Privacy Policy | Chivs Tiffin

1. Who We Are

Chivs Tiffin is a food subscription and delivery service operated by Savorynest Pvt Ltd (“Chivs Tiffin,” “we,” “us,” or “our”).

We provide meal subscriptions, one-time meal orders, meal selection, delivery, customer support, and related services through our application.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our Services.

2. Information We Collect

We collect only the information reasonably necessary to provide, improve, secure, and support our Services.

2.1 Information You Provide

Depending on how you use the app, we may collect:

Account information: Name, mobile number, email address, and login details.
Profile information: Profile name, preferences, and other details you choose to provide.
Delivery information: Delivery address, landmark, location instructions, and preferred delivery time slot.
Order information: Subscription plan, selected meals, order history, delivery status, and tiffin-related details.
Payment information: Payment status, transaction reference, and billing-related information. Chivs Tiffin does not directly store complete card numbers, CVV, UPI PINs, or banking passwords.
Customer support information: Messages, complaints, feedback, and information you provide when contacting us.
Reviews and ratings: Content you voluntarily submit through the app.

2.2 Information Collected Automatically

When you use the Services, we may collect:

Device type, operating system, app version, and technical identifiers.
IP address and basic security information.
App activity, crash information, and performance data.
Information about how you use app features.

We use this information to maintain app security, troubleshoot technical issues, and improve the Services.

2.3 Location Information

If you grant permission, we collect location information strictly while the app is in active use (foreground) to help you select or confirm a delivery address, verify kitchen serviceability, provide delivery-related services, and improve delivery operations.

You may disable location permissions through your device settings. Some delivery-related features may not function properly without location access.

2.4 Notifications

We may send push notifications relating to:

Subscription and order status.
Meal selection and delivery updates.
Account and service-related information.
Important changes to the Services.

You may manage notification permissions through your device settings.

3. How We Use Your Information

We may use personal information to:

Create and manage your account.
Process subscriptions and meal orders.
Deliver meals to your selected address.
Provide customer support.
Process payments and verify transactions.
Send service-related notifications.
Maintain app security and prevent fraud or misuse.
Improve app performance and user experience.
Analyze usage and troubleshoot technical problems.
Comply with applicable legal and regulatory obligations.
Send promotional communications where permitted by law and, where required, with your consent.

We do not use your information for purposes unrelated to the Services without an appropriate legal basis or your consent where required.

4. How We Share Information

We may share information with trusted service providers who help us operate the Services, including:

Payment processors: Razorpay (PCI-DSS compliant payment gateway).
Cloud hosting and infrastructure providers: Amazon Web Services (AWS Lightsail).
Authentication and notification providers: Google Firebase (Phone Auth & Firebase Cloud Messaging).
Mapping & Geolocation: Google Maps Platform (Address autocomplete and geocoding).
Delivery and operational service providers: Authorized franchise kitchens and delivery partners for meal preparation and order delivery.
Customer support and communication providers: In-app messaging and notification systems.
Professional advisers, auditors, or legal authorities where required by applicable law.

We do not sell your personal information as a standalone product.

We require service providers to handle information appropriately and to use it only for the purposes for which it is shared.

5. Payments

Payments are processed securely through certified third-party payment providers (Razorpay).

We receive transaction-related information such as payment status, transaction ID, and order reference. Your payment provider separately processes payment information under its own privacy and security policy.

6. Data Retention

We retain personal information only for as long as reasonably necessary to:

Provide the Services.
Maintain business and transaction records.
Resolve disputes and customer-support requests.
Prevent fraud and misuse.
Comply with legal, tax, accounting, and regulatory obligations.

When information is no longer required, we will delete it, anonymize it, or securely dispose of it, subject to applicable legal requirements.

7. Account Deletion

You may request deletion of your Chivs Tiffin account and associated personal information by:

Using the in-app account deletion option (Profile ➔ Settings ➔ Delete Account); or
Contacting us directly at support@chivstiffin.com.

We may need to verify your identity before processing a deletion request.

Some information may be retained where required by law or reasonably necessary for legitimate business purposes, such as financial transaction records, fraud prevention, or dispute resolution.

8. Your Privacy Choices

Depending on applicable law, you have rights to:

Access personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your account or personal information.
Withdraw consent where processing is based on consent.
Object to or restrict certain processing.
Request information about how your data is used.

To exercise these rights, contact us at privacy@chivstiffin.com.

9. Security

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet-based service can guarantee absolute security.

10. Children’s Privacy

The Services are intended for general use and are not specifically directed at children.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information without appropriate authorization, please contact us so we can review and take appropriate action.

11. Third-Party Services

The Services may contain links to or integrations with third-party services. Those services have their own privacy policies and terms. We are not responsible for the privacy practices of third parties that we do not control.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app, website, or other appropriate means. The updated version will be effective from the date stated at the beginning of the policy.

13. Contact Us

For privacy-related questions or requests:

Savorynest Pvt Ltd (Chivs Tiffin)
Email: privacy@chivstiffin.com / support@chivstiffin.com
Website: https://chivstiffin.com