Buuttii values the privacy of its users and is committed to protecting personal information collected through our mobile application, website, APIs, WhatsApp communication channels, administrative systems, and related services (collectively referred to as the “Platform”). This Privacy Policy explains how information is collected, used, stored, processed, disclosed, and protected when users access or use our services.
By accessing or using the Platform, users acknowledge that they have read, understood, and agreed to the practices described in this Privacy Policy.
Information We Collect
In order to provide meal delivery, subscription management, customer support, payment processing, and operational services, we may collect certain personal and technical information from users. The information collected may include a user’s name, mobile number, email address, delivery address, account credentials, order history, subscription details, dietary preferences, feedback, communication history, and transaction-related information.
We may also collect technical and device-related information automatically, including IP address, browser type, operating system, device identifiers, application version, session activity, crash reports, usage analytics, and network-related information. This information is collected to improve platform performance, enhance security, analyze usage patterns, and maintain operational stability.
Where required for delivery and service optimization, we may collect location information to identify delivery addresses, improve delivery accuracy, assign nearby delivery personnel, and prevent fraudulent activities. Users may disable location permissions through device settings; however, certain services or features may not function properly as a result.
How We Use Information
The information collected through the Platform is used for legitimate business and operational purposes. This includes creating and managing user accounts, processing orders and subscriptions, delivering meals, processing payments and refunds, providing customer support, sending notifications, improving service quality, monitoring platform security, detecting fraudulent activity, maintaining operational records, and complying with applicable legal obligations.
We may also use aggregated or anonymized data for analytics, business intelligence, service improvement, research, and operational optimization.
Payments and Financial Information
Payments made through the Platform may be processed using third-party payment gateways, UPI providers, banks, or financial service providers. While transaction-related information such as payment status, billing references, subscription history, and refund details may be stored for operational and accounting purposes, sensitive financial information such as complete debit card, credit card, or banking credentials is generally processed directly by authorized payment service providers and is not intentionally stored on our servers unless required for compliance or secure transaction processing.
Communication Services
The Platform may use communication services such as WhatsApp Business APIs, SMS gateways, email systems, and push notifications to communicate with users. By using the Platform, users consent to receiving communications related to account authentication, OTP verification, order confirmations, delivery updates, subscription reminders, support interactions, policy updates, and other service-related notifications.
Promotional or marketing communication may be sent where permitted by law, and users may opt out of such communication where applicable.
Disclosure of Information
We do not sell or rent personal information to third parties. However, information may be shared with trusted service providers, contractors, operational partners, and affiliated entities where necessary for service delivery, payment processing, analytics, infrastructure hosting, authentication, messaging services, customer support, or delivery operations.
Limited user information necessary for successful order fulfillment, such as customer name, delivery address, contact number, and order details, may be shared with authorized delivery personnel.
Information may also be disclosed where required by law, regulation, legal process, court order, governmental request, fraud investigation, or where disclosure is reasonably necessary to protect the rights, property, security, or operations of the Company, users, or the public.
In the event of a merger, acquisition, restructuring, investment, asset sale, or business transfer, user information may form part of the transferred assets subject to applicable legal obligations.
Data Security
We implement commercially reasonable technical, administrative, and organizational measures to protect personal information against unauthorized access, misuse, loss, disclosure, alteration, or destruction. Such measures may include encrypted communication protocols, access control systems, authentication mechanisms, password hashing, infrastructure monitoring, secure database management, logging systems, and security auditing practices.
Despite reasonable safeguards, no electronic system or internet-based service can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and for securing access to their devices.
Cookies and Tracking Technologies
The Platform may use cookies, local storage, analytics tools, and similar tracking technologies to maintain user sessions, remember preferences, analyze traffic patterns, improve user experience, and optimize platform performance. Users may configure browser settings to refuse or disable cookies; however, certain features or functionalities of the Platform may become unavailable as a result.
Data Retention
Personal information is retained only for as long as necessary to fulfill operational purposes, comply with legal obligations, resolve disputes, enforce agreements, maintain accounting and financial records, prevent fraud, and protect platform integrity. Certain information may continue to be retained even after account deletion where required by law, regulation, tax obligations, or security purposes.
User Rights
Subject to applicable laws, users may request access to their personal information, request correction of inaccurate data, request deletion of their account, or withdraw certain permissions previously granted. Requests may require identity verification and may be subject to legal or operational limitations.
Third-Party Services
The Platform may integrate with third-party services including payment gateways, cloud infrastructure providers, analytics platforms, geolocation services, notification systems, and WhatsApp Business services. The Company is not responsible for the privacy practices, content, or operations of external third-party services, and users are encouraged to review the policies of such providers independently.
Children's Privacy
Because Buuttii provides meal subscription services for school students, we process information regarding children (such as names, school details, and grades) only as provided and authorized by their parents, legal guardians, or educational institutions. We do not knowingly collect personal information directly from children under the age of 13. Parents or guardians can access, review, modify, or request deletion of their child's profile information by contacting us directly.
Changes to this Privacy Policy
We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect operational, legal, regulatory, or technological changes. Updated versions will become effective upon publication on the Platform. Continued use of the Platform after such changes constitutes acceptance of the revised Privacy Policy.