Privacy Policy
Last updated 3 October 2026.
The short version
- We collect what's needed to take and deliver your order: your name, mobile number, address and map location, and what you order.
- We share it only with the restaurant and rider handling your order, and with the services that run MunchPies (payments, hosting, messaging, AI).
- We never sell your data. You can ask us to see, correct or delete it.
What we collect
- Ordering: name, mobile number, optional email, delivery address, landmark, the map pin you set, your order, notes and ratings.
- Chat with the assistant: your messages and its replies, kept so the conversation works. For a diet plan, the details you give (age, height, weight, goal, food preferences, health condition).
- Voice: if you talk instead of type, your speech is turned into text. On iPhones the recording is sent to our speech service (Sarvam AI, India) for this and isn't kept by MunchPies afterwards.
- Payments: handled by Razorpay. We receive the payment status and reference, never your card number or UPI PIN.
- Device: if you turn on notifications, your browser's push address. Small preferences are stored in your browser (for example your basket and saved address).
- Restaurants and riders: business and contact details, payout UPI ID, and, for riders, identity and vehicle documents and a police clearance certificate for verification. Riders' live location is shared only while they're delivering.
Why we use it
- To take, prepare, deliver and support your order, and to send you updates about it.
- To keep MunchPies safe (preventing fraud and fake sign-ups) and to meet legal and tax obligations.
- To improve our menus and service. We send marketing messages only if you agree, and you can stop them at any time.
Who we share it with
| Who | What and why |
|---|---|
| The restaurant | Your name, items, notes and, once it accepts, your phone and address, so it can prepare and hand over your order. |
| Your rider or delivery partner | Pickup and drop details, your name and phone, so they can deliver. Delivery partners (via ProRouting, on the ONDC network) receive the same details. |
| Razorpay | Payments and refunds. |
| Service providers | Hosting and database (Vercel, Supabase), email (Resend), maps (OpenStreetMap, Google), AI assistant (Anthropic), speech (Sarvam AI). They process data only to provide their service to us. |
| Authorities | Only when the law requires it. |
How long we keep it
Order and payment records are kept for as long as tax and accounting law requires (generally 8 years). Chat conversations are kept for up to 12 months. Rider and restaurant verification documents are kept while the account is active and for 12 months after it closes, then deleted.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, correct it, or delete it (except records we must keep by law). You can also withdraw consent and nominate someone to act for you. To do any of this, write to hello@munchpies.com or WhatsApp 99460 01222. Grievances go to the MunchPies Grievance Officer at the same address; we respond within 30 days.
Security
Data is sent over HTTPS and stored with access limited to people who need it. Documents are stored privately and never published. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Children
MunchPies isn't meant for children under 18 without a parent's or guardian's involvement. We don't knowingly collect children's data.