Privacy Policy | Chefyy - Private Cook & Chef Service

Welcome to Chefyy ("we," "us," "our," or "the Platform"). Chefyy is a home culinary technology application operated by Chefyy (operating in Ahmedabad, Gujarat, India). We provide on-demand verified cooks, party catering chefs, trial bookings, and flexible meal subscriptions directly to customers' homes.

Your privacy and trust are paramount. This Privacy Policy outlines clearly, transparently, and comprehensively how we collect, handle, store, and protect your information when you access or use the Chefyy mobile application (Android & iOS) and related services.

1. Information We Collect

We only collect information essential to providing reliable chef services, verifying identities, processing orders, and ensuring high-quality meal fulfilment.

Category	Specific Data Elements	Purpose of Collection
Account & Identity	Email address (primary login identifier), Full Name (First name, Surname), and 10-digit Mobile Phone Number.	Authentication via one-time passwords (OTP), creating your profile, chef coordination, customer service, and sending booking confirmations.
Location Data	Precise GPS location and approximate location (collected with user consent via `expo-location`).	Confirming service area availability, suggesting accurate delivery/service addresses, and enabling the assigned chef to reach your kitchen on time.
Booking Details	Service date, time slot, guest count, cuisine preferences, dietary preferences (Veg, Non-Veg, Both), menu selections, kitchen notes, and chef feedback.	Assigning an appropriate certified chef, meal preparation planning, and improving service standards.
Payment Identifiers	Razorpay payment ID, Order ID, transaction status, and amount.	Reconciling booking transactions, issuing payment receipts, and initiating dynamic refunds.
Device & Technical Data	Device model, operating system version, push notification tokens, IP address, and app performance telemetry.	Sending push notifications, troubleshooting bugs, preventing fraud, and optimizing app reliability.

        Payment Security Notice: All digital transactions on Chefyy are securely handled by Razorpay, a PCI-DSS Level 1 compliant payment gateway. Chefyy does not collect, store, or process your credit card numbers, debit card details, CVVs, net banking passwords, or UPI PINs on our servers.
      

2. How We Use Your Information

We use the collected information strictly for legitimate business and operational purposes:

Service Fulfilment: Matching your booking with vetted culinary professionals and dispatching chefs to your address.
Account Authentication: Passwordless login and sign-up using verified Email OTP and mandatory phone number binding.
Real-Time Tracking & Communication: Updating you on chef assignment, chef departure ("Chef on the way"), meal commencement, and live refund tracking.
Refund Processing: Calculating and crediting authorized refunds (such as 100% before chef assignment, 80% after chef assignment, or monthly subscription middle-of-the-month settlements) in accordance with our transparent Terms & Conditions and Refund Policy.
Customer Support: Responding promptly to your support tickets, WhatsApp inquiries, and live in-app chat requests.
Safety & Compliance: Enforcing our Terms & Conditions, preventing fraudulent bookings, and complying with Indian laws (including the Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023).

3. Device Permissions Requested

The Chefyy mobile application requests specific device permissions to function effectively:

Location (`ACCESS_FINE_LOCATION`, `ACCESS_COARSE_LOCATION`): Used only while using the app to check whether your residence falls within our active service zones (e.g., Ahmedabad, Gujarat) and autofill your address. You can revoke location access anytime in your device settings.
Push Notifications: Used to notify you in real-time when a chef is assigned, when the chef arrives, payment confirmations, and refund credit alerts.
Internet Access: Required to communicate with our secure backend and Supabase database.

4. Information Sharing & Third-Party Services

We respect your data. We do not sell, rent, or trade your personal information to third-party advertisers or data brokers. We share data only with the following trusted service providers:

Assigned Chefs: Your first name, service address, service time, menu requirements, and contact phone are shared with the designated chef solely for fulfilling your booking.
Supabase Inc.: Cloud database infrastructure and authentication provider with encrypted storage, Row-Level Security (RLS), and SSL/TLS in transit.
Razorpay Software Private Limited: Secure payment gateway partner for processing UPI, cards, and net-banking transactions as well as issuing automated refunds.
Legal & Regulatory Authorities: We may disclose data if required by applicable Indian law, court order, or governmental regulation to protect life, health, or property.

5. Data Retention & Deletion

We retain your personal information for as long as your Chefyy account remains active or as required to comply with statutory legal, taxation, and auditing obligations.

Your Right to Delete Account & Data: You have the complete right to request the permanent deletion of your account and personal data at any time. To request deletion, simply email our grievance officer at vanrajbusiness@gmail.com with the subject line "Account Deletion Request" from your registered email address. Your account and associated personal data will be purged within 14 business days, except for financial transaction records legally required for auditing.

6. Security Measures

We implement robust administrative, technical, and physical security measures to safeguard your information:

All network transmissions are strictly encrypted via HTTPS / TLS 1.3.
Database access is enforced using granular PostgreSQL Row-Level Security (RLS) policies ensuring users can only read and write their own records.
Administrative access is protected by role-based authentication and private environment credentials.

7. Children's Privacy

Chefyy is intended strictly for individuals aged 18 years and older. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, please contact us immediately to have the information removed.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect enhancements in our app or regulatory requirements. Material modifications will be notified via email or an in-app notice prior to becoming effective. Continued use of Chefyy following the posting of changes constitutes acceptance.

9. Grievance Officer & Contact Information

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:

Grievance Officer: Vanraj

Organization: Chefyy

WhatsApp Support: +91 6352997151

Email: vanrajbusiness@gmail.com

Operating Service Hubs: Ahmedabad, Gujarat, India

Support Response Time: Acknowledgement within 48 hours; resolution within 30 days.