Privacy Policy

1. Overview

This Policy explains what information ThaliDekho collects, why we use it, when it becomes public, the services that process it for us, and the choices available to students and mess owners.

2. Information We Collect

• Account Information: Full name, email address, phone number, and authentication credentials when you log in via Google OAuth or OTP.
• Location Data: GPS coordinates only when you actively tap a location feature. Students can use it to find nearby messes; owners can use it to set or update their listing pin. We do not continuously track your location.
• Provider Business Details: Mess address, thali prices, food photos, and FSSAI number. Menu and listing photos uploaded by owners are public content shown on their ThaliDekho listing.
• Payment Records: Transaction IDs and subscription logs processed through our payment partner (Razorpay). We do not store credit card or UPI PIN data.
• Reviews, Favorites & Reports: Ratings, review text, saved messes, complaints, and optional contact details submitted with a complaint.
• Usage & Analytics: Profile views, calls, direction taps, QR scans, shares, timestamps, basic request information, and security/rate-limit signals. These help us operate analytics, prevent repeated counting, investigate abuse, and secure the Platform.

3. How We Use Your Information

We use collected information to provide mess search results, display student reviews, enable providers to publish daily menus, verify and moderate listings, process one-time listing-plan payments, show basic owner analytics, answer support requests, prevent fraud, enforce platform rules, and improve reliability.

4. Third-Party Services & Data Security

We partner with trusted infrastructure providers: Supabase (PostgreSQL authentication and database hosting and authentication), Razorpay (payment processing), Vercel (application hosting), Upstash (rate limiting when configured), and Sentry (error monitoring when configured). These providers process data as needed to supply their services. We do not sell or rent personal data.

5. Cookies & Local Storage

We use local storage and essential session cookies strictly to preserve your user login session, theme preferences, install prompts, unfinished owner menu drafts, and limited analytics deduplication. Browser location is requested only after you tap a location feature; we do not continuously track students or save a student's live GPS trail in our database.

6. Public Information

Approved provider names, addresses, map pins, phone numbers, opening hours, prices, descriptions, menu and gallery photos, menu posting times, and review content are public. Owner GPS coordinates become the public listing pin. Do not upload confidential information or images you do not have permission to publish.

7. Retention & Deletion

We keep account and listing data while the account is active and as reasonably needed for security, disputes, payment records, legal obligations, and backups. Replacing or deleting a menu image may remove it from active storage, but temporary backups or logs may persist for a limited period. To request account deletion, data access, or correction, email us from the registered address. Some payment, security, or legal records may be retained where required or reasonably necessary.

8. Security & Your Choices

We use access controls and service-provider safeguards, but no online system is completely risk-free. You can deny location permission, clear local drafts and browser storage, edit provider information, and ask us to correct or delete eligible account data. You may also report inaccurate listings or abusive reviews.

9. Policy Updates

We may update this Policy as the Platform changes. The latest version and effective date will remain available on this page.