Privacy Policy

1. Introduction

Welcome to LunchPe ("we," "our," or "us"). We operate two mobile applications: the LunchPe Vendor App (for tiffin vendors to manage customers, orders, menus, and payments) and the LunchPe Customer App (for customers to browse menus, place orders, manage subscriptions, and make payments). We are committed to protecting your privacy and the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use either the LunchPe Vendor App or the LunchPe Customer App. By using our apps, you agree to this policy.

2. Information We Collect

We collect the following types of information. The data collected depends on which app you use:

Common to Both Apps

Account & Profile Information:

• Phone number (for login via OTP)
• Name and email address
• Profile photo (optional)

Device Information:

• Device token for push notifications
• Device type (Android) and device identifier

Vendor App Only

• Tiffin center name, profile/logo
• UPI ID for receiving payments, QR code image for payment setup
• Customer information (name, phone, email) that you add
• Orders, meal plans, weekly menus, payment records and verification status

Customer App Only

• Delivery address(es)
• Order history and subscriptions/meal plans
• Payment information (UPI) for paying vendors

3. How We Collect Information

• Directly from you: When you register, complete your profile, add customers (Vendor) or delivery addresses (Customer), or set up payment methods
• Through the app: Via Firebase Phone Auth (OTP) for login; camera for QR code capture (Vendor) or profile photo (both apps)
• Automatically: Device tokens for push notifications when you enable them

4. How We Use Your Information

We use your information to:

• Authenticate your identity via phone OTP (Firebase)
• Provide and maintain the app (dashboard, orders, customers, menus for Vendors; orders, subscriptions, deliveries for Customers)
• Send push notifications about orders, payments, and updates
• Process payments (UPI/QR-based for Vendors; UPI for Customers)
• Store your data securely on our servers (lunchpe.brahmastack.com)
• Improve our services and fix issues
• Comply with legal obligations

5. Device Permissions

Our apps may request the following permissions:

• Camera: Vendor App — to capture QR code images for payment setup; both apps — for profile photos
• Storage/Photos: To save and access QR code (Vendor) and profile images
• Notifications: To send push notifications about orders and payments

You can revoke these permissions at any time through your device settings. Some features may not work without them.

6. Third-Party Services

We use these third-party services:

• Firebase (Google): Phone authentication (OTP), push notifications (Cloud Messaging)
• Google: Firebase services are operated by Google; their privacy policy applies: https://policies.google.com/privacy

We do not sell your data to third parties.

7. Data Storage and Security

Your data is stored on our servers hosted at lunchpe.brahmastack.com. We use:

• Secure storage for authentication tokens
• HTTPS for all data transmission
• Access controls and secure practices

No method of transmission over the internet is 100% secure. We strive to protect your information but cannot guarantee absolute security.

8. Data Sharing

We do not sell, trade, or rent your personal information. We may share information only:

• With your consent
• To comply with laws or legal requests
• To protect our rights or prevent fraud
• With service providers (e.g., Firebase) who assist us under strict confidentiality

9. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt out of push notifications (device settings)
• Withdraw consent

To exercise these rights, contact us using the details below.

10. Data Retention

We retain your data as long as your account is active and as needed to provide our services or comply with legal obligations. When you delete your account, we will delete or anonymize your personal information except where required by law.

11. LunchPe Vendor App – Account & Data Deletion

How to request deletion

To request deletion of your LunchPe Vendor account and associated data:

1. Email us at: developer@lunchpe.com with subject "Account Deletion Request"
2. Include your registered phone number used in the app
3. We will process your request within 30 days

What we delete

• Account/profile information (name, email, phone, tiffin center name)
• Logo and payment QR images
• Device token for notifications

What we may retain

• Order and payment records as required by law (tax, accounting)
• Anonymized or aggregated data for analytics

We do not sell your data.

12. Children's Privacy

Our apps are not intended for users under 13. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the "Last Updated" date or through the app. Continued use after changes means you accept the updated policy.

14. Contact Us