Privacy Policy
Last updated 7 September 2026
This policy explains what McKitchens (in full, "My Cloud Kitchens – by our HomeChefs"; "the Platform", "we") collects, why, and what your choices are. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules under it. The data fiduciary is Stripe Systems Pvt. Ltd., India, reachable at support@mckitchens.in.
1. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Name, email address, profile photo, Google account ID | Google sign-in | To create and secure your account |
| Mobile number (WhatsApp) | You, on your profile | Delivery coordination and order updates |
| Delivery address, and your location if you choose to share it | You, on your profile | Delivery within the service area; the location tells us which kitchens can deliver to you |
| Food preference, household type, owner/tenant, members at home, allergies, preferred slot | You, optional except preference | To filter menus and help HomeChefs cook safely; household details help us plan menus and are never shown to HomeChefs |
| Orders, payments (method, UPI transaction reference), refunds | Your activity | To fulfil orders, verify payment and keep accounts |
| Grievances and messages | You | To resolve issues |
| Push notification subscription (device token) | Your browser, if you enable notifications | To send order and grievance updates |
| Session cookie, basic server logs (IP address, browser, pages requested) | Automatic | Security, fraud prevention and debugging |
We do not collect payment card or bank details or Google contacts, and we do not use advertising trackers. Your location is stored only if you share it from the profile page, and only to match you with nearby kitchens.
Google sign-in data
Signing in with Google gives us only your name, email address, profile picture and Google account identifier. We request no other Google permissions: we cannot see your Gmail, Contacts, Calendar, Drive or anything else in your Google account. We use these details solely to create your account, show your name to the HomeChef cooking your order, and send you service messages about your orders. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We never sell this information, use it for advertising, or share it with anyone except as described in section 3. You can revoke our access at any time from your Google Account permissions page, and ask us to delete your account by emailing support@mckitchens.in.
2. How we use it
To run the marketplace: show menus, place and track orders, collect and verify payments, deliver food, handle grievances and refunds, settle with HomeChefs, notify you of order events, prevent fraud and abuse, and improve the service using aggregate statistics.
3. Who sees your data
- HomeChefs cooking your order see your name, delivery address, your order and instructions, and any dietary notes. Your mobile number is shown to a HomeChef only after they accept your order, so they can coordinate delivery. HomeChefs do not see your email, household details or other orders.
- Our administrators see your profile and order history to run the service.
- Service providers: Cloudflare (hosting, database and file storage), Google (sign-in), and browser push services (Google, Apple or Mozilla, for notifications you enable). They process data under their own terms and do not use it for their own purposes.
- Legal: we disclose data when required by law or to protect users, HomeChefs or the Platform.
We never sell or rent personal data.
4. HomeChef privacy
HomeChefs operate under an alias. Their identity, phone and address are held in a separate, access-controlled record that only administrators can view, and every view is logged. Customers are contractually barred from trying to identify HomeChefs. If you are a HomeChef, we collect your name, phone, address, hygiene-check and agreement details for verification and settlement.
5. Retention
- Profile: until you delete your account, or after 24 months of inactivity.
- Orders, payments and refunds: 8 years, as required for accounts and tax.
- Grievances: 3 years.
- Server logs: 30 days. Push subscriptions: until you turn notifications off or they expire.
When you delete your account we anonymise your name, contact and address on past orders; the order records themselves are kept for accounts.
6. Your rights
You can view and correct your details on Profile at any time. You can ask us to provide a copy of your data, delete your account, or withdraw consent for notifications, by emailing support@mckitchens.in or messaging +91 92667 75254 on WhatsApp. We respond within 30 days. You may also nominate someone to exercise these rights for you as the law allows, and you may complain to the Data Protection Board of India if you are not satisfied with our response.
7. Cookies and storage
We use one essential session cookie to keep you signed in and browser storage for your cart and chosen area. No third-party advertising or analytics cookies are set.
8. Security
Data is encrypted in transit (HTTPS) and at rest with our hosting provider. Access to identity data is restricted by role and audited. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.
9. Children
The Platform is for adults. We do not knowingly collect data from anyone under 18.
10. Changes
We will post changes here with a new date and announce material changes on the Platform.
11. Grievance Officer
Stripe Systems Support Team, Stripe Systems Pvt. Ltd. · support@mckitchens.in · WhatsApp +91 92667 75254. Grievances are acknowledged within 24 hours and resolved within 15 days.