Privacy notice

The demo store

bookmyfood.si currently runs a demo. Demo Residency, its customers and its orders are fictional, no SMS is sent and payments are simulated. Anything you type into the demo is stored in the demo database like a real order would be, and the demo may be reset at any time. The demo runs on a server outside India and is meant only for fictional data, so please don’t enter real personal details.

What we keep about residents

• Mobile number: to log you in with a one-time code and to let the cafe or rider call you about an order.
• Name: the name you give, shown on your order so the rider knows who to ask for.
• Delivery address: tower, floor, flat and any instructions for the rider. We never ask for a map pin or your phone’s location.
• Order history: items and options, notes, prices, discount and coupon, payment method and status, the time of each status change, the delivery PIN if the cafe uses one, your rating and feedback, whether you ordered on the web or the app, and the tag of the printed QR code you came from, if any.
• Login codes: stored only as a one-way hash, valid for 10 minutes and deleted once you have logged in. We also record when you were last active.
• Notification token: if you allow notifications in the Android app, a token so we can send you order updates.
• Payments: card and UPI details are entered with Razorpay, our payment provider, not with us. We keep Razorpay’s order and payment references, the payment method and the provider’s response for each payment.

Staff and riders

For staff we keep name, mobile number and role (owner, manager, kitchen, cashier or rider). Each order status change records who made it, and changes to settings, the menu and coupons, expenses and day closes record which staff member made them.

Rider location is collected only in rider mode: on the web while the rider has turned on “Share live location”, and in the Android app while one of their orders is out for delivery. Only the rider’s latest position is kept; each update replaces the previous one, so there is no location history. It is shown to cafe staff and to residents whose order that rider is carrying.

What your browser keeps

The website stores a few items in your browser’s local storage, on your device only:

• your login (a signed token), so you stay logged in;
• your cart, so it survives a page reload;
• your theme choice;
• the tag of the printed QR code you arrived from, if any, which is added to your next order.

A preview of the day’s style can also be kept for the browser session. There are no advertising or third-party tracking cookies. Logging out removes the login token; clearing your browser’s site data removes everything.

Usage measurement

To understand how the site is used, Book My Food records first-party usage events, for example that a page was viewed or a checkout step was completed. These events are kept by Book My Food, do not include your name, phone number or flat, and are not shared with advertising networks. There are no advertising scripts on the site.

How the data is used

• to take, price, prepare and deliver your orders and show you their live status;
• to issue GST invoices and keep the cafe’s daily accounts (day close);
• to let you reorder, see past orders and use coupons, including first-order-only offers;
• to give the cafe owner reports such as sales, busiest hours and towers, top items and repeat customers;
• to protect the service, for example by limiting repeated login attempts.

We don’t sell personal data and don’t use it for advertising.

Who sees it

• The cafe’s staff see your name, phone number, flat and order so they can prepare and deliver it. The owner also sees a customer list with order counts and spend.
• The rider carrying your order sees your name, phone number, flat and whether there is cash to collect.
• Service providers that make the features work: Razorpay for payments; an Indian SMS provider (MSG91) to send login codes on a live store; Expo’s push service for Android app notifications; OpenStreetMap’s tile servers, from which your browser loads the map while you track a delivery; and, on the demo store, Unsplash, where the menu photos are loaded from. Each receives only what it needs for that job, and your browser’s requests to them include your IP address.

Where it is stored and for how long

Residents’ names, phone numbers and flats are personal data. A live store is to be hosted in India. The public demo is the exception described above: fictional data only.

Retention periods have not been set yet. They will be decided before launch, taking into account the records a cafe must keep for its accounts and taxes, and will be listed here.

When you delete your account, your name, number, saved address and the text of your support requests are deleted at once. Your past orders are kept for the cafe’s accounts and tax records without your name, number, flat or delivery notes. This is a proposal pending the owner’s approval.

Your choices

• Change your name and delivery address any time in Account.
• Turn off app notifications in your phone’s settings.
• Log out, or clear the site’s data in your browser.
• Download a copy of your data, or delete your account, yourself in Account → Your data on the website or in the Android app. Deleting needs a code sent to your number. How account deletion works, including what is kept.
• Ask for a correction, or for anything the self-service tools don’t cover (for example a request you sent without logging in), through the contact page.

Changes and contact

This is a draft. It will be reviewed and approved by the owner before any live store opens, and updated whenever the software changes what it stores. Questions: contact us. See also the draft terms of use.