Privacy Policy

1.1 Information You Provide

When you create an account, place an order, or contact us, we collect: full name, email address, mobile number, delivery address(es), payment method details (processed securely via our payment partners — we do not store card numbers), and any dietary preferences or special instructions you share.

1.2 Information Collected Automatically

When you use the TifunBox app or website we automatically collect: device identifiers (device ID, OS version, app version), IP address and approximate location (city/district level), pages and features you interact with, order history, session duration and crash logs.

1.3 Location Data

With your permission the app collects precise GPS location to show nearby kitchens, calculate delivery time, and route our delivery partners. You may disable location access in your device settings; this may limit certain features.

2.1 To Provide Our Services

Processing and fulfilling your orders, communicating order status (SMS, push notification, email), connecting you with FSSAI-licensed kitchen partners, and facilitating delivery by our delivery partners.

2.2 To Improve Our Platform

Analysing usage patterns to improve app performance, personalising menu recommendations, conducting internal research, and detecting and preventing fraud or misuse.

2.3 To Communicate With You

Sending transactional messages (order confirmations, invoices), promotional offers and new feature announcements (only where you have opted in), and responding to your support queries.

2.4 Legal & Regulatory Compliance

We retain certain transaction records as required under the Companies Act 2013, GST Act, and FSSAI regulations.

3.1 Kitchen Partners

Your name, delivery address, order items, and any relevant dietary notes are shared with the FSSAI-licensed kitchen partner fulfilling your order. They are contractually required to use this data solely for order preparation and not to retain it beyond 30 days.

3.2 Delivery Partners

Your name, contact number, and delivery address are shared with the delivery partner assigned to your order. Contact details are masked where technically feasible.

3.3 Payment Processors

Payments are processed by PCI-DSS-compliant third-party gateways. TifunBox does not store full payment card details.

3.4 Service Providers

We engage trusted third-party vendors for cloud hosting, analytics, customer support, and SMS/push notification delivery. These vendors process data on our behalf and are bound by data processing agreements.

3.5 Legal Disclosure

We may disclose your information to law enforcement or government authorities when required by applicable Indian law (including court orders, TRAI directions, or FSSAI inspections) or to protect the rights and safety of TifunBox, its users, or the public.

3.6 We Do Not Sell Your Data

TifunBox does not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We retain your account data for as long as your account is active. Order and financial records are retained for seven (7) years as required by Indian accounting and tax regulations. Anonymised analytics data may be retained indefinitely. If you request account deletion, personally identifiable data is deleted or anonymised within 30 days, except where retention is legally required.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate or incomplete data; (c) request erasure of your data (subject to legal retention obligations); (d) withdraw consent for processing at any time; (e) nominate a person to exercise these rights on your behalf. To exercise any of these rights, email us at [email protected] with the subject line 'Privacy Request'. We will respond within 30 days.

We implement industry-standard technical and organisational security measures including TLS encryption for data in transit, encrypted storage for sensitive fields, access controls limited to authorised personnel, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we commit to notifying affected users promptly in the event of a data breach as required by the DPDPA.

TifunBox services are not directed to children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes we will notify you via the app or email at least 7 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

For any privacy-related queries, requests, or grievances contact our Data Protection Officer at [email protected] or write to: TifunBox Food Services Private Limited, E316, Sector 75, Mohali, Punjab 160071, India. Phone: +91-94187-48666.