1. Introduction
Dato ("we", "our", "us") operates a food delivery platform serving the Manipal area. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
2. Information We Collect
2.1 Information You Provide
- Account Information: Phone number, name, and role selection (Customer, Restaurant Owner, or Delivery Rider).
- Delivery Addresses: Addresses you save for food delivery.
- Order Information: Items ordered, restaurants selected, order history, and delivery preferences.
- Payment Information: Payment transactions are processed securely through Razorpay. We store transaction IDs but never store your card details, UPI PIN, or banking credentials.
2.2 Information Collected Automatically
- Location Data: With your permission, we collect GPS location to show nearby restaurants (Customers), enable delivery tracking (Riders), and calculate delivery distances.
- Device Information: Device type, operating system, and app version for troubleshooting and optimization.
3. How We Use Your Information
- To create and manage your account
- To process and deliver your food orders
- To enable real-time delivery tracking
- To calculate delivery fees based on distance
- To send order status notifications
- To facilitate communication between customers, restaurants, and riders
- To improve our Service and user experience
- To prevent fraud and ensure platform security
4. Information Sharing
We share your information only in the following circumstances:
- With Restaurants: Your name, delivery address, and phone number are shared with restaurants to fulfill your orders.
- With Riders: Your delivery address and name are shared with delivery riders to complete deliveries.
- Payment Processor: Order amounts are shared with Razorpay for payment processing.
- Map Services: Location data is shared with Mapbox for map rendering and route calculation.
- Legal Requirements: We may disclose information if required by law or to protect our rights.
We do NOT sell your personal information to third parties.
5. Data Storage & Security
Your data is stored securely using Supabase (PostgreSQL) with Row Level Security (RLS) policies ensuring users can only access their own data. All data transmission is encrypted using HTTPS/TLS. Authentication is handled via Supabase Auth with OTP verification.
5.1 How Long We Keep Things
A nightly job applies the schedule below. It is not a statement of intent — each period is enforced in code, and every run is recorded.
- Personal details on completed orders — 3 months. After this period the personal details are erased and the record itself is kept. Ninety days after an order is delivered or cancelled, the customer name, phone number, delivery address, coordinates and delivery instructions are erased from it. The order itself is kept as a financial record. Ninety days is long enough to settle a dispute, a chargeback or a tax query about a specific delivery, and there is no purpose after that which needs the address.
- Rate limit counters — 7 days. After this period the records are deleted. Counters exist to enforce a limit measured in minutes. A week is generous headroom for investigating abuse; beyond that they are a log of who used the app and when, kept for no reason.
- Payment webhook delivery records — 3 months. After this period the records are deleted. These exist so a redelivered webhook is not processed twice. Razorpay does not redeliver after a few days; ninety is kept because reconciling a disputed payment against what the gateway actually sent is worth being able to do for a quarter.
- Automated assignment offers — 6 months. After this period the records are deleted. The record of which delivery partner was offered which order, at what rank and score. Six months so that a partner disputing how work was allocated to them can be answered with evidence, which is the reason the scores are stored at all.
- Shadow dispatch decisions — 3 months. After this period the records are deleted. Decisions the dispatcher reached without acting on them, kept to evaluate a rollout. They describe a hypothetical and stop being useful once the rollout they informed is over.
- Push tokens for devices that stopped checking in — 6 months. After this period the records are deleted. A token not refreshed for six months belongs to an app that was uninstalled or a device that is gone. Keeping it is holding the ability to message a device nobody is using.
Completed orders are kept as financial records for as long as tax law requires, which is years rather than months. What expires is the personal data on them, on the schedule above — after ninety days a past order no longer carries your name, phone number or address, and nothing on it links back to you.
Tax invoices and credit notes are an exception and are not redacted. A tax invoice is legally required to identify the person it was issued to, and one with that erased is not a valid document. Records of what our own operators did to accounts and payments are also kept indefinitely, because an audit trail that deletes itself is not one.
6. Location Data
We request location permission for:
- Customers: Finding nearby restaurants within 2km delivery radius
- Riders: Real-time GPS tracking during active deliveries (foreground only)
Location data is only collected while the app is in active use. We do not track your location in the background.
7. Push Notifications
With your permission, we send push notifications for order status updates (order confirmed, rider assigned, out for delivery, delivered). You can disable notifications in your device settings at any time.
8. Your Rights
- Access: You can request a copy of your personal data.
- Correction: You can update your account information at any time.
- Deletion: You can delete your account and associated data yourself, from the Account tab in the app (Profile tab for delivery partners and restaurants). It takes effect immediately — there is no request to make and no waiting period. Past orders are retained as financial records with every detail that identifies you erased from them. See our account deletion page for exactly what is removed and what is kept.
- Opt-out: You can disable location services and push notifications through your device settings.
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us: