Privacy Policy

Dibbbs ("we", "our", "the app") is a food pre-ordering platform operated in India. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. By using Dibbbs, you consent to the practices described here.

Definitions

For the purposes of this Privacy Policy:

Data we collect

How we use your data

• Process and fulfill your pre-orders
• Send order confirmations and status updates via push notifications
• Show relevant home cooks and menus based on your location
• Improve app performance and detect fraud
• Comply with legal obligations

We do not use your data for unsolicited marketing without your explicit opt-in.

Sensitive & financial data

For customers, we do not store, transmit, or have access to sensitive financial information such as your card number, CVV, UPI PIN, or net banking password. All such details are handled directly by Razorpay and/or Cashfree on their secure systems, under their own privacy policies.

For home cooks and chef partners, we collect and store limited financial information (such as bank account number and IFSC code, and PAN or GST details where applicable) solely for the purposes of processing payouts, maintaining financial records, and complying with legal obligations. We protect this information using the same security measures described in this Privacy Policy and do not use it for any unrelated purpose.

Payment processing

Payments are processed by Razorpay and/or Cashfree, both PCI-DSS compliant payment gateways. Dibbbs does not store, transmit, or have access to your card number, CVV, UPI credentials, or bank account details used for customer payments.

For home cooks and chef partners, we may store limited bank details (such as account number and IFSC code) solely to process payouts to your bank account and comply with applicable laws.

Data storage & infrastructure

Your personal data is stored on Supabase (Primary Database: South Asia, Mumbai — ap-south-1), hosted within India. We do not transfer your personal data outside India.

Data sharing

We do not sell your personal data. We share data only in the following cases:

• With home cook partners: Name and delivery address to fulfill your order
• With payment gateways (Razorpay, Cashfree): Transaction and contact info for payment processing
• With banking or payout service providers: For chef partners, to process payouts to your bank account
• With Supabase: Cloud database and infrastructure provider bound by data processing agreements
• When required by law: If compelled by a court order, government authority, or legal obligation under Indian law

Data retention

We retain your personal data for as long as your account is active and as necessary to provide you with the Dibbbs service.

If you delete your account, we will remove your personal data from our active systems within 30 days, except where we are required or permitted by law to retain certain information for a longer period. For example, we may keep:

• Transaction and financial records to comply with tax, accounting, and GST requirements
• Logs or limited information needed to prevent fraud, resolve disputes, or enforce our terms

After the applicable retention period, we will securely delete or anonymize your personal data.

How to delete your account: Go to the Profile page in the app → select "Delete Account" → confirm. You may also request deletion by emailing contact@dibbbs.app.

Your rights (DPDP Act 2023)

As a data principal under the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erasure of your personal data, subject to legal retention requirements
• Withdraw consent at any time (this may affect app functionality)
• Nominate another individual to act on your behalf

To exercise these rights, contact us at contact@dibbbs.app. We will respond within 72 hours.

Data security

We use industry‑standard technical and organizational measures to protect your personal data, including:

• TLS encryption for data in transit
• Access controls and role‑based permissions
• Logging and monitoring of access to our systems
• Regular security reviews and updates

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

You also play an important role in keeping your data safe. We recommend that you:

• Use a strong and unique password or device lock
• Keep your device software up to date
• Do not share one‑time passwords (OTPs) or verification codes with anyone
• Immediately inform us if you suspect unauthorized access to your account

In the event of a data breach that is likely to affect your rights or cause harm, we will notify you and the relevant Data Protection Board as required under the DPDP Act.

Children's privacy

Dibbbs is not intended for children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@dibbbs.app, and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will notify you by updating the “Last updated” date at the top of this policy and, for significant changes, we may also notify you via email or a notice on our platform. Your continued use of our Services after changes are posted means you accept the updated policy.