Privacy Policy

1. Introduction

Welcome to Pickfoo, a food delivery platform operated by Pickfoo Private Limited ("Pickfoo", "we", "us", or "our"), a company incorporated in India with its principal place of business at Mananthavady, Wayanad, Kerala.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Pickfoo mobile application, website (collectively, the "Platform"), or any related services. By accessing or using our Platform, you agree to the practices described in this Policy.

This Policy applies to all users of our Platform including customers placing orders, restaurant partners, and delivery personnel operating within India. It should be read together with our Terms & Conditions and Cookie Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register, place an order, or communicate with us, we may collect:

• Full name and contact details (email address, phone number)
• Delivery addresses and saved locations
• Payment information (processed securely via third-party payment gateways such as Razorpay or PayU; we do not store card details on our servers)
• Account credentials including passwords (stored in encrypted form)
• Social sign-in data when you log in via Google, Facebook, or other social platforms (as permitted by those platforms)
• Order history, preferences, and feedback/reviews
• Communications with our customer support team

2.2 Information Collected Automatically

When you use our Platform, we automatically collect:

• Device information (device model, operating system, unique device identifiers)
• IP address and network information
• App usage data (pages visited, features used, time spent, clicks)
• Log data and crash reports
• Real-time location data (GPS coordinates), with your permission, to enable delivery services, show nearby restaurants, and provide accurate ETAs
• Microphone / voice search (app): if you enable optional voice search and grant microphone permission, audio is processed so your speech can be converted to text for in-app search. You can decline permission and use text search instead. Speech recognition may be performed by your device or platform services; we treat transcribed text like other search queries.
• Cookies and similar tracking technologies on our website (see Section 9)

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors confirming transaction status
• Social media platforms when you use social login features
• Analytics providers such as Firebase and Google Analytics
• Restaurant partners regarding order status and fulfilment

3. How We Use Your Information

We use your personal data for the following purposes:

• To create and manage your Pickfoo account
• To process, fulfil, and track your food orders
• To facilitate secure payment processing
• To provide real-time delivery tracking and estimated arrival times
• To communicate order confirmations, status updates, and support responses
• To send promotional offers, discounts, and recommendations via SMS, email, push notifications, and WhatsApp (you may opt out at any time)
• To personalise your experience, including showing relevant restaurants and offers (including voice-derived search text where you use voice search)
• To detect and prevent fraud, unauthorised access, and abuse
• To analyse usage patterns and improve our Platform through Firebase, Google Analytics, and similar tools
• To comply with legal obligations under applicable Indian law
• To resolve disputes and enforce our Terms & Conditions

4. Legal Basis for Processing

Under applicable Indian data protection law (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, to the extent notified), we process your personal data on the following grounds:

• Contractual necessity: To provide the services you have requested
• Legitimate interests: For fraud prevention, service improvement, and security
• Consent: For marketing communications, location tracking, and optional features such as microphone access for voice search (which you may withdraw at any time)
• Legal obligation: Where required by applicable law or regulatory authority

5. Sharing of Your Information

We do not sell your personal data. We may share your information with:

5.1 Service Providers & Partners

• Restaurant partners: Name, phone number, and order details to fulfil your order
• Delivery personnel: Name, delivery address, and phone number to complete delivery
• Payment gateways (e.g., Razorpay, PayU): For secure payment processing
• Cloud and hosting providers: For secure storage and platform infrastructure
• Analytics providers: Firebase (Google) and Google Analytics for usage analytics
• Communication platforms: For SMS, email, push notifications, and WhatsApp messages

5.2 Legal & Regulatory Disclosures

We may disclose your information to government authorities, law enforcement, or courts where required to comply with applicable law, respond to legal process, or protect the rights and safety of Pickfoo, its users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity, subject to the same privacy protections.

6. Location Data

Our Platform uses your device's location services to:

• Show you nearby restaurants and delivery availability
• Calculate accurate delivery times and routes
• Enable real-time order tracking for you and our delivery partners

We request access to your location only when you use the app and only with your explicit permission. You can revoke location access at any time through your device settings; however, this may limit certain features of the Platform. We do not share your precise location with third parties other than delivery partners during an active order.

Voice search: If you use optional voice search, microphone access is requested only for that feature; you may use text search without it. Audio may be processed on your device or by platform speech services; we use transcribed text like other search queries (see Sections 2.2, 3, 4, and 10).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable law. Specifically:

• Account data: Retained for the duration of your account and for a reasonable period thereafter
• Order data: Retained for a minimum of 3 years for legal and tax compliance
• Payment transaction records: Retained as required by Indian financial regulations
• Analytics data: Typically retained for up to 26 months

When personal data is no longer required, we delete or anonymise it in a secure manner.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• Encryption of data in transit using TLS/HTTPS
• Encrypted storage of passwords and sensitive credentials
• Secure, access-controlled server environments
• Regular security audits and vulnerability assessments
• Restricted employee access to personal data on a need-to-know basis

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. If you become aware of any security breach, please contact us immediately at contact@pickfoo.in.

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. We use:

• Essential cookies: Required for the website to function correctly (e.g., session management)
• Analytics cookies: To understand how users interact with our website (Google Analytics)
• Preference cookies: To remember your settings and preferences

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Our mobile application uses Firebase SDKs for analytics and crash reporting, which may collect device identifiers. For more detail, see our Cookie Policy.

10. Your Rights

As a user, you have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Withdrawal of consent: Withdraw consent for location tracking, marketing communications, or optional features such as microphone access, at any time through your account settings or by contacting us
• Opt-out of marketing: Unsubscribe from SMS, email, push notifications, or WhatsApp communications via the unsubscribe link in messages or through app settings
• Data portability: Request your data in a structured, commonly used format, where technically feasible

To exercise any of these rights, please contact our Data Protection Officer at contact@pickfoo.in. We will respond to your request within 30 days.

11. Children's Privacy

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal information, we will delete such data promptly. If you believe we have inadvertently collected information from a minor, please contact us at contact@pickfoo.in.

12. Third-Party Links & Services

Our Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external services. We encourage you to review the privacy policies of any third-party services you access through our Platform. We are not responsible for the privacy practices or content of third-party sites.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Notify you via a prominent notice on our app or website, or by email where appropriate

Your continued use of our Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

We are committed to resolving any privacy concerns promptly and transparently.

15. App store listings

For Google Play and other app stores, provide the public URL of this Privacy Policy on your production domain (for example, https://your-domain/privacy). Ensure your store "Data safety" declarations and permissions (including microphone, if you offer voice search) match what the app actually collects.