Privacy Policy

1. What this covers

CUFood ("we", "us", "the platform") is a food-ordering service for outlets on campus. This policy explains what information we collect from students and restaurant owners who use the CUFood website and app, and how it's used.

2. Information we collect

From students placing an order: your name and phone number, entered at checkout for each order. We don't require or offer account creation — there's no password, email, or persistent profile tied to you as a student. Your device may locally store your recent order codes (in your browser's own storage) so the "My Orders" page can show your history; this data stays on your device and isn't something we control or can see.

From restaurant owners: a login username and password, and the UPI ID you provide so we can forward your earnings to you.

Payment information: we never see or store your card, UPI, or banking details. All payments are processed directly by Razorpay, a licensed payment gateway; CUFood only receives confirmation that a payment succeeded, an amount, and a transaction reference.

Notifications: if you enable order-update notifications, your browser generates a subscription identifier that we store so we can send you a status update (accepted, ready, rejected) for that specific order. This isn't linked to your name or phone number.

3. How we use it

Solely to operate the service: passing your order and contact number to the restaurant you ordered from, verifying and processing payment, sending you order-status updates, and issuing refunds when a restaurant can't fulfil an order. We don't sell, rent, or use your information for advertising, and we don't share it with any restaurant other than the one you placed an order with.

4. Third parties we rely on

Payments are handled by Razorpay, subject to their own privacy policy. Our database and file storage run on Supabase, and our servers run on Render — both process data only as needed to keep the service running, not for their own purposes. If you use the Android app, standard Google Play services apply to the app's delivery and updates.

5. How long we keep it

Order records (including the name and phone number attached to them) are retained for accounting, dispute-resolution, and refund-tracking purposes. We don't have a student account to delete, since none exists — if you'd like a specific order's contact details removed from our records, contact us using the details below and we'll do so unless we're required to keep it for a legal or payment-dispute reason.

6. Children's privacy

CUFood is built for university students and is not directed at children under 13. We don't knowingly collect information from anyone in that age group.

7. Changes to this policy

If this policy changes in any meaningful way, we'll update the date at the top of this page.

8. Contact

Questions about this policy or your data can be sent to adityakp215@gmail.com.