Privacy Policy

This Privacy Policy explains how Hot Bake ("Hot Bake", "we", "us", or "our") collects, uses, and protects information when you use the Hot Bake mobile application (the "App") to order food for delivery. Hot Bake is a restaurant based in India, and this policy applies to customers of the App.

1. Information We Collect

We collect the following information to operate the App and fulfil your orders:

• Account information: your phone number, verified via a one-time password (OTP) through Firebase Authentication, and the name you provide when placing an order.
• Location information: your precise device location (GPS) and/or a delivery address you select or enter, used to confirm you are within our delivery area and to route your order to the correct address.
• Order information: the items you order, order value, delivery address, and order status history.
• Payment information: your chosen payment method (Cash on Delivery or online payment) and, for online payments, the payment status, billed order amount (which includes item subtotal, applicable taxes, delivery charges, and the 2% online payment convenience fee), and a payment/order reference ID. If you pay online, your card, UPI, net-banking, or wallet details are entered directly into our payment processor's own secure checkout and are never collected, seen, or stored by Hot Bake or our servers.
• Device and notification information: a push-notification token (via Firebase Cloud Messaging) used to send you updates about your order status.
• Locally stored preferences: your phone number, login state, and current cart contents may be stored on your device to make future logins faster and preserve your cart between sessions. This information stays on your device and is not transmitted to us until you place an order.
• Photos/camera (restaurant staff only): if you are a Hot Bake staff member using the admin features of the App, photos you capture or select are used solely to create menu item images. This does not apply to customer accounts.

2. How We Use Your Information

• To verify your identity and secure your account (OTP login).
• To process, prepare, and deliver your food orders.
• To confirm your delivery address is within our serviceable delivery radius.
• To process and verify payment for your order, whether paid online or by Cash on Delivery.
• To send you notifications about your order status (e.g. accepted, out for delivery, delivered).
• To maintain a history of your past orders.
• To improve and maintain the App.

3. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• Service providers: we use Google Firebase (Authentication, Firestore Database, Cloud Messaging, Cloud Storage, and Cloud Functions) to store and process data on our behalf. Your device's operating system may also perform location lookups (geocoding) using its built-in map services to convert coordinates into a readable address.
• Payment processing: if you pay online, your name, contact number, order amount (including item subtotal, taxes, delivery fee, and the 2% online payment convenience fee), and order reference are shared with Razorpay Software Private Limited ("Razorpay"), a licensed payment aggregator, solely to process your payment. Any card, UPI, net-banking, or wallet details you enter go directly to Razorpay and are governed by Razorpay's own privacy policy — Hot Bake never receives or stores these payment credentials. No payment information is shared for Cash on Delivery orders.
• Our delivery staff: your name, phone number, and delivery address are visible to Hot Bake staff involved in preparing and delivering your order.
• Legal requirements: if required to comply with applicable law, regulation, or legal process.

4. Data Storage & Security

Your information is stored on Google Firebase infrastructure with industry-standard security controls. While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure.

5. Your Rights & Choices

• You may disable location or notification permissions at any time through your device settings, though this may limit App functionality (e.g. delivery-area verification or order updates).
• You may request access to, correction of, or deletion of your personal information by contacting us using the details below.

6. Account & Data Deletion

You have the right to request the deletion of your Hot Bake account and all associated personal data at any time.

• In-App Deletion: You can delete your account directly inside the App by opening Profile → scrolling down to Delete Account → confirming deletion. This permanently removes your user profile, saved delivery addresses, and authentication credentials.
• Online / Email Request: Alternatively, you may submit a deletion request by emailing us at tharique.cp@gmail.com with your registered phone number. We will verify and process your request within 48 hours.

7. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.