Privacy Policy

This Privacy Policy explains how [LEGAL_NAME] ("Fengle", "we", "us") collects, uses, shares and protects personal data when you use the Fengle customer app, the Fengle Rider app, the Fengle Business (partner kitchen) app and the website at [DOMAIN] (together, the "Platform"). We process personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

1. Data we collect

2. How we use your data

• To create and secure your account and verify your phone number with OTP.
• To show you dishes available at your address, take your order, match it to a nearby partner kitchen and arrange delivery.
• To process payments, refunds and wallet credits, and to issue GST invoices.
• To send you order confirmations, status updates and service messages.
• To provide customer support and handle complaints.
• To detect and prevent fraud, abuse and security incidents.
• To improve the Platform, for example by analysing aggregated order trends and ratings.
• To meet legal, tax and regulatory obligations.
• With your consent, to send you offers and promotions. You can switch these off at any time in the app.

3. Who we share your data with

We do not sell your personal data. We share it only as needed to provide the service:

• Partner kitchens receive the items in your order and any cooking instructions. They do not receive your phone number or full address.
• Riders receive your first name, delivery address and location, and a way to contact you about the delivery. They receive this only while your order is active.
• Service providers who work for us under confidentiality obligations, including Razorpay (payments), SMS and WhatsApp messaging providers (OTP and order messages), Google Firebase (push notifications), Amazon Web Services (cloud hosting in Mumbai, India) and maps/geocoding providers.
• Authorities, when required by law, court order or a lawful request from a government agency.
• A successor business, if Fengle is involved in a merger, acquisition or sale of assets. Your data will remain protected under this policy.

4. SMS, WhatsApp & notifications

When you sign up with your mobile number, you agree that Fengle may send you:

• Transactional messages, such as OTPs, order confirmations, delivery updates, refund updates and invoices, by SMS, WhatsApp, push notification or email. These are required to provide the service.
• Promotional messages, such as offers and new cuisine launches, only with your consent. You can opt out at any time by replying STOP where supported, by changing your notification settings in the app, or by writing to [SUPPORT_EMAIL].

We send SMS through registered templates in line with TRAI's regulations for commercial communications. We send WhatsApp messages only to users who have given their number to Fengle, and we follow WhatsApp's Business and Commerce policies. We never share your number with third parties for their own marketing.

5. Payments

Online payments are processed by Razorpay Software Private Limited, a PCI-DSS compliant payment aggregator. Your card, UPI and bank details are entered on Razorpay's secure checkout and handled under Razorpay's privacy policy. Fengle receives only the payment status, the amount and a transaction reference.

6. Location data

With your permission, the customer app uses your device location to suggest a delivery address and show dishes available near you. You can deny this permission and enter your address by hand. The Rider app uses location only while the rider is on duty and has an active delivery, to assign orders and share delivery status.

7. How long we keep data

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days. We keep order and invoice records for as long as tax and accounting laws require (currently up to 8 years), and we may keep records longer when we need them to resolve disputes or prevent fraud.

8. Security

We protect data with reasonable security practices in line with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. These include encryption in transit (HTTPS/TLS), access controls, token-based authentication and hosting in secure data centres in India. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as required by law.

9. Your rights

You have the right to:

• access a summary of the personal data we hold about you;
• correct or update inaccurate data (most details can be edited in the app);
• withdraw consent for optional processing such as promotional messages;
• have your account and personal data erased (see Account & Data Deletion);
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with our Grievance Officer and, if you are not satisfied, with the Data Protection Board of India.

To make a request, email [SUPPORT_EMAIL] from your registered email address, or include your registered mobile number in the email.

10. Children

The Platform is not meant for children under 18. We do not knowingly collect data from children without verifiable parental consent. If you believe a child has given us data, please contact us and we will delete it.

11. Cookies

This website uses no advertising or tracking cookies. It loads fonts from Google Fonts, which may log your IP address as part of normal web traffic. The mobile apps use local storage on your device to keep you signed in and remember your preferences.

12. Changes & contact

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated, and we will notify you in the app about significant changes.