Privacy Policy

1. Introduction

Welcome to Qwikly, a service operated by Filigree Lifestyle Private Limited ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Qwikly website, mobile applications, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. We process your personal data on the basis of your consent and to perform our contract with you (for example, to fulfil an order you place). Where we rely on consent, you may withdraw it at any time as described in Section 9.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you provide when you register, place an order, communicate with us, or use our Services, including:

• Identity and contact details: name, email address, phone number
• Authentication data: we verify your account using a one-time password (OTP) sent via WhatsApp or SMS to your phone number
• Delivery information: delivery address and related location details
• Order information: items ordered, order history, and special instructions
• Dietary preferences and allergies that you choose to share with us so meals can be prepared safely
• Payment information: processed by our third-party payment processor; we do not store your full card details on our servers

2.2 Information We Collect Automatically

When you use our Services, we and our analytics provider may automatically collect:

• Device information: device type, operating system, app version, and an app-generated identifier
• Location data: precise or approximate location (with your permission) to enable delivery, and IP address
• Usage data: in-app events, features used, screens viewed, and interaction patterns
• Cookies and similar technologies on our website

We do not access your device's advertising identifier (such as Apple's IDFA), and we do not track you across other companies' apps or websites. See Section 7.

3. How We Use Your Information

We use the information we collect to:

• Deliver the Service: process and fulfil your orders, including chef dispatch, meal preparation, and delivery routing
• Authenticate you: verify your identity via WhatsApp/SMS OTP and secure your account
• Communicate with you: send order confirmations, delivery updates, and respond to support requests
• Personalise your experience: remember your preferences, dietary needs, and order history
• Improve our Services: analyse in-app usage with first-party product analytics to understand how the Service is used and make it better
• Marketing: send promotional offers and updates, only where you have consented; you can opt out at any time
• Legal and security: comply with applicable laws, prevent fraud, and protect the rights and safety of users and the Company

4. How We Share Your Information

We share your information only as described below. We do not sell your personal information.

4.1 Service Providers and Third-Party Services

We use the following categories of third-party services, which may process your data on our behalf:

• Google Maps Platform (Google LLC): we use the Google Maps API for address selection, geocoding, and delivery routing. Your location and address data may be processed by Google in accordance with the Google Privacy Policy.
• Google Analytics (website analytics): we use Google Analytics on our website to understand page views and site usage. Google may process cookie, device, and usage data in accordance with the Google Privacy Policy.
• PostHog (product analytics): we use PostHog to collect in-app usage and event data to improve the Service. This data is used only for our own first-party analytics and is not used for advertising or cross-app tracking.
• Messaging providers (WhatsApp / SMS): we use messaging and SMS gateway providers to send authentication OTPs and transactional notifications to your phone number.
• Payment processor: to process your payments securely.
• Chefs and kitchen/delivery staff: the information necessary to prepare and deliver your order (such as your name, delivery address, items, and relevant dietary/allergy notes).

Each service provider is permitted to use your data only to perform services for us and is required to protect it consistent with this Policy.

4.2 Legal and Protective Disclosures

We may disclose information where required by law, to enforce our terms, to detect or prevent fraud or security issues, or to protect the rights, property, or safety of our users or the Company.

5. Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this Policy:

• Account data: retained while your account is active and deleted upon account deletion, subject to the exceptions below.
• Order and transaction records: retained for the period required by applicable tax, accounting, and legal obligations (typically up to 8 years), even after account deletion.
• Marketing data: retained until you opt out or withdraw consent.
• Analytics data: retained in aggregated or de-identified form for as long as it is useful for improving the Service.

When data is no longer required, we securely delete or anonymise it.

6. Your Rights and Account Deletion

You have the right to access, correct, and delete your personal data, to withdraw consent, to opt out of marketing, and to request a copy of your data (portability).

6.1 How to Delete Your Account and Data

You can delete your account and associated personal data at any time:

• In the app: go to Profile → Manage Account → Manage Data → Delete Account, or
• On the web: submit a deletion request at https://eatqwikly.in/delete-account, or
• By email: contact our Grievance Officer (see Section 14).

Upon a verified request, we will delete your account and associated personal data. Certain records (such as transaction records required for tax and legal compliance) may be retained for the periods described in Section 5, after which they are securely deleted. We will action verified deletion requests within the timeframes required by applicable law.

To exercise any other right, please contact us using the details in Section 14.

7. Tracking and Advertising

We use first-party, in-app analytics only, to understand how our Service is used and to improve it. We do not:

• access your device's advertising identifier (IDFA / GAID),
• combine your data with data collected from other companies' apps or websites for advertising,
• share your data with advertising networks or data brokers, or
• engage in cross-app or cross-site tracking.

Because we do not track you in this manner, our app does not present Apple's App Tracking Transparency prompt.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of sensitive data in transit, secure servers and databases, access controls, and regular security assessments. However, no method of transmission over the Internet is fully secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to affect you, we will notify you and the relevant authorities as required by applicable law.

9. Consent and Withdrawal

By using our Services, you consent to the processing described in this Policy. You may withdraw consent at any time - for example, by disabling app permissions in your device settings, unsubscribing from marketing, or deleting your account. Withdrawing consent will not affect processing carried out before withdrawal, and some processing necessary to provide the Service or comply with law may continue.

10. Cookies and Similar Technologies

We use cookies and similar technologies on our website to enable functionality and understand usage. You can control cookies through your browser settings; disabling them may affect certain features.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact our Grievance Officer and we will take steps to delete it.

12. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page and revising the "Last Updated" date. Continued use of our Services after changes take effect constitutes acceptance of the updated Policy.

14. Grievance Officer and Contact Us

In accordance with India's Digital Personal Data Protection Act, 2023, and the Information Technology rules, we have appointed a Grievance Officer to address your questions, concerns, and requests regarding your personal data.

We will acknowledge and respond to grievances within the timeframes required under applicable law.