Privacy Policy
This Privacy Policy describes how Fonsaw Technologies Private Limited (“Fonsaw,” “we,” “us”) processes personal data when you use the MyPeki app, websites, and related services (the “Services”). It covers Buyers, sellers (home chefs, restaurants, health stores including mills and organic shops, and fresh and frozen shops), and people who apply as delivery partners. Fonsaw is the Data Fiduciary for the personal data described here. Last updated: 4 October 2026. Version 2026-10. This Policy is separate from the Terms of Service. Where we need consent for a specific use, we ask for it in the app, separately from this Policy.
1. Data fiduciary and complaints
Data Fiduciary: Fonsaw Technologies Private Limited (MyPeki)
GSTIN (as used on MyPeki tax invoices): 29AADCF5297Q1ZO
Registered address:
7th Floor Kirloskar Tech Park, Godrej Woodsman Estate, Hebbal Kempapura,
Bengaluru, Karnataka 560024, India
Website: mypeki.com ·
fonsaw.com
Grievance Officer (personal data) — a person resident in India appointed by Fonsaw.
Email: care@mypeki.com
(subject: Privacy Request or Grievance)
Phone: +91 97455 50666
Hours: Monday–Friday, 10:00 AM – 6:00 PM IST (excluding public holidays)
We acknowledge personal-data grievances and aim to resolve them within the period required by the Digital Personal Data Protection Act, 2023 and its rules, and in any case within 90 days unless the law requires a shorter period.
2. Scope
This Policy applies to personal data we process for the Services. It does not govern a third party’s own site or checkout (for example Cashfree’s payment page). Those have their own policies.
3. Personal data we collect
| Category | Examples | Purpose |
|---|---|---|
| Identity and contact | Mobile number, name, optional email, user ID | Account, login, support |
| Profile | Photo, bio, role, preferences, optional date of birth or gender | The profile you choose to show, and seller or buyer features |
| Location and address | Building, unit, delivery address, and precise or coarse location if you allow it | Showing sellers who can deliver to you, and completing delivery |
| Orders and payments | Items, prices, status, delivery notes; payment ids, status, and amounts. Not your full card or UPI PIN | Checkout, fulfilment, refunds, invoices |
| Seller records | FSSAI details, GSTIN, PAN, shop or trade documents, kitchen details, bank account for payouts | Onboarding, checks, tax, settlements, details we must show Buyers |
| Delivery-partner records | Identity document (Voter ID, driving licence, passport, or Aadhaar if you choose to give it), PAN, selfie, vehicle RC and insurance where relevant, bank account | Application, fraud checks, and payouts. Aadhaar is optional. Another official photo identity is enough |
| Calls | Masked call metadata between a Buyer, seller, or delivery partner where the app places a call. We do not need your personal phone number to be published on the listing | Delivery and order coordination, and safety disputes |
| Communications | Messages, reviews, support tickets, food requests and offers | Running the Services, safety, and disputes |
| Technical | Device, operating system, app version, logs, crash reports, push tokens, IP-derived signals | Security, reliability, and service messages |
| Consent records | Which Terms and Privacy version you accepted, and when | Proof of notice, and enforcement |
4. How we collect data
- From you — registration, profile, orders, documents you upload, support.
- Automatically — technical logs, crash reports, and notification setup when you use the app.
- From providers — payment status from Cashfree; authentication, database, and hosting through Google Firebase / Google Cloud; SMS delivery reports where we send an OTP; call metadata where a masked call is placed.
5. Why we are allowed to process personal data
Under the Digital Personal Data Protection Act, 2023, we process personal data on one or more of these grounds:
- You provided it for that purpose — for example your phone number to create an account, your address to deliver an order, or your bank account to pay you. We use it for that purpose and for what is reasonably connected to it, such as a refund, a payout, fraud prevention on that order, or support for that order.
- Consent — where we ask for it, including optional marketing, precise location, camera or photo access, and non-essential analytics. Consent is a specific action. It is not buried in these Terms.
- A legal duty — tax, food-safety, a court order, or a lawful request from an authority.
You may withdraw consent with comparable ease in Settings where the control exists, by turning the permission off on your device, or by emailing care@mypeki.com. Withdrawal does not undo processing that was already lawful. Some features will not work without the data they need, such as a delivery address for an order.
6. Device permissions
- Camera and photos: profile, dish, and document images you choose to upload.
- Location: finding sellers near you and checking delivery reach, only if you allow it. You can type or select an address instead where the app offers that.
- Notifications: order updates, according to your settings.
7. Who we share data with
We do not sell your personal data. We share it with:
- The seller or delivery partner for that order — the details they need to prepare, pack, or deliver. They may use them only for that order, and must not keep your number for their own marketing. See the Seller Terms and Delivery Partner Terms.
- Other users — the limited profile and listing information the app shows.
- Service providers, under contracts that require them to process data for us:
| Provider | Role |
|---|---|
| Google Firebase / Google Cloud | Login, database, hosting, Cloud Functions, push messages, crash reports |
| Cashfree Payments | Payments. We receive transaction details, not your full card or UPI credentials |
| SMS providers | OTP and service SMS |
| Call provider | Masked calls between people on an order, where that feature is on. We receive call metadata for the order, not a public listing of your personal number |
- Authorities — when the law requires it, or to protect safety and rights.
- A successor — if the business is transferred, with notice where the law requires it.
8. Transfers outside India
Our providers may process data outside India. The Digital Personal Data Protection Act allows a transfer except to a country the Central Government restricts. We do not transfer personal data to a restricted country. If a provider stores data abroad, we still remain responsible to you for that processing.
9. Retention
- Account profile: while the account is open, then up to 3 years after closure unless a longer period is required.
- Orders, invoices, and seller tax records: up to 8 years.
- Payment records: as payment and tax law require, typically up to 8 years.
- Support and grievance records: up to 3 years after they are closed.
- Delivery-partner identity documents: while the application or account is active, then up to 3 years, unless a payout or dispute needs longer.
- Technical logs: typically 90 days to 12 months, unless we need them for a security incident.
- Consent logs: for the life of the account plus 3 years.
10. Security and breaches
We use access controls, encryption in transit where the service supports it, and restricted access to identity documents and bank details. No system is perfectly secure.
If a personal-data breach is likely to affect your rights, we will tell you and the Data Protection Board of India as the law requires, and we will describe what we are doing about it.
11. Your rights
Subject to the Digital Personal Data Protection Act, 2023, you may:
- ask for a summary of the personal data we process about you;
- correct or update inaccurate data, including in profile settings;
- ask for erasure when we no longer need the data or you withdraw consent (see Delete account). Tax and order records that the law tells us to keep are not erased on request;
- use the Grievance Officer;
- nominate another person to exercise your rights if you die or become unable to do so (email us to register a nominee);
- withdraw consent for processing that is based on consent; and
- complain to the Data Protection Board of India if we do not resolve your grievance.
Email care@mypeki.com with Privacy Request in the subject, or use the account tools in the app. We may need to confirm it is you.
12. Children
MyPeki is not for anyone under 18. We do not knowingly collect personal data from a child. If you believe we have, contact us and we will delete it.
13. Languages and changes
This Policy is in English. If a Hindi or Kannada version is shown in the app and the two differ, the English version on this page prevails unless the law says otherwise.
We may update this Policy. We will change the date and version on this page. Where the law requires it, we will also tell you in the app or by email before we rely on the new version.
14. Contact
Privacy and grievances: care@mypeki.com ·
+91 97455 50666 · Support
Delete account: Delete account
Fonsaw: fonsaw.com