Privacy Policy

1. Who we are

Baloji's Cafe is a vegetarian restaurant in Kudachi, Karnataka, India. We operate online ordering so customers can browse the menu, place orders, and track order status.

2. Information we collect

We collect only what is needed to run ordering and customer accounts:

• Account details: mobile number (10 digits), name, city, and delivery address when you register or update your profile.
• Order information: items ordered, quantities, prices, subtotal, delivery fee, discounts, coupon codes applied, order status (e.g. pending, preparing, completed, cancelled), and timestamps.
• Session data: a signed login token stored in your browser so you stay signed in (typically up to 90 days).
• Device and app data: basic technical data sent with web requests (such as IP address, browser or app type, and device OS) for security and operation. We do not use advertising trackers.
• Local storage on your device: shopping cart contents, login token, profile summary, PWA install preferences, and optional prompts (e.g. Google review reminder after a completed order) stored in your browser’s localStorage.
• Communications: if you call, WhatsApp, or email us, we receive the information you choose to share.

We do not knowingly collect payment card numbers in the app; payments, if any, are handled outside the app as agreed with you (e.g. cash on delivery or UPI at delivery).

3. How we use your information

We use personal information to:

• Create and manage your customer account.
• Accept, prepare, and deliver food orders.
• Show your order history and live order status in the app.
• Apply valid coupon codes and calculate totals.
• Contact you about your order (e.g. by phone or WhatsApp if needed).
• Send order notifications to our staff (e.g. email alerts when configured).
• Improve reliability, prevent abuse, and keep the Services secure.
• Comply with law and respond to lawful requests.

4. Legal basis

We process your information based on your consent when you register and place orders, and on our legitimate need to perform the food-ordering service you request. You may withdraw consent by contacting us; some features (such as ordering) may no longer work without an account.

5. Where data is stored

Customer and order data are stored in a secure cloud database (PostgreSQL via Neon). The website and APIs are hosted on Vercel. Data is transmitted over HTTPS. Access to production systems is limited to authorised personnel.

6. Sharing with others

We do not sell your personal information. We may share data only:

• With hosting and database providers that process data on our behalf under contract.
• With email delivery services when order emails are enabled for our kitchen staff.
• When you open external links (e.g. Google Maps, WhatsApp, or Google review pages) — those services have their own privacy policies.
• If required by law, court order, or to protect rights, safety, or property.

7. Android app & Google Play

Our Android app is a Trusted Web Activity that loads our website at www.balojicafe.com. The same data practices in this policy apply. The app may request permission to show notifications about order updates when enabled. You can manage notifications in your device settings.

Google Play may collect installation and device data according to Google’s Privacy Policy.

8. Cookies, local storage & service worker

We use browser local storage (not third-party advertising cookies) for login, cart, and app preferences. A service worker may cache parts of the menu and app files so the site loads faster offline; cached data stays on your device. You can clear site data in your browser or app settings.

9. How long we keep data

We keep account and order records as long as needed to run the business, handle disputes, and meet legal obligations. You may ask us to delete or correct your account information subject to any records we must retain by law.

10. Your choices & rights

You can:

• View and update your name and city in Profile.
• Sign out by clearing site data or removing the app; your session token will stop working.
• Request access, correction, or deletion of your data by contacting us (see below).
• Opt out of optional prompts (e.g. review reminders) by dismissing them or clearing site data.

11. Children

The Services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

12. Security

We use industry-standard measures such as HTTPS, signed session tokens, and restricted database access. No method of transmission or storage is 100% secure; please use a device you trust and keep your phone secure.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Continued use of the Services after changes means you accept the updated policy. For significant changes, we may show a notice in the app.

14. Contact us

For privacy questions, access requests, or complaints, contact:

• Phone: +91 9900582650 · WhatsApp
• Address: Opp. Railway Station, Near Bus Stop, Kudachi – 591311, Karnataka, India