Privacy Policy
Last Updated: 1 April 2026
We take your privacy seriously. This policy explains what personal data we collect, how we use it, and the rights you have over your information under the Digital Personal Data Protection Act, 2023.
Privacy Notice
Standalone Notice — Digital Personal Data Protection Act, 2023
This Privacy Policy is a standalone document as required under the Digital Personal Data Protection Act, 2023 (DPDP Act) and is separate from our Terms & Conditions. By using Dear Hunger's services, you consent to the collection and use of your personal data as described herein.
Data We Collect
Identity, contact, payment (tokenised), dietary preferences, device, and location data
Why We Collect It
Order fulfilment, payment processing, customer support, fraud prevention, and service improvement
Your Rights
Access, correct, erase, and withdraw consent for your personal data at any time
We do not knowingly collect personal data from minors. If a minor has provided data without parental consent, please contact us for prompt deletion.
Data We Collect
We collect only the personal data that is necessary to provide our services to you. Below is a breakdown of the categories of data we collect and the purpose for each.
Identity & Contact Data
Your full name, email address, mobile number, and profile photograph (if provided). This is collected when you register an account or update your profile.
Delivery Address & Location
Your saved delivery addresses including street, building, city, and pin code. Real-time location data may be accessed during active delivery tracking with your explicit permission.
Payment Information
Transaction records, payment method type, and billing details. Full card numbers are never stored on our servers — all card data is tokenised by our PCI-DSS compliant payment gateway partners.
Dietary Preferences & Order History
Your selected meal plan type (vegetarian, non-vegetarian), food preferences, dietary restrictions disclosed by you, and your full order and subscription history.
Device & Technical Data
Device model, operating system, browser type, browser version, and IP address. This data is collected automatically when you access our platform and is used for security, compatibility, and analytics purposes.
Usage & Behavioural Data
Pages visited, features used, search queries, time spent on the platform, and interaction patterns. This helps us improve our services and personalise your experience.
How We Use Your Data
We process your personal data only for specific, lawful purposes. We clearly distinguish between necessary processing and optional processing that requires your explicit consent.
Necessary Purposes
-
Order & Delivery Fulfilment
Processing your order, coordinating delivery, and communicating updates on your meal status
-
Payment Processing
Facilitating secure transactions and maintaining payment records for your account
-
Customer Support
Responding to your queries, complaints, and refund requests
-
Fraud Prevention & Security
Detecting and preventing fraudulent orders, account abuse, and platform misuse
-
Legal Compliance
Meeting obligations under applicable Indian laws including tax, consumer protection, and food safety regulations
Optional Purposes (with consent)
-
Marketing Communications
Sending promotional offers, new menu announcements, and seasonal deals via SMS or email — only if you have opted in
-
Analytics & Personalisation
Analysing your usage patterns to recommend relevant meal plans and improve the platform experience
-
Feedback & Surveys
Requesting your feedback on orders or the platform to improve our service quality
You may withdraw consent for optional processing at any time through your account settings. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
Third-Party Sharing
We do not sell your personal data. We share your data only with trusted third parties as necessary to deliver our services, and only under strict contractual obligations.
Payment Gateway Partners
Your name, contact, billing address, and transaction details are shared with our PCI-DSS compliant payment gateway providers to process payments securely. These providers are prohibited from using your data for any purpose other than payment processing.
Delivery Partners
Your name, delivery address, and contact number are shared with our delivery personnel or third-party delivery partners solely to fulfil your order. Delivery partners are contractually bound not to retain or use this data beyond the scope of delivery.
Cloud & Technology Infrastructure
Our platform is hosted on cloud infrastructure providers. Your data may reside on servers within or outside India. In all cases, our cloud providers operate under strict data processing agreements and are not permitted to access your data beyond infrastructure provision.
Analytics Providers
Anonymised and aggregated usage data may be shared with analytics service providers to help us understand platform performance. No personally identifiable information is shared for analytics purposes without your consent.
Law Enforcement & Regulatory Bodies
We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required by applicable Indian law, a court order, or to protect the rights and safety of our users and staff.
Your Rights Under the DPDP Act, 2023
The Digital Personal Data Protection Act, 2023 grants you the following rights as a Data Principal. You can exercise these rights by contacting us at any time.
Right to Access
Request a summary of the personal data we hold about you and a list of other entities with whom we have shared it. We will respond within 30 days.
Right to Correct
Request correction or completion of any inaccurate or outdated personal data we hold. You can also update most information directly through your account profile.
Right to Erase
Request deletion of your personal data when it is no longer required for the purposes it was collected. We will notify you 48 hours before deletion. Some data may be retained for legal compliance (e.g., tax records).
Right to Withdraw Consent
Withdraw consent for optional data processing (e.g., marketing) as easily as it was given. Withdrawal will not affect the lawfulness of prior processing. You will not be penalised for withdrawing optional consent.
Right to Lodge a Complaint
If you believe your data rights have been violated, you may file a complaint with the Data Protection Board of India (DPBI) through their official grievance mechanism, or contact our management team directly.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Indian law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Order & transaction logs | Minimum 1 year | DPDP Act 2023 minimum requirement |
| Billing & payment records | As per statutory requirements (typically 6–7 years) | Income Tax Act & GST compliance |
| Account & profile data | Until account deletion + 30 days | Grievance resolution period |
| Real-time location data | Up to 72 hours post-delivery | Delivery confirmation only |
| Marketing consent records | Until you opt out | Evidence of consent for marketing |
| Data breach investigation logs | 1 year | DPDP Rules requirement |
Cookies & Tracking
What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They help us provide a seamless experience and remember your preferences across sessions.
Essential Cookies
Required for the platform to function — including authentication (keeping you logged in), session management, and security. These cannot be disabled without affecting platform functionality.
Analytics Cookies
We may use analytics tools (such as Google Analytics) to understand how users interact with our platform. Analytics cookies collect anonymised data on pages visited, time spent, and navigation paths. You may opt out.
No Dark Patterns
In compliance with the DPDP Act 2023, we do not use dark patterns to manipulate cookie consent. Opting out of non-essential cookies is as easy as opting in. Refusal of optional cookies does not affect your ability to use our services.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Encryption in Transit
All data transmitted between your device and our servers is encrypted using HTTPS/TLS protocols.
Payment Tokenisation
Card data is tokenised by our payment gateway partners. We never store or process raw card numbers on our servers.
Access Controls
Access to personal data within our organisation is restricted on a need-to-know basis. All staff with data access receive appropriate data protection training.
Breach Notification
In the event of a personal data breach that is likely to cause risk to your rights, we will notify you and the Data Protection Board of India within the timelines prescribed by the DPDP Act 2023. Breach investigation logs are maintained for 1 year.
No Absolute Security Guarantee
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. You use our platform at your own risk and should take appropriate measures to protect your login credentials.
Policy Changes Notice
- Dear Hunger reserves the right to modify, update, or revise this policy at any time without prior notice.
- Notification of changes via email, SMS, or any other channel is at the sole discretion of the management team and is not guaranteed.
- It is your responsibility to review this page periodically. Continued use of our services constitutes acceptance of the updated policy.
Questions About Your Privacy?
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our management team.
Contact our support team or call us at +91 9689762952
If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India (DPBI) through their official grievance mechanism, as provided under the Digital Personal Data Protection Act, 2023.
We are committed to resolving all privacy-related concerns fairly, transparently, and within reasonable timelines.