Privacy policy

Healthy Bite Chef ("HBC", "we", "us") is a healthy food delivery business in Noida. One HBC kitchen cooks every order. HBC is run by Chef de Spices, whose registered address is B-002, Stellers Kings Court, Sector 50, Noida, Uttar Pradesh.

This policy covers the Healthy Bite Chef app for Android (Google Play ID: com.healthybitechef.app) and our website, healthybitechef.com. It explains what personal data we collect, why we need it, who we share it with, how long we keep it and how you stay in control of it.

Under India's Digital Personal Data Protection Act, 2023, HBC is the "data fiduciary" for your data: we decide how it is used, and we are responsible for looking after it. When you sign up, you consent to us using your data as this policy describes. You can withdraw that consent at any time (see Your rights).

We ask only for what we need to cook your food, deliver it and look after your account. This table lists all of it, what we use it for, and the legal basis for using it.

We don't ask for your health details, and the app doesn't access your contacts, camera, microphone, files or SMS messages. The calories in the app describe our food, not you.

The app asks for location permission only when you tap Use current location while setting a delivery address. Android lets you allow precise or approximate location. Either works: with approximate location, you simply move the pin to your door.

The app reads your location once, sends it to our server to look up the address, and shows it on the map so you can adjust the pin. We keep the map position only as part of an address you save.

• The app never uses your location in the background or when it is closed.
• We don't track you while you wait for your order. Live tracking shows your rider's progress, not yours.
• You don't have to share your location. You can search for your address or move the pin yourself.
• You can turn off location access for the app at any time in your phone's settings.

The map in the app is drawn by the app itself. If we start using an outside map or address-lookup service, we will name it in this policy before we do.

You can pay by UPI (Google Pay, PhonePe or Paytm), credit or debit card, HBC Wallet, or cash on delivery.

• Card and UPI payments are processed by our payment partner, a payment gateway regulated by the Reserve Bank of India. You enter your card or UPI details with them, not with us.
• HBC never sees or stores your full card number, CVV, UPI PIN or banking passwords.
• If you save a card, our payment partner stores it as a secure token, as RBI rules require. The app shows a saved card only as its bank name and last four digits.
• From our payment partner we receive each payment's amount, status, method and transaction reference, so we can confirm your order and make refunds.
• For cash on delivery, your rider collects the amount at your door, in cash or by UPI.

Our payment partner handles your payment details under its own privacy policy and RBI rules.

• SMS: we use SMS to send your sign-in code (OTP).
• WhatsApp: we send order updates on WhatsApp only if you switch on Get order updates on WhatsApp. You can switch it off in your profile at any time. We won't send you offers on WhatsApp unless you separately agree to them.
• In the app: the Notifications screen shows your order updates, wallet activity and offers.
• Push notifications: the app doesn't send any yet. If we add them, Android will ask for your permission first.
• Email: if you add your email address, we may send your invoices and occasional offers. Every offer email lets you unsubscribe.

So that it opens quickly and works on a weak connection, the app keeps some data on your phone: your sign-in session, your cart, and a copy of your account details, addresses, orders and the menu. Logging out clears all of this.

Your app settings (light or dark theme, the veg-only switch, menu filters and recent searches) stay on your phone until you clear the app's storage or uninstall it. They are not sent to us.

Analytics

The app has a built-in analytics feature for events such as the screens you open, searches, and adding dishes to your cart. Today, these events are not sent to any analytics company or any other third party. Before we add an analytics or crash-reporting service, we will update this policy to say which service it is and what it receives.

The app shows no ads and doesn't use your phone's advertising ID.

We never sell your personal data, and we don't share it with anyone for their own marketing. We share only what each of these needs to do their part:

Our service providers may use your data only to do work for us, under contract, and must keep it secure. Ask us and we'll tell you who they are. Our accountants, auditors and lawyers may see records when their work needs it, under a duty of confidentiality.

Inside HBC, people see only what they need for their work: the kitchen sees what to cook, and our support team sees your account and orders when you ask for help.

If HBC's business is ever sold or merged, your data may pass to the new owner, who must keep protecting it as this policy says.

Our servers run on Amazon Web Services (AWS), and we store your data in AWS data centres in India. Some providers, such as WhatsApp, may process data outside India. When they do, they must protect it as Indian law requires.

• Data travels between the app, the website and our servers over encrypted connections (HTTPS).
• Data stored on our servers is encrypted.
• Only people who need your data for their work can see it, and access is logged.
• You sign in with one-time codes that expire after a short time, so there is no password to steal.
• Card payments go through our payment partner, which must meet the card industry's security standard (PCI DSS).

No system is perfectly safe. If a data breach affects your data, we will tell you without delay what happened, what it means for you and what you can do, and report it to the Data Protection Board of India and other authorities as the law requires.

We keep your data only while we need it for the purpose you gave it for, or as long as the law requires. Then we delete it, or make it anonymous so that it can no longer identify you.

We keep data for longer only if the law requires it, or if we need it for an open dispute, legal claim or fraud investigation, and then only until that is resolved.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
• Correct and update your data. You can change your name, email, food preference, WhatsApp choice and addresses yourself in the app. To change your mobile number, contact us.
• Erase your data. We delete everything the law allows us to (see Deleting your account).
• Withdraw your consent, as easily as you gave it: switch off WhatsApp updates, remove your email, turn off location access, or delete your account. This doesn't affect what we did before, and we can't deliver without your address and mobile number.
• Nominate someone to use these rights for you if you die or become unable to use them yourself.
• Complain to us, and if our answer doesn't resolve it, to the Data Protection Board of India.

How to use your rights

Email healthybitechef@gmail.com, or write to our Grievance Officer (see Contact and grievances), with your registered mobile number and what you'd like us to do. We'll check that the request is yours, usually by contacting you on that number. We acknowledge requests within 48 hours and complete them within 30 days, free of charge.

A Delete account option is coming to the app. Until it arrives, you can ask us to delete your account in either of these ways:

• Fill in the form on our Delete your account page.
• Email healthybitechef@gmail.com with the subject "Delete my account" and your registered mobile number.

We'll check that the request is really from you, then delete your account and personal data within 30 days and confirm when it's done. If an order or refund is still in progress, we'll finish it first. Uninstalling the app doesn't delete your account.

HBC Wallet: please use your balance, or ask us to refund your unused top-up money, before you ask for deletion. Once your account is deleted, its wallet balance can't be recovered, and cashback is never refundable. If you still have a balance when you ask, we'll remind you before we go ahead.

HBC is meant for people aged 18 and over. We don't knowingly collect data from anyone under 18. If you think a child has given us their details, tell us and we'll delete them.

No cookies, no tracking. healthybitechef.com uses no cookies, no analytics and no advertising trackers, and stores nothing in your browser. Our fonts and images are served by our own web server, not loaded from outside services.

Forms. Our notify-me, contact and account-deletion forms send what you type to our support team. Until our own server is ready, sending a form opens your email app with a pre-filled message to healthybitechef@gmail.com. You then send it yourself, so we also receive your email address.

• Notify me: your mobile number, used only to send you one message when the app is live on Google Play, and then deleted.
• Contact: your name, contact details and message (and an order ID, if you add one), used to reply to you.
• Account deletion: your registered mobile number and anything else you tell us, used to check and carry out your request.

Server logs. Like most websites, our web server keeps standard access logs: your IP address, your browser type, and which pages you requested and when. We use them only to keep the site secure and working, and delete them after 180 days.

We'll update this policy whenever the app, our service providers or the law change, for example before we add an analytics service. The date at the top shows when it last changed. If a change affects how we use your data in an important way, we'll tell you in the app before it applies, and ask for your consent again where the law requires it.

For any question about your data or this policy, contact us:

Business name

Chef de Spices

Registered address

B-002, Stellers Kings Court, Sector 50, Noida, Uttar Pradesh

Email

healthybitechef@gmail.com

Phone

+91 99589 01081

Support hours

8 AM – 1 AM, every day

Grievance Officer

If you have a complaint about how we handle your data, write to our Grievance Officer:

Name

[FILL] Grievance officer name

Designation

Grievance Officer

Email

healthybitechef@gmail.com

Phone

+91 99589 01081

Address

B-002, Stellers Kings Court, Sector 50, Noida, Uttar Pradesh

We acknowledge every complaint within 48 hours and resolve it within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.