Effective 19 October 2026

Privacy Notice

What changed on 19 October 2026: this notice replaces our earlier privacy policy. It now names who runs Khaao Piyo Repeat and our Grievance Officer, lists each kind of data we hold with why and for how long, and says plainly what we don't do yet. We then corrected it to match the site: offers by WhatsApp need both "WhatsApp updates" and "Offers & promotions" on; "Use my location" uses Google Maps only; analytics doesn't load on staff screens, order or ticket pages; a review we feature on the home page shows your first name and last initial.

1. Who we are

Khaao Piyo Repeat is run by Abhilash Kumar Gupta (sole proprietorship), Johar Bhavan, Banshi Vihar, Plot 306/1882, Bhubaneswar, Odisha 751024 ("we", "us"). We decide why and how your personal data is used. Website: khaaopiyorepeat.com.

Questions about your data, or a complaint: Abhilash Kumar Gupta, Proprietor (Grievance Officer), grievance@khaaopiyorepeat.com, 6362112152. See section 8.

2. What we collect, why, and for how long

Name, mobile number, email (optional), password
Why
Your account; signing in with an OTP; order receipts
Basis
You give it to place orders
How long
While your account is open. See section 7 for closing it
Delivery addresses, landmark, pincode, map pin (latitude and longitude)
Why
Delivering your food; checking we deliver to you
Basis
You give it to get deliveries
How long
Saved addresses: until you delete them or your account. A copy stays on each order (next row)
Orders and plans: items, amounts, dates, the delivery address and phone used, payment status, Razorpay payment and order IDs
Why
Making and delivering your food; receipts; refunds; our accounts and tax records
Basis
You give it to buy; we keep business records
How long
7 years from the date of your last order; each order keeps the delivery name, phone number and address it was placed with
Birthday (optional)
Why
A small treat in your box on your birthday; a birthday message only if "Offers & promotions" is on
Basis
Your choice in Preferences
How long
Until you remove it or close your account
Profile photo (optional)
Why
Showing it on your account
Basis
Your choice
How long
Until you remove it or close your account
Message choices: "WhatsApp updates" (on unless you turn it off) and "Offers & promotions" (off unless you turn it on)
Why
Sending order and plan updates; sending offers by WhatsApp only if both "WhatsApp updates" and "Offers & promotions" are on. Turning either one off stops WhatsApp offers
Basis
Updates: part of your order. Offers: your choice
How long
Until you change them
WhatsApp messages with us
Why
Order and plan updates; answering you
Basis
Part of your order and support
How long
We don’t delete them automatically yet. Ask us to erase them (section 8)
Support requests: name, phone, email, order, what happened, photos you attach
Why
Sorting out your problem
Basis
You give it to get help
How long
We don’t delete them automatically yet. Ask us to erase them (section 8)
Reviews: rating, text, photos
Why
Showing reviews; reward points
Basis
Your choice to post
How long
Until you ask us to remove them. Shown with your first name only; a review we feature on the home page shows your first name and last initial
Browser notifications (a technical address from your browser)
Why
Telling you about your order
Basis
Your choice in the browser
How long
Until you turn them off
Your location when you press "Use my location" on the area check
Why
Finding your pincode once. We don’t save it
Basis
Your browser asks you first
How long
Not stored
Device and usage: IP address, browser type, pages visited
Why
Running and securing the site; analytics (section 4)
Basis
Needed to run the service
How long
Kept by our hosting providers (Vercel, Railway) under their own log settings. Analytics: see section 4

What we don't do:

We don't store card numbers, CVV or UPI PINs. You enter them on Razorpay's checkout.
We don't sell your data.

3. Health details

Diet plans aren't open yet, so we don't collect health details. If that changes, we'll update this notice first and ask for your separate consent.

4. Cookies and analytics

Needed cookies keep you signed in and remember your cart. The site can't work without them.
We also use Google Analytics and Meta Pixel (see section 5). They load on most pages, never on staff screens, order or ticket pages, or a page whose web address carries a phone number, email, order number or code. We don't yet offer a choice to turn them off on this site. They help us see which pages work and measure our ads.
They receive the pages you visit (the page address only, never the part after a "?"), and what you add to your cart or buy (items, amounts and order numbers, not your name, phone or email). When you check a pincode we don't deliver to, they receive that pincode.
Google and Meta also use this under their own policies. You can block them with your browser's settings.

5. Who we share it with, and where it is stored

We share only what each service needs to do its job for us. We deliver with our own staff.

Supabase
What for
Our database, sign-in and file storage
What they get
All of the above
Where
Japan (Tokyo)
Vercel
What for
Runs our website
What they get
Website requests (IP address, pages)
Where
United States
Railway
What for
Runs our order and messaging system
What they get
Order, plan and message processing; request logs
Where
United States
Razorpay
What for
Payments and refunds
What they get
Name, phone, email, amount, order number
Where
Razorpay’s servers
MSG91
What for
Sign-in codes (OTP) by SMS
What they get
Mobile number
Where
MSG91’s servers
Meta / WhatsApp
What for
WhatsApp messages
What they get
Mobile number, message content
Where
Meta’s servers
Resend
What for
Emails (receipts, support replies)
What they get
Email, name, order details
Where
Resend’s servers
Google Maps
What for
Finding and pinning your address; the pincode for "Use my location"
What they get
What you type in the address search; the map pin location
Where
Google’s servers
Your browser’s notification service (Google, Mozilla, Apple)
What for
Delivering browser notifications
What they get
The notification text (order status only)
Where
Their servers
Google Analytics, Meta Pixel
What for
Analytics and ad measurement
What they get
See section 4
Where
Their servers
Legal authorities (police, courts)
What for
When the law requires it
What they get
What the request lawfully covers
Where
India

We stay responsible for your data when these services handle it for us.

6. Your rights

You can:

Get a summary of the personal data we hold about you, what we do with it, and who we've shared it with. Ask us (section 8).
Correct or update it. Edit your name, photo, addresses, birthday and message choices on your Account page. To change your mobile number or email, ask us.
Delete it (section 7). Some order and payment records are kept; we tell you exactly which.
Withdraw consent for offers: turn off "Offers & promotions" in Preferences. To stop WhatsApp messages, turn off "WhatsApp updates" or reply STOP on WhatsApp. Withdrawing doesn't undo what we did before, and you can keep ordering.
Nominate someone to use these rights for you if you die or become unable to. Email grievance@khaaopiyorepeat.com from your registered email, or WhatsApp us from your registered number, with their name and mobile number.
Complain to us, and then to the Data Protection Board of India (section 9).

7. Deleting or closing your account

The full details are on Delete or Close Your Account. In short:

No orders yet: go to Account and delete your account. We erase your account and personal details. Support requests you sent are kept (section 2).
You've ordered before: your account is closed. We erase your name, email, photo, birthday and saved addresses, and switch off your message choices. We keep your orders, payments and plans for 7 years from the date of your last order; each order keeps the delivery name, phone number and address it was placed with. Support requests you sent are kept (section 2).
A plan is running: you can close your account once it ends. Or message us and we'll explain your options under our Refunds policy. We'll never keep you signed up just to keep your data.

8. How to ask, and how fast we reply

Write to grievance@khaaopiyorepeat.com, call 6362112152, or use the Help form.
Include your registered mobile number (or write from it), so we can find your account. We may ask you to confirm it's you.
We confirm receipt within 48 hours and resolve within one month. We aim for 7 business days.
If you use the Help form and give an email, we email you a ticket number.

9. Complaining to the Data Protection Board

If you're not happy with our answer, you can complain to the Data Protection Board of India. Please come to us first (section 8).

10. Children

Our service is for adults (18 and over); you confirm you're 18 or older when you sign up. Under 18? Ask a parent or guardian to order for you. If we learn we hold a child's details without a parent's consent, we delete them.

11. Security

We use encrypted connections and access controls, so only staff who need your details can see them. If a breach could affect you, we'll tell you without delay: what happened, what it means for you, and what to do.

12. Changes

If we change this notice we'll update the date at the top and say what changed. For a big change we'll tell you by email or WhatsApp. If we want to use your data for something new, we'll ask first. Other questions: hello@khaaopiyorepeat.com.