Bhojo — Privacy policy Updated 28 September 2026 Bhojo is published by Bhairavi.app. It helps residents of a residential community order home-cooked food from neighbours who cook in their own kitchens. Contact for privacy and support: hello@bhairavi.app. 1. Information we collect - Account: your sign-in email or mobile number; if you sign in with Google, your Google name, email and profile photo (basic profile only; no contacts or mailbox access). A mobile number is confirmed once by SMS; that phone then keeps a random sign-in key in its encrypted storage so later sign-ins on it need no SMS (we store only a scrambled form of the key). If you choose to verify a mobile number, the number and its verification status. - Profile and handover details: your name, community, tower/block and flat, used so a kitchen knows who to hand an order to. - Saved addresses (optional, up to 20): label, recipient, flat/house, street, area, city, postcode, community and a map pin stored to about 1 metre. - Location (optional): only when you tap to find your community or confirm a location on the map. The coordinates are sent to Bhojo to find nearby communities and are not kept unless you save an address or add a community. Bhojo never tracks location in the background. - Orders: dishes, quantities, options and requests, pickup or delivery choice, status changes, handover PIN confirmation and the cook's record of direct payment. - Kitchens (cooks): kitchen name, description, the cook's story, dishes they are known for, kitchen photos, collection point and hours, menus, prices, portions, allergens, food photos, plan choice and contact details given at kitchen setup. - Reviews and reports: ratings, review text, reports, blocks and moderation decisions. - Kitchens you follow, so we can tell you (at most once a day per kitchen) when one posts a new menu. Cooks see how many neighbours follow them, never who. - Device and technical data: a notification token if you allow notifications; an app-installation identifier, platform and app version if you turn on usage insights (off by default); IP address and request logs processed by our service providers for security. 2. How we use it To run your account; show menus from kitchens in your community; place, cook, hand over and track orders; send order updates you asked for; keep reviews fair and safe; prevent misuse and fraud; provide support; and improve the app. We do not sell personal information and we do not show advertising. 3. Who can see what - The cook handling your order sees your name, tower/flat and, for delivery, the address you chose for that order. - You see the cook's kitchen name, collection point and order details. - Reviews show as "Completed-order customer" without your account details or flat. - People in a community can see published kitchens and menus there, including the kitchen's collection point. - Nearby address suggestions: when three or more neighbours have saved addresses at the same spot, the common street, area, city or postcode may be suggested to others saving an address there. Names, flats, labels and counts are never shared. - Saved-address map pins from several residents may be used to place their community's centre on the map; no individual pin is shown. - The Bhojo owner can see account, order and kitchen records to operate and support the service. 4. Service providers (processors) - Supabase (database, sign-in, file storage and server functions; project hosted in Mumbai, India). - Google: Sign-in with Google, Firebase Cloud Messaging for notifications, Google Maps for the location map, and Google Play. - Resend (sign-in code emails from bhojo@bhairavi.app). - Google Firebase Authentication (sign-in or verification with a mobile number): your number is sent to Google to deliver and check a one-time SMS code. - Meta WhatsApp Business (only if WhatsApp codes are switched on later): the number and a one-time code are sent to deliver the message. Payments are made directly to the cook at handover (for example UPI or cash). Bhojo does not collect card or bank details. 5. Your choices Location, notifications, following kitchens, usage insights, saved addresses and mobile verification are optional. You can turn notifications and usage insights off in the app at any time; turning insights off deletes the recorded usage. 6. Keeping and deleting data We keep data while your account is active. You can delete your account in the app: You > Delete my account (you may need to sign in again first). Deletion removes your sign-in account, profile, flat and saved addresses, notification registrations, usage insights, remembered sign-in phones, kitchens you follow, reviews, reports and, for cooks, your kitchen, menus and uploaded food photos. Orders you placed are kept for the kitchen's records with your name, flat and address removed ("Deleted account"). Orders received by your kitchen are deleted. Provider backups and security logs expire on their own schedules. 7. Security Data is sent over encrypted connections. Access is limited by server-side rules so people only see what they need. Never share your sign-in code; share your handover PIN only with the cook when you receive your food. 8. Children Bhojo is intended for adults (18+) arranging food in their own community. 9. Test accounts Dedicated test accounts used by app reviewers are limited to a separate, labelled test community. Their activity does not arrange real food or payments and is excluded from business figures. 10. Changes and contact We will update this page when our practices change. For access, correction, deletion or privacy questions, contact hello@bhairavi.app.