Jagdish Meals — Vadodara's Taste Since 1938
This Privacy Policy explains how Jagdish Meals ("we," "us," "our") collects, uses, stores, and shares your personal information when you use our mobile application and website (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described here.
Jagdish Meals is a tiffin (meal subscription) and snack service operated from Vadodara, Gujarat, India. The Service lets you schedule meal deliveries, top up a wallet balance, and place orders.
For privacy-related questions, contact us using the details in Section 13.
| Category | Examples | Why we collect it |
|---|---|---|
| Account information | Name, email address (via Google Sign-In) | Create your account, sign you in, identify you across devices |
| Contact information | Phone number, delivery address, zipcode | Deliver tiffins to the correct location, contact you about orders |
| Wallet & transaction data | Wallet balance, top-up amounts, order history, transaction timestamps | Track your wallet balance, process orders, show you your history |
| Order details | Selected meals, delivery dates, delivery instructions | Fulfill your orders correctly |
| Category | Examples | Why we collect it |
|---|---|---|
| Device identifiers | Firebase user ID, app version, OS version | Authenticate you, troubleshoot bugs |
| Push notification token | Firebase Cloud Messaging (FCM) / Apple Push Notification (APN) token | Send you order status updates and important service notifications (only after you grant permission) |
| Usage logs | Server-side request logs for the backend API | Diagnose errors, prevent abuse |
Card numbers, CVV codes, and bank account details are entered directly into Stripe's secure payment interface. We never see, store, or transmit your raw card data. Stripe is PCI-DSS Level 1 certified. We only receive a payment confirmation token and the amount paid.
We share information only with the service providers we need to operate the Service. We do not sell your personal information to anyone.
| Service provider | What they receive | Purpose | Their privacy policy |
|---|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Messaging) | Email, name, profile fields, wallet balance, transactions | Authenticate users, store account data, deliver push notifications | firebase.google.com/support/privacy |
| Google Cloud Run | Server logs, request payloads (excluding card data) | Host our backend API | cloud.google.com/terms/cloud-privacy-notice |
| Stripe | Payment amount, your email, your Firebase user ID | Process card payments and store payment methods you save | stripe.com/privacy |
| Apple (App Store, APNs) | App download data, push notification tokens | App distribution and push delivery on iOS | apple.com/legal/privacy |
| Google (Play Store, FCM) | App download data, push notification tokens | App distribution and push delivery on Android | policies.google.com/privacy |
Legal disclosures: We may share information if required by law, court order, or government request, or to protect our rights, property, or the safety of users or the public.
Your data is stored on Google Cloud servers in the United States (region: us-west1) and processed by Google Firebase. By using the Service, you understand that your data may be transferred outside India for processing and storage. We rely on Google's standard contractual clauses and security certifications (ISO 27001, SOC 2/3) to protect your data during this transfer.
| Data type | Retention period |
|---|---|
| Account profile (name, email, phone, address) | Until you delete your account, plus 30 days for backup recovery |
| Wallet balance and transaction history | 7 years from the transaction date (Indian tax law requirement) |
| Order history | 3 years from the order date |
| Push notification tokens | Until you uninstall the app or revoke notification permission |
| Server logs | 30 days, then anonymized or deleted |
Depending on where you live, you have the following rights over your personal data:
To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days. We may need to verify your identity before acting on a request.
Indian users: These rights are also protected under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
EU/UK users: If you reside in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) and UK GDPR. You may also lodge a complaint with your local data protection authority.
We take commercially reasonable security measures to protect your personal data, including:
No system is 100% secure. If we become aware of a data breach affecting your information, we will notify you and the relevant authorities as required by applicable law.
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.
For users in jurisdictions where the minimum age for data processing is higher (for example, 16 in some EU member states under GDPR), we apply that higher age threshold.
The mobile app does not use traditional browser cookies. The web version uses essential cookies and local storage to keep you signed in (Firebase Authentication session) and remember your preferences. We do not use third-party advertising or tracking cookies.
The Service may contain links to third-party websites (for example, Stripe's payment page). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before submitting any information.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you in the app or by email at least 7 days before the change takes effect. Your continued use of the Service after the change indicates your acceptance of the updated policy.
Jagdish Meals
Operated by: Urvish Hirpara
Email: jagdishmeals@gmail.com
For DPDP Act inquiries (Indian users), please mark your email subject as "DPDP Act Request." We will respond within 30 days.