en
Join us

Privacy policy

PRIVACY POLICY — BITEBOXX

Effective Date: Aug 26, 2026
Last Updated: Sep 20, 2026
Platform: BiteBoxx (Website & Mobile Applications)
Website: https://biteboxx.com
Contact Email: biteboxx08@gmail.com

1. Introduction

This Privacy Policy explains how BiteBoxx collects, uses, processes, and protects personal data when you use the BiteBoxx mobile applications and our official website (https://biteboxx.com). It applies to all of the following applications:

  • BiteBoxx Customer App: used by customers to browse restaurants and place food delivery orders.
  • BiteBoxx Restaurant Partner App: used by restaurant owners and their staff to manage their store, menu, and incoming orders.
  • BiteBoxx Delivery Partner App: used by delivery partners to accept and fulfill deliveries.

Where a section applies only to a specific application, this is stated explicitly. We are committed to maintaining the privacy, confidentiality, and security of all user data in compliance with the Information Technology Act, 2000 and applicable Indian data protection frameworks.

2. Information We Collect

2.1 Information Provided by Users

  • Account & Contact Data: Name, email address, contact phone number, and addresses. For customers this includes delivery addresses (including specific room/building details and geographical landmarks); for restaurant partners this includes the business or store address; for delivery partners this includes the address supplied during onboarding.
  • Authentication Data: Encrypted passwords and login session tokens.
  • Merchant / Restaurant Data (Restaurant Partner App): Legal business name, store address, menu items, item photographs, price lists, settlement bank account details, and FSSAI registration details.
  • Photographs & Uploaded Media: Images uploaded from your device camera or photo library, such as restaurant and menu item photographs, profile pictures, and images attached to support requests.
  • In-App Communications: Messages, including any attachments, exchanged through the in-app chat between customers, restaurant partners, and delivery partners in connection with an order.
  • Customer Support Interactions: Feedback, support tickets, ratings, and customer service correspondence.

2.2 Information Collected Automatically

  • Location Information (GPS): Precise geographic location data collected with your permission. In the Customer App it is used to locate nearby restaurants, estimate delivery timelines, calculate delivery fees, and power live order tracking. In the Restaurant Partner App it is used to set and verify the store location and to display order and delivery information. In the Delivery Partner App it is collected while the app is active in the foreground or background during a live delivery, in order to provide navigation and real-time order tracking. Location collection can be disabled at any time from your device settings; certain features will not function without it.
  • Device & Technical Data: Device hardware model, operating system version, unique device identifiers, IP address, cellular network, and crash logs.
  • Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens utilized solely to deliver real-time order updates and status alerts.
  • Transactional Data: Order reference IDs, transaction timestamps, order values, payment modes, and — for restaurant and delivery partners — payout and earnings history. Note: We never store card numbers, CVVs, or bank PINs on our servers; all payment transactions are handled through certified PCI-DSS compliant payment gateways.

3. Purpose of Processing Your Information

BiteBoxx processes personal data strictly for legitimate operational purposes:

  • To authenticate accounts and ensure platform security.
  • To process, dispatch, and fulfill food and beverage delivery orders.
  • To enable restaurant partners to manage their store profile, menu, and order queue.
  • To enable communication between customers, restaurant partners, and delivery partners in connection with an order.
  • To execute digital payment processing via licensed payment gateways (e.g., Paytm PG) and to calculate partner settlements.
  • To transmit real-time push notifications and delivery alerts.
  • To provide dedicated customer support and handle refund requests.
  • To detect, prevent, and remediate fraudulent activities and security breaches.

We do not use personal data for third-party advertising, and we do not track users across apps or websites owned by other companies.

4. Data Sharing & Disclosure

BiteBoxx does not sell, rent, or monetize your personal information to any third parties for advertising purposes. Data is shared strictly as necessary with:

  • Partner Restaurants: Order details and customer delivery address required for food preparation and dispatch.
  • Delivery Partners: Customer name, delivery address, and phone number necessary for physical delivery fulfillment, along with the pickup details of the restaurant.
  • Customers: The restaurant's business name, address, menu, and rating, and the assigned delivery partner's name and contact number for the duration of the delivery.
  • Payment & Cloud Infrastructure Providers: Payment gateway providers (e.g., Paytm PG), Google Maps API (navigation), Google Firebase (authentication, push notifications, and diagnostics), and Google Play Services.
  • Law Enforcement & Regulatory Authorities: When mandatory under applicable Indian law, court order, or regulatory directive.

These third-party services maintain their own privacy policies: Google Play Services, Google Firebase, Google Maps Platform.

5. Security & Data Protection

BiteBoxx enforces enterprise-grade security standards to safeguard all data:

  • TLS 1.2+ / HTTPS encryption for all data in transit between mobile applications and our servers.
  • Role-based, audited administrative access controls on production databases.
  • Sandboxed and encrypted storage for sensitive documents and invoice records.

6. Data Retention & Account Deletion Rights

We retain user data for the duration that your account is active and for a reasonable period thereafter to fulfill legal, tax, and accounting obligations (up to 7 years for financial records).

How to Request Account & Data Deletion: Users of every BiteBoxx application have the right to request full erasure of their personal account and associated data at any time:

  1. In the BiteBoxx Mobile App, open Profile and select Delete Account, OR
  2. By emailing a formal deletion request to biteboxx08@gmail.com. All deletion requests are verified and processed within 30 days.

You may also stop all further collection of information by uninstalling the application from your device.

7. Children's Privacy

  • The Customer application is intended for users 13 years of age and older.
  • The Restaurant Partner and Delivery Partner applications are intended exclusively for individuals aged 18 and above.
  • We do not knowingly collect personal data from children under 13 years of age. If you are a parent or guardian and believe a child has provided us with personal information, please contact biteboxx08@gmail.com so that we can take the necessary action.

8. Changes to this Privacy Policy

BiteBoxx reserves the right to amend this Privacy Policy at any time. Changes will be posted to this page with an updated "Last Updated" timestamp. Continued use of the platform represents acceptance of the revised terms.

9. Your Consent

By using any BiteBoxx application or our website, you consent to the processing of your information as set forth in this Privacy Policy, as amended from time to time.

10. Grievance Officer & Contact Information

For privacy inquiries, grievance redressals, or data access requests, please contact our designated Grievance Desk:

  • Brand: BiteBoxx
  • Official Email: biteboxx08@gmail.com
  • Customer Care Helpline: +91 701 492 0354
  • Corporate Address: Shoolini University, Solan, Himachal Pradesh — 173229, India
  • Official Website: https://biteboxx.com