Privacy Policy

Last updated: 6 October 2026

Food Cafe ("Food Cafe", "we", "us") runs a QR ordering, kitchen and billing platform for restaurants, available at foodcafeshop.in and its sub-domains. This policy explains what personal data we process when you order at a restaurant that uses Food Cafe (a diner) or when you run a restaurant on Food Cafe (a restaurant partner), and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Data we collect

From diners

• Name and phone number you enter when you join a table or place an order. Phone is optional unless the restaurant requires it.
• Order details: items, customisations, notes, table, order type (dine-in, takeaway or delivery) and bill amounts.
• Delivery address, only for delivery orders.
• Reviews and ratings you choose to post.
• Push-notification subscription, only if you allow notifications in your browser.
• Account identifier, if you sign in.
• Usage and device data: pages visited, browser type and approximate performance metrics, collected without advertising cookies.

From restaurant partners

• Owner and staff names, login identifiers, roles and shift records.
• Business details such as shop name, address, contact numbers, GSTIN and FSSAI licence number.
• Menus, photos and other content you upload, including menu photos you submit for AI digitisation.
• Subscription and billing records. Card and bank details are entered on our payment provider's page and are never stored by us.

2. How we use it

• To send your order to the restaurant's kitchen, show its status, and produce the bill.
• To let people at the same table share a cart and see each other's items.
• To prevent fake or prank orders (for example, table and takeaway OTPs).
• To send notifications you asked for, such as "your order is ready".
• To run, secure, debug and improve the service, and to bill restaurant partners.
• To meet legal, tax and accounting obligations.

We do not sell personal data and do not use it for third-party advertising.

3. Who we share it with

• The restaurant you order from. It receives your name, phone, order and (for delivery) address so it can serve you, and it keeps its own records of your orders and bills. The restaurant decides how it uses that data for its own business and is responsible for that use.
• Service providers that process data for us under contract: Supabase (database and storage), Google Firebase (sign-in and notifications), Vercel (hosting and privacy-friendly analytics), Razorpay (subscription payments), Google Gemini (AI menu digitisation for restaurant partners) and Sentry (error monitoring). Some of them store data outside India.
• Authorities, when required by law or to protect rights and safety.

4. How long we keep it

Order and bill records are kept while the restaurant's account is active and for as long as tax and accounting laws require (generally up to 8 years). Guest profiles that have no orders for 24 months, and push subscriptions that stop working, are deleted. Restaurant partner data is deleted or anonymised within 90 days of account closure, except records we must keep by law.

5. Your rights

You can ask us to tell you what data we hold about you, correct or update it, erase it, or withdraw consent for optional processing such as notifications. You can also nominate someone to exercise these rights for you, and raise a grievance with us. If we do not resolve your grievance, you may complain to the Data Protection Board of India. To make a request, email us from the phone number or account linked to your orders, or tell us the restaurant and order details so we can find your records.

6. Cookies and local storage

We use a small number of essential cookies and browser storage to keep you signed in, remember your cart and make the menu work offline. See our Cookie Policy.

7. Security

Data is encrypted in transit, access is restricted per restaurant at the database level, and staff access is logged. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

8. Children

Food Cafe is not meant for use by anyone under 18 without a parent or guardian. We do not knowingly track children or target them with advertising.

9. Changes

We will post updates on this page and change the date above. For significant changes we will also notify restaurant partners in their dashboard.

10. Contact and grievance officer

Grievance Officer, Food Cafe
Patna, Bihar, India
Email: foodcafeshop@gmail.com

We acknowledge grievances within 48 hours and aim to resolve them within 30 days.