- You can turn off push notifications at any time from your device or browser settings.
- You can request access to, correction of, or deletion of your data by contacting us.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact Us
Questions about this policy or your data? Email us at himanibabaria@gmail.com.
