Kraveo is a campus food-delivery service starting at VIT Bhopal. This page explains, in plain language, what we collect when you use the Kraveo apps, why we collect it, who can see it, and how you can delete it. “We” and “Kraveo” mean the team running the service; you can reach us at hello@kraveo.site.
1. What we collect
Customers (the Kraveo app)
- Google sign-in: your email address, your name and a Google account identifier. We verify your sign-in token on our server. We do not save your Google profile photo.
- Profile details you enter: your name, your phone number, whether you are a student, your hostel block (if you are), and which of the built-in avatars you picked (we store only the avatar number).
- Orders: what you ordered, from which kitchen, the amount, the drop point, the order status history, timestamps, and the one-time gate code for the order.
- Payments: payments are processed by Razorpay. We receive and store identifiers, amount and status for each payment. We never see or store your card number, UPI PIN or bank login.
- Device: if you turn on notifications, a device token so we can send them. The customer app does not track your location.
Restaurant and delivery partners
- Accounts are created by us. We store the partner’s name, phone number and a salted hash of their password (we cannot read the password).
- Delivery partners: while a delivery is in progress, the Delivery Partner app shares the rider’s live location so the customer can follow the order. The app asks for location permission for this purpose.
- Restaurants: restaurant name, menu items, prices and the orders they receive.
2. Why we use it
- To create your account and keep you signed in.
- To place, prepare, deliver and hand over your order, and show its status in real time.
- To let the rider reach you by phone at the gate if needed.
- To take payment, prevent fraud and misuse, fix bugs and support you.
We do not sell your data and we do not show advertising.
3. Who can see it
- The restaurant you order from sees your name and what you ordered.
- The delivery partner sees your name, phone number and drop point for that order, and the gate code is only checked when you share it.
- Service providers that run Kraveo: Google (sign-in), Razorpay (payments), Amazon Web Services (our servers, in the Mumbai region) and Google Firebase (app services). They process data on our behalf.
- We may share information if the law requires it.
4. How long we keep it, and deleting your data
You can delete your account from inside the customer app. Deleting anonymises your personal details (name, email, phone, avatar, hostel) so they are no longer linked to you. We keep anonymised order and payment records for accounting and dispute handling. You cannot delete your account while an order is still in progress; finish or cancel it first. You can also write to us and we will help.
5. Security
Traffic between the apps and our servers uses HTTPS. Passwords are stored as salted hashes. Our database is not open to the internet. No system is perfectly secure, but we take reasonable steps to protect your information and will tell affected users if a serious breach occurs.
6. Your choices and rights
You can view and edit your profile in the app, delete your account, or contact us to ask what we hold about you or to have it corrected or removed. We will respond under applicable Indian law, including the Digital Personal Data Protection Act, 2023.
7. Children
Kraveo is not directed at children under 13, and we do not knowingly collect their information.
8. Changes
If we change this policy in a way that matters, we will update the date above and, where appropriate, tell you in the app.
9. Contact
Questions or requests: hello@kraveo.site.