1. Data fiduciary and Grievance Officer

Data Fiduciary: Fonsaw Technologies Private Limited (MyPeki)
Registered address:
7th Floor Kirloskar Tech Park, Godrej Woodsman Estate, Hebbal Kempapura,
Bengaluru, Karnataka 560024, India
Website: mypeki.com · fonsaw.com

Grievance Officer (personal data):
Designated Grievance Officer · Grievance Officer, Fonsaw Technologies Private Limited
Email: care@mypeki.com (subject: Privacy Request or Grievance)
Phone: +91 97455 50666
Hours: Monday–Friday, 10:00 AM – 6:00 PM IST (excluding public holidays)

We acknowledge personal-data grievances promptly and aim to resolve them within 90 days under our grievance redressal system, unless applicable law permits or requires a different period.

2. Scope

This Policy applies to personal data we process in connection with the Services. It does not govern third-party websites, apps, or payment pages operated by others (for example Cashfree’s checkout flows), which are governed by their own policies.

3. Personal data we collect

Depending on how you use MyPeki, we may process the following categories:

4. How we collect data

• From you — registration, profile, orders, uploads, support requests.
• Automatically — when you use the app (technical logs, diagnostics, notification setup).
• From service providers — payment status from Cashfree; authentication and hosting through Google Firebase / Google Cloud.

5. Legal bases and consent

We process personal data on one or more of the following grounds, as applicable:

• Performance of a contract — to provide accounts, orders, payouts, and support.
• Consent — where required (for example optional marketing, certain permissions, or non-essential analytics where applicable).
• Legitimate interests — fraud prevention, security, and service improvement, balanced against your rights.
• Legal obligation — tax, food-safety, court orders, and regulatory requests.

When we rely on consent, you may withdraw consent at any time with comparable ease through Settings in the app (where available), by disabling permissions on your device, or by emailing care@mypeki.com. Withdrawal does not affect prior lawful processing. Some features may not work without necessary data.

6. Sensitive permissions (Android / iOS)

• Camera and photos: profile and dish images.
• Location: apartment search, delivery reach, and related features when you allow it.
• Notifications: order updates and service messages according to your preferences.

7. How we share personal data

We do not sell your personal data. We may share data with:

• Service providers (data processors) — under contracts requiring appropriate safeguards:

• Other users — where needed for fulfilment (for example Cook sees order details; limited profile shown in app).
• Authorities — when required by law or to protect safety and rights.
• Successors — merger, acquisition, or asset sale, subject to safeguards and notice where required.

8. International transfers

Our providers may process data in countries other than India. Where required, we implement appropriate safeguards (such as contractual protections) and comply with applicable transfer rules under Indian law.

9. Retention

We retain personal data only as long as necessary for the purposes below, then delete or anonymise where feasible:

• Account profile: while your account is active, then up to 3 years after closure for disputes and legal compliance unless a longer period is required.
• Orders and invoices: up to 8 years for tax and regulatory purposes.
• Payment records: as required by applicable payment and tax law (typically up to 8 years).
• Support and grievance records: up to 3 years after resolution.
• Technical logs and security signals: typically 90 days to 12 months, unless needed for incident investigation.
• Consent and policy audit logs: for the life of the account plus 3 years.

10. Security and personal data breach

We implement technical and organisational measures designed to protect personal data, including access controls, encryption in transit where supported, and secure development practices. No system is completely secure.

If a personal data breach likely to affect your rights is confirmed, we will notify you and the Data Protection Board of India (or other authority) as required under applicable law, and describe remedial steps we take.

11. Your rights (Data Principal)

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may have the right to:

• access information about personal data we process about you;
• correction and updating of inaccurate or incomplete data (also via profile settings where available);
• erasure when retention is no longer necessary or consent is withdrawn (see Delete account);
• grievance redressal through our Grievance Officer;
• nominate another individual to exercise your rights in the event of your death or incapacity (contact us to register a nominee);
• withdraw consent for consent-based processing; and
• approach the Data Protection Board of India if your grievance is not resolved satisfactorily.

To exercise rights, email care@mypeki.com with Privacy Request in the subject or use in-app account tools. We may verify your identity before acting.

12. Children

MyPeki is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have collected such data, contact us and we will take appropriate steps to delete it.

13. Region-specific notices

India (DPDPA 2023 and DPDP Rules, 2025): This Policy is designed to meet transparency and grievance requirements under Indian data-protection law. Consent notices in the app supplement this Policy for specific processing. You may lodge a complaint with the Data Protection Board of India through the official digital channels notified by the Government of India when available.

EEA / UK / Switzerland (if applicable): You may have additional GDPR-based rights including data portability and objection. The controller is Fonsaw Technologies Private Limited.

California and similar U.S. states: We do not sell or share personal information for cross-context behavioural advertising as defined under the CCPA/CPRA in the typical sense.

14. Languages

This Policy is published in English. Hindi and Kannada summaries or translations may be made available in the app where required for your market. If there is a conflict, the English version on this page prevails unless law requires otherwise.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version here and update the “Last updated” date. Material changes may be communicated in the app or by email where required. Continued use after the effective date constitutes acceptance where permitted by law.

16. Contact

Privacy & grievance: care@mypeki.com · +91 97455 50666 · Support
Delete account: Delete account instructions
Fonsaw: fonsaw.com