Privacy Policy

At Chatori, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By using the Chatori mobile application and related services (the "Platform"), you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

Data Type	Details
Account Information	Name, email address, phone number
Profile Information	Dietary preferences, food type preferences
Delivery Addresses	Full address, GPS coordinates (latitude/longitude), address labels
Payment Information	Payment method details processed via Razorpay (we do not store card numbers)
Provider Business Info	Business name, owner name, kitchen photos, FSSAI details, menu items, pricing
User Content	Reviews, ratings, messages sent through the Platform

1.2 Information Collected Automatically

Data Type	Details
Device Information	Device type, operating system, app version
FCM Token	Firebase Cloud Messaging token for push notifications
Usage Data	Order history, subscription history, meal skip/leave patterns
Location Data	GPS location when you choose to set a delivery address or search for providers
Log Data	App interaction logs for debugging and improvement

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To connect Subscribers with Providers, process subscriptions, facilitate meal deliveries, and manage skip/leave requests.
• Notifications: To send push notifications about meal delivery status, subscription updates, new menus, and important announcements via Firebase Cloud Messaging.
• Payments: To process subscription payments, manage refunds, and handle Provider payouts through our payment partner Razorpay.
• Discovery: To show relevant Providers based on your location, food preferences, and search criteria.
• Analytics: To understand usage patterns and improve the Platform's features, performance, and user experience.
• Communication: To facilitate in-app messaging between Subscribers and Providers, and to send service-related communications.
• Safety and Integrity: To detect and prevent fraud, abuse, and violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing

We share your personal data only as necessary to operate the Platform:

3.1 With Providers (when you subscribe)

• Your name and delivery address (required for meal delivery).
• Your meal type subscription and skip/leave schedule.
• Your phone number is not shared directly; communication happens through the Platform's messaging system.

3.2 With Payment Processor

• Razorpay processes all payment transactions. Your payment information is shared with Razorpay in accordance with their privacy policy and PCI-DSS compliance standards. We do not store your card details on our servers.

3.3 With Push Notification Service

• Firebase Cloud Messaging (Google) is used to deliver push notifications. Your FCM device token is shared with Firebase for this purpose.

3.4 With Service Infrastructure

• Supabase provides our cloud database and authentication infrastructure. Your data is stored on Supabase's servers with appropriate security measures.

3.5 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Chatori, its users, or the public.

4. Data Storage and Security

• Your data is stored on Supabase cloud infrastructure with industry-standard security measures.
• All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS).
• Authentication is managed via Supabase Auth with secure token-based sessions.
• Payment data is processed by Razorpay and is PCI-DSS compliant.
• We implement access controls to ensure that only authorized personnel can access your data.

While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

5. Local Storage

The Chatori app uses SharedPreferences (local device storage) to store:

• App settings and preferences (e.g., notification preferences).
• Authentication session tokens.
• Cached UI state for better performance.

This data is stored locally on your device and is not transmitted to our servers unless necessary for service delivery.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can request correction of inaccurate or incomplete data. You can also update your profile information directly through the app.
• Deletion: You can request deletion of your account and associated personal data. Please note that some data may be retained for legal or legitimate business purposes (e.g., transaction records).
• Data Portability: You can request your data in a structured, machine-readable format.
• Objection: You can object to processing of your data for certain purposes.

To exercise any of these rights, please contact us at support@chatori.app. We will respond to your request within 30 days.

7. Children's Privacy

The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@chatori.app.

8. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion:

• Personal profile data is deleted within 30 days.
• Transaction records are retained for 7 years as required by Indian tax and financial regulations.
• Anonymised analytics data may be retained indefinitely.

10. Compliance

10.1 Information Technology Act, 2000 (India)

This Privacy Policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We implement reasonable security practices to protect your sensitive personal data as defined under these rules.

10.2 Digital Personal Data Protection Act, 2023 (India)

We are committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act) as its provisions come into effect. We process your data based on your consent, which you provide when creating an account and using the Platform. You may withdraw your consent at any time by deleting your account.

10.3 GDPR (for EU Users)

If you are accessing the Platform from the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority. Our legal basis for processing is consent and legitimate interest (service delivery). For GDPR-specific requests, contact support@chatori.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through:

• An in-app notification.
• An update to the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the Platform after changes constitutes acceptance of the revised policy.