Privacy Policy

Who operates this service

Pahadi Didi is operated by Neha Negi, an individual business. This policy applies to the Pahadi Didi mobile app, its ordering services, this website and related customer support.

Privacy questions can be sent to pahadididirestaurant@gmail.com.

Information we collect

Account information: your name, email address, authentication provider identifier and profile details supplied by Google or Apple. Reviewer accounts may instead use an email address and password managed by our authentication provider. For delivery personnel, an administrator may also record an operational name and contact number.

Delivery information: recipient name, phone number, address, landmark, PIN code, delivery instructions and exact map coordinates that you choose to provide.

Order information: ordered items, prices, delivery charges, timestamps, order status, support messages and a snapshot of the delivery details required to fulfil that order.

Payment information: Razorpay order and payment references, amount and payment status. Pahadi Didi does not receive or store complete card, bank-account, UPI PIN or wallet credentials.

Technical information: app session data, device platform and, when you grant notification permission, a push-notification token.

Location data: customers

Pahadi Didi accesses your device location only with your permission when you use the current-location feature to choose a delivery address. This may include precise latitude and longitude. Customers are not continuously tracked in the background.

The address and coordinates you confirm, including coordinates selected through address search or the map, are sent to our backend and may be saved with your account and order. We use them to check the delivery area, calculate driving distance and delivery charges, and help fulfil your order. Relevant delivery details are available to authorised kitchen administrators and the rider assigned to your order.

You can decline device location permission and select your delivery address manually. A confirmed delivery location is still needed to check whether we can serve your address. You can revoke location permission in device settings and manage saved addresses in the app.

Location data: delivery riders

For Rider accounts, Pahadi Didi collects precise device location while the rider is On Duty. With foreground and background location permission, collection can continue when the app is in the background, not in use or the phone is locked. Location updates may include latitude, longitude, time, accuracy, direction and speed.

These updates are sent to our backend and linked to the Rider account to support delivery operations and live delivery tracking. Authorised administrators can view on-duty rider locations, and customers can view the assigned rider location during their active delivery. This background location feature is for Riders, not Customers.

Riders can stop on-duty location collection by going Off Duty or revoking location permission in device settings. Location permission is required for the On Duty delivery workflow.

Location processing and retention

Supabase processes the delivery coordinates and rider location updates used by our service. Google Maps, Places and routing services process address searches and relevant coordinates to provide address suggestions, maps and driving routes. When you open an external navigation app, that app processes the destination under its own privacy policy.

Saved delivery coordinates follow the saved-address and account-deletion practices described below. Order-related location information is handled with the associated order records. Turning off location permission prevents further device-location access but does not by itself delete information previously submitted. Contact us with location-data access or deletion requests.

We do not sell location data or use it for advertising.

How we use information

We use this information to authenticate customers, validate serviceability, prepare and deliver orders, process and reconcile payments, provide order updates, prevent misuse, respond to support requests and meet accounting or legal obligations.

We do not sell customer personal information or use it for unrelated advertising.

Service providers

We use Supabase for authentication and application data, Google and Apple for optional sign-in, Google Maps for location and routing, and Razorpay for payment processing. When device notification permission is granted, platform notification services may process the device token needed to deliver an update.

These providers process information under their own security and privacy terms. Information may be processed from locations in which those providers operate, subject to applicable law and contractual safeguards.

Retention and account deletion

Profile, saved-address and notification-token data is retained while the account is active. A customer can initiate permanent account deletion from Your account → Delete account in the Pahadi Didi app.

When an account is deleted, the authentication record, profile and saved addresses are deleted. Completed order and payment records may be retained where reasonably required for taxation, accounting, fraud prevention or dispute handling, but the customer account link, delivery-address snapshot and customer note are removed from those retained records.

Security and your choices

We use access controls, encrypted network connections and server-side payment verification. No internet service can guarantee absolute security, so please protect your sign-in account and tell us promptly about suspected misuse.

You can update a delivery address in the app, disable notifications in device settings, delete your account in the app, or contact us about access, correction or deletion requests.

Changes and contact

Material policy changes will be reflected here with a revised effective date. Contact pahadididirestaurant@gmail.com or +91 98338 66581 during 9 AM–10 PM IST, every day.