Privacy Policy

1. Thuhmahruai

Foodfy ("Company", "keini", "kan", "kan") hian i mimal chanchin thuruk leh himna humhim turin a inpeih reng a ni. He Privacy Policy hian Foodfy platform nena in inbiak hunah i data kan khawlkhawm dan, kan hman dan, kan puan chhuah dan, kan dahkhawm dan leh kan humhalh dan a sawifiah a, chutah chuan foodfy.ai-a kan website, mobile application, API, merchant dashboard, AI services, drone delivery network, leh a kaihhnawih service leh feature zawng zawng (a pum puiin, "Platform") te pawh a tel a ni.

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Foodfy hian ram 250+ ah hna a thawk a. I chunga data humhalhna dan bik hman tur chu i awmna hmun azirin a danglam thei. He Privacy Policy aiin tualchhung danin venhimna nasa zawk a pekna hmunah chuan tualchhung danin a thunun a ni. Supplemental regional provisions te chu Section 16-ah chipchiar takin tarlan a ni.

2. Data Controller a ni

Foodfy hi Platform kaltlangin i personal data process-naah mawhphurtu data controller a ni a, a danglamna a awm loh chuan. Foodfy for Work (Corporate Accounts) tan chuan enrolling organization hian hnathawkte personal data data controller hna a thawk a, Foodfy hian an aiawhin data processor hna a thawk bawk.

Data humhalh chungchanga zawhna nei duh tan kan Data Protection Officer hnenah hetiang hian biak theih a ni:

Email hmanga thawn theih a ni: [email protected]
Postal Address: Foodfy, Data Protection Officer, [email protected] kaltlangin dil theih a ni

3. Thu hriat tur kan khawlkhawm

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 User zawng zawng

Account chungchang hriat tur: A hming kimchang, email address, phone number, pian ni, profile thlalak, leh password encrypted.
Authentication Data a ni: Login credentials, two-factor authentication secret leh recovery code, API token, leh session identifier te a awm bawk.
Device leh Technical Data te a ni: Device chi hrang hrang, operating system leh version, browser chi leh version, screen resolution, device identifier danglam bik, mobile network information, IP address, leh push notification token (Expo tokens) te a awm bawk.
Usage Data: Pages visited, features used, search queries, click patterns, navigation paths, session duration, timestamps, referring URLs, and interaction events.
Hmun Data: IP address atanga lak chhuah hmun tlemte. I remtihna chiang tak, delivery atana GPS awmna dik tak, hnai taka sumdawnna hmuhchhuah, leh hmuna innghat features te nen.
Inbiakpawhna Data: Platform kaltlanga thuchah thawn te, customer support inbiakpawhna te, feedback te, leh survey chhanna te.

3.2 Customer te

Order Data: Thil order, order history, delivery address (building hming, kawngpui, apartment, floor, entry code, leh delivery instruction te pawh tel), order duh dan, ei leh in tur bik mamawh, leh order source (web, app, kiosk, QR, WhatsApp, meal plan) te pawh a tel.
Payment Data: Payment method type, billing address, transaction amounts, and transaction history. Full payment card numbers are processed by our PCI DSS-compliant payment processor (Stripe) and are never stored on Foodfy servers.
Address Bu: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
Duhzawngte: Sumdawnna duh ber, thil saved, ei leh in duh zawng, tawng leh pawisa setting.
Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Sumdawnna lama thawhpui te

Sumdawnna chungchang hriat tur: Sumdawnna dan anga hming, sumdawnna hming, subdomain, vantlang dawr hriat theihna, sumdawnna chi (restaurant, grocery, damdawi dawr, pangpar, retail, supplier, brand), taksa address, phone number, email, leh website URL.
Dan leh Sum leh pai Data: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
Operational Data: Menu items, product catalog, man, inventory level, hnathawh hun, inbuatsaihna hun, delivery zone, leh service configuration te.
Customer nena inzawmna Data: CRM profile-ah hian customer order tam dan, sum hman zawng zawng, RFM (Recency, Frequency, Monetary) score, lifecycle stage, loyalty tier, marketing opt-in status, duhzawng ṭawng, tag, leh note te a tel.
Hnathawktute Data: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
Third-Party Integrations: Google Place ID, Google rating, social media profile (WhatsApp, Facebook), leh integrated services (accounting software, delivery platform) hmanga data inthleng te a ni.
Franchise Data a ni: Franchise brand association, outlet code, hmun hrang hranga configuration, leh brand-level analytics te a ni.

3.4 Delivery lama thawhpui te

Identity finfiahna: Sawrkar-in a pek chhuah identification, driver license, lirthei registration, leh insurance finfiahna.
Real-Time Location: Order tracking, route optimization, leh safety atana hman tur active delivery neih laiin GPS coordinate update thin a ni.
Performance Data: Number of completed orders, rejected orders, delivery times, ratings received, and earnings history.
Drone hmanga thil thawn chhuah Data: Drone hmanga delivery partner tan: drone theihna dinhmun, runner type, delivery statistics, DronePort assignment, leh drone operational logs te.

3.5 Territory-a thawhpui te

Managed Territory hrang hrangte: Assigned territory level (Region, Ram, State, City, Area), territory hriat theihna tur, leh hmun zau zawng.
Performance Metrics hmanga thil tih dan tur: Business onboarding rates, revenue generated, partner satisfaction score, leh territory growth metrics te a ni.
A hman dan tur Data: Territory applicant profile information submitted during the application and onboarding process.

3.6 Corporate Account hmangtute (Hnathawh tur atana Foodfy) .

Organization Data: Company dan anga hming, dan anga entity chi, trade license number, tax number, registered address, billing contact information, leh logo te a ni.
Hnathawktute Data: Hnathawktu hming, email, role (admin/manager/employee), department, cost center, hnathawk reference number, wallet balance, wallet transaction history, leh hnathawh dan te.

3.7 Investor te an ni

Investor Profile a ni: Accreditation dinhmun, investment duh dan, identity verification document, leh inbiakpawhna chanchin te.
Investment Hnathawh tur: Investment interest, deal-a telna, investment sum leh a kaihhnawih lehkha thawn te.

3.8 NutriLife hmangtute

NutriLife collects sensitive health and biometric data. See Section 9 for detailed information.

3.9 Third Party atanga thu hriat tur

Social media platforms when you sign in using social login (Google, Facebook, Apple).
Payment processors and financial institutions for transaction verification and fraud prevention.
Public business directories and government registries for business verification and directory building.
Open Food Facts and other nutritional databases for product nutritional data.
Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
Google Maps and Places API ah hian hmun, mapping leh address data te a awm a.
Website traffic thlirletna leh campaign tehna atana analytics leh advertisement partner te.

4. Processing atana Dan anga hman tur

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
Remtihna: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
Interest dik tak (Legitimate Interest) a ni: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
Dan anga tih tur a ni: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
Vital Interest: Thil danglam bik takah chuan, mi pakhat ngaihvenna pawimawh tak humhim nâna thil tih ngai, ei leh in lama allergy, himna lama thil thleng, emaw, vântlâng hrisêlna lama emergency-a thil thlengte ang chite.

5. I Thu hriatte Kan Hman Dan

We use the personal data we collect for the following purposes:

5.1 Platform kalphung bulpui ber berte

Provide, maintain, operate, and improve the Platform and all its features and services.
Process and fulfill orders, payments, refunds, and deliveries.
User chi hrang hranga user account siam, authenticate leh enkawl.
Real-time order tracking, delivery coordination, leh driver/drone dispatch te siam theih a ni.
Process Business Partner payouts and financial reconciliation.
Foodfy Gold subscription, hlawkna, leh billing te enkawl.
Operate Foodfy for Work corporate wallets, allocations, and expense tracking.

5.2 Inbiakpawhna

Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Mimal nihna leh AI

Personalize your experience through AI-powered search results, business recommendations, and product suggestions.
Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
Power NutriLife features including AI meal photo analysis, nutritional calculation, and personalized dietary guidance.
AI chatbots leh automated customer support te enable rawh.

5.4 Hriselna, himna, leh Dan zawm dan

Bumna, tihduhdahna, phalna nei lova luh theihna, leh dan bawhchhiatna emaw, chhiatna thlen thei thil dang emaw hriatchhuah, chhui leh ven.
Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
Dan anga tih tur awmte, chhiah lak dan tur, leh dan anga thupekte zawm tur.
Kan Terms of Service leh inremna dangte chu tihlawhtling rawh.

5.5 Analytics leh tihchangtlunna

Use pattern hriatthiam nan leh Platform features tihchangtlun nan aggregated leh anonymized analytics neih.
Perform A/B testing and user experience research.
Train and improve AI and machine learning models using anonymized and aggregated data.
Business intelligence report leh market insight siam chhuah.

6. I Thu hriatte Kan Insem Dan

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Platform hmangtu dangte nen

Sumdawnna lama thawhpui te: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
Delivery thawhpui te an ni: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
Customer te tan chuan: Business Partner information (hming, address, ratings, menu, hnathawh hun chhung) chu Platform-ah vantlang hriatah tarlan a ni a, chu chuan discovery leh ordering a ti thei a ni.

6.2 Service Provider-te nen

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

Stripe: Payment processing, subscription billing, and fraud detection.
Cloudflare a ni: Content delivery, DDoS venhimna, leh web application firewall te a awm bawk.
Anthropic leh OpenAI te a ni: Platform AI feature hrang hrangte tan AI leh machine learning model inference a ni. AI provider-te hnena data thawn hi an enterprise data processing terms hnuaia process a ni a, an general model zirtirna atan hman a ni lo.
Deepgram a ni: Speech-to-text processing for voice-enabled features.
Twilio: SMS delivery and voice communication services.
Google: Maps, Places API, analytics, leh advertisement service te pawh a awm bawk.
Meta a ni: Advertisement campaign enkawl dan leh conversion tracking te a ni.
Cloud Infrastructure pe chhuaktute: Server hosting, data storage, and computing services.

6.3 Third-Party Delivery Platform te nen

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 Accounting Integrations te nen

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Dan leh thupek siamna atana hman tur

When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
To enforce our Terms of Service and other agreements.
To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
To detect, prevent, or address fraud, security, or technical issues.

6.6 Sumdawnna lama inthlak danglamna

Merger, acquisition, reorganization, bankruptcy, assets hralh emaw, chutiang chi corporate transaction emaw nena inzawm hian i personal data chu acquiring entity hnenah transfer theih a ni. I personal data chu privacy policy dang hnuaia a awm hmain hriattirna kan pe ang.

6.7 I remtihnain

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Data vawn that dan

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

Account Data active tak tak a awm: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
Order and Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
Payment Records: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
Sumdawnna lama thawhpui Data: Retained for the duration of the business relationship plus the legally required retention period for business records.
NutriLife Health Data: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
Foodfy Gold Subscription Data te chu a hnuaia mi ang hian a ni: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
Corporate Account-a thawktute Data: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
Inbiakpawhna Logs te: Customer support interaction te chu quality assurance leh dispute resolution atan kum 3 chhung vawng reng a ni.
Analytics Data hmanga thil tih a ni: Aggregated leh anonymized analytics data chu mimal hriat theihna a nih loh avangin hun tiam nei lovin a awm thei.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI leh Automated Thutlukna siam

Foodfy hian Platform feature hrang hrangah artificial intelligence leh automated processing a hmang a ni. Heng technology te hian i data an process danah hian langtlang taka awm kan tum a ni.

8.1 AI hian I Data a Process Dan

Personalized Recommendations: AI model te hian i order history, i browsing behavior, i awmna hmun leh i duhzawng te chu an zirchiang a, sumdawnna, thil siam leh offer te an recommend thin. He processing hi legitimate interest atanga siam a ni.
Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
Demand Forecasting tih a ni: Business Partners tan chuan AI hian historical order data, seasonal pattern, local events, leh weather data te chu a zirchiang a, demand a hrilhfiah thin. Hei hian aggregated business data a hmang a ni.
Menu tihchangtlun a ni: AI hian sales data, competitor analysis, leh customer duh dan atanga thlirin pricing siamthat leh menu siamthat a rawt a ni. Thutlukna hnuhnung ber chu Business Partner-in a siam fo thin.
Bumna hriatchhuahna: Automated system te hian transaction pattern, device information leh behavioral signal te chu an zirchiang a, bumna thil awm thei te chu an hmuchhuak thin. Flagged transaction te chu mihring analyst ten an enfiah thei ang.
NutriLife AI: AI hian chaw ei thlalakte chu a zirchiang a, nutritional content a estimate a, i health profile a zirin personalized dietary recommendation a siam bawk. A chipchiar zawkna chu Section 9-ah en rawh.
Automated Marketing hmanga tihchhuah a ni: AI hian customer segmentation leh behavioral data hmangin Business Partner te tan marketing content, email campaign, leh promotional offer te a siam chhuak thin.

8.2 Automated Decision chungchanga I Rights

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

You have the right to obtain human intervention and review of the decision.
You have the right to express your point of view and contest the decision.
You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 AI Data humhalh dan tur

Third-party AI provider (Anthropic, OpenAI) hnena data thawn hi enterprise data processing agreement hnuaiah process a ni. I data hi an general-purpose AI model training nan an hmang lo.
Foodfy-in AI model training a neihnaah hian anonymized leh aggregated data hmangin mimal hmangtute hriat theih a ni lo.
AI outputs hi probabilistic a ni a, suggestion emaw estimate emaw anga tarlan a ni a, definitive determination anga tarlan a ni lo.

9. Hriselna leh Biometric Data (NutriLife) .

NutriLife processes sensitive health-related and biometric data that requires special protection under applicable privacy laws. This section provides detailed information about how we handle this data.

9.1 Hriselna chungchanga Data lakkhawmte category hrang hrang

With your explicit consent, NutriLife may collect and process the following categories of health data:

Physical Measurements: Taksa rih zawng, san zawng, taksa thau percentage, kawr vel, hip circumference, leh body mass index (BMI) te a ni.
Vital Signs: Thisen glucose level, thisen sang chhiar dan, leh heart rate te.
Nunphung Hrilhfiahna: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
Ei leh in chungchang hriat tur: Food diary entry, chaw ei thlalak, calorie leh macronutrient ei zat (protein, carbohydrates, thau, fiber, sugar, sodium), micronutrient ei zat (vitamins A atanga B12, calcium, iron, potassium, leh a dangte), ei leh in chi hrang hrang, leh ei leh in allergy te.
Hriselna chungchang: Pian ni, mipa leh hmeichhia, activity level, hriselna atana tum (weight loss, gain, maintenance), target weight, medical conditions, supplement hman dan, naupai emaw naupai lai emaw.
AI thlirletna Data: Chaw ei thlalak AI hmanga zirchian, rinna score, leh AI-a siam nutritional estimates te.

9.2 Dan anga innghahna leh remtihna

Health leh biometric data hi khawvel pumah GDPR (Article 9) leh a tlukpui dan hnuaiah special category data-ah dah a ni. He data hi i remtihna chiang tak a\angin chauh kan process a, chu chu NutriLife onboarding laiin i pe a ni. I account settings-a NutriLife kha disable-in engtik lai pawhin i remtihna i la thei a, chu chuan ni 30 chhungin i health data chu a tibo vek ang.

9.3 Tum tihkhawtlai

Your NutriLife health data is used strictly for the following purposes:

I basal metabolic rate (BMR), nitin chakna hman zawng zawng (TDEE), leh personalized calorie leh macronutrient target te chhut.
Tracking your food diary entries and nutritional intake over time.
Providing AI-powered dietary suggestions and meal plan recommendations.
Hriselna lama hmasawnna leh i thil tum sawi tawhte thlenna tura hmasawnna lantir.

9.4 Data humhalhna khauh tak

NutriLife health data is encrypted at rest and in transit using AES-256 and TLS 1.3 encryption.
Health data hi general Platform data atanga a hranin dah a ni a, access control dang a awm bawk.
NutriLife health data is NEVER shared with insurance companies, employers, advertisers, or any third party for purposes unrelated to providing the NutriLife service.
Health data hi advertisement target atan emaw, third party hnena hralh emaw atan hman a ni ngai lo.
Foodfy chhunga health data hmuh theihna chu mi pawimawh leh system-te tan chauh tihkhawtlai a ni a, hei hi hriat tur pawimawh tak tak a ni.

10. Foodfy Gold Subscription Data te chu a hnuaia mi ang hian a ni

When you subscribe to Foodfy Gold, we process additional data related to your membership:

Subscription Data: Plan type, subscription status (active, trial, paused, cancelled, expired), start and end dates, trial period dates, and renewal dates.
Payment Data: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
Benefit Hman Dan: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Corporate Account leh Hnathawktute Data

Foodfy for Work (Corporate Accounts) tan chuan data processing mawhphurhna hi insem a ni:

11.1 Data Controller inzawmna

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Data lakkhawm

Hnathawktu hming, email address, leh Corporate Account chhunga a chanvo (admin, manager, hnathawk) te.
Department, cost center, leh hnathawkte reference number chu hnathawhna hmunin a pek angin a ni.
Wallet balance, credit history, spending history, and refund records.
Order history made using the corporate wallet, including items ordered and amounts.

11.3 Hnathawh tur neitute mawhphurhna

Hnathawh tur neitute chuan: (a) Foodfy nena hnathawkte data insem theihna tur dan anga basis neih; (b) Platform kaltlangin data processing chungchang hnathawkte hriattir; (c) employer-in a thunun data nena inzawm employee data rights dilna chhanna; leh (d) hnathawh leh data humhalhna dan hman turte zawm a nih theih nan.

12. Drone hmanga thawn chhuah dan tur Operational Data

When drone delivery services are used, the following additional data is processed:

Route and GPS Data: Drone thlawhna kawng, DronePort hmun kaltlanga relay point, delivery GPS coordinate, leh thlen hun tur ruahman te.
Delivery Partner Data a ni: Drone hmanga delivery partner-te tan: active delivery neih chhunga real-time awmna hmun, delivery statistics, leh operational logs te.
DronePort Data a ni: DronePort hman dan tur metrics, maintenance schedules, leh operational status te a ni.
Customer te hnena thil thawn chhuah Data: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

Drone delivery data hi contract performance dan anga kalpui a ni a, a tulna hmunah chuan delivery operation him leh tha taka vawn theihna tura interest dik tak hmanga kalpui a ni. Delivery Partners te real-time location data chu active delivery neih lai chauhvin an process thin.

13. Data Security chungchang

Foodfy hian i personal data humhalh nan technical leh organizational measures kimchang tak, industry-a hmahruaitu a kalpui a:

13.1 Technical lama venhimna hrang hrang

TLS 1.2+ (Platform endpoint zawng zawnga HTTPS enforced) hmanga transit-a data zawng zawng encryption.
AES-256 encryption hmanga chawlh laiin sensitive data encryption.
Web application firewall (WAF) and DDoS protection powered by Cloudflare.
Content delivery network (CDN) hmangin performance leh security atan edge caching a awm bawk.
PCI DSS-compliant payment processing through Stripe, with no storage of full card numbers on Foodfy servers.
Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
Rate limiting leh abuse detection nei secure token hmanga API authentication.
Regular automated vulnerability scanning and penetration testing.

13.2 Pawl hrang hrang venhimna

Role-based access controls ensuring employees can only access data necessary for their function.
Ram hrang hranga database sharding hmanga multi-tenant data architecture, jurisdiction hrang hrang atanga data awmte chu logically-a thliar hran a nih theih nan.
Third-party service provider zawng zawngte nena data processing inremna siam.
Regular security awareness training for all personnel with access to personal data.
Incident response kalphung leh security team inpe tak a awm bawk.
Data tih tlem dan: thil tum tarlan atana data mamawh chauh kan khawlkhawm thin.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Ram hrang hranga Data Transfer te

Foodfy hian khawvel pum huap infrastructure leh Territory Partner network hmangin ram 250+-ah hna a thawk a ni. I personal data chu i awmna ram ni lo ram dangah transfer leh process theih a ni. International-a personal data kan transfer hian, i data chu humhalh a nih theih nan venhimna \ha tak tak kan kalpui a:

Standard Contractual Clauses (SCCs): EEA/UK atanga thutlukna tling lo ramte hnena transfer tan chuan European Commission-in a pawmpui Standard Contractual Clauses kan hmang thin.
Data Processing chungchanga inremna siam: Kan aiawha mimal data process tu third-party service provider zawng zawngte chu data humhalhna tur, venhimna atana thil tul te, leh ramri kaltlanga transfer venhimna te huam tel data processing agreement kimchang takin kan zawm vek a ni.
Ram hrang hranga Data Sharding: Our multi-tenant architecture uses country-specific database shards, which means operational data is stored and processed within or near the geographic region of the relevant Territory, minimizing cross-border transfers for day-to-day operations.
Adequacy chungchanga thutlukna siam: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. I Thuruk humhalh theihna

I awmna hmun azirin i personal data chungchangah hian dikna hrang hrang i nei a ni. Foodfy hian khawvel puma hmangtu zawng zawngte tan heng dikna chanvote hi chawimawi a tum a ni:

15.1 Khawvel pum huap dikna chanvo

Regardless of your location, all Foodfy users may:

Lut: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
Siamthat a ni: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
Deletion a ni: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
Restriction: Request that we restrict the processing of your personal data in certain circumstances.
Objection: Object to the processing of your personal data for direct marketing purposes. We will comply with all opt-out requests promptly.
Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
Account tihbo a ni: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 I Rights Hman Dan

You may exercise your rights by:

Self-service data management, duhthlanna thlak danglam leh account tihbo theihna tur i account settings access.
Kan Data Protection Officer hnenah [email protected] ah i dilna nen email in thawn rawh.
Privacy chungchang zawhna tlangpui zawh duh tan [email protected] ah email thawn theih a ni.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Regional Privacy Rights

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Europe ram sum leh pai dinhmun leh United Kingdom (GDPR / UK GDPR) .

EEA emaw UK-a awm i nih chuan General Data Protection Regulation hnuaiah hian a hnuaia dikna dangte hi i nei a ni:

Data Portability a ni: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Automated Thutlukna siamna: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
Data humhalh hna thawktu a ni: Our DPO can be reached at [email protected] for any GDPR-related inquiries.

16.2 California, United States (CCPA / CPRA) atanga lo chhuak a ni.

California-a cheng i nih chuan California Consumer Privacy Act (California Privacy Rights Act-in a siam danglam) hnuaiah a hnuaia diknate hi i nei a ni:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: Foodfy hian i mimal chanchin a hralh lo. I remtihna tel lo chuan cross-context behavioral advertisement atan mimal chanchin kan share lo.
Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
Inthliarna awm lo: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Thla 12 kalta chhung khan CCPA/CPRA-in a sawi angin mimal chanchin kan hralh lo.

16.3 Brazil (LGPD) a ni.

Brazil rama awm i nih chuan Lei Geral de Protecao de Dados (LGPD) hnuaiah dikna i nei a, chungte chu: processing tihchian, access, correction, anonymization, portability, remtihna nena processed data deletion, sharing chungchanga information, leh Autoridade Nacional de Protecao de Dados (ANPD) hnena petition theihna rights i nei a ni.

16.4 Asia-Pacific (PDPA leh a tlukpui Dan) .

Personal Data Protection Acts emaw, a tlukpui dan emaw (Singapore, Thailand, leh Asia-Pacific ram dangte pawh huamin) awmna hmuna awm i nih chuan, i personal data chu tualchhung dan hman angin i hman theihna tur, siam\hat, tihbo, khap, leh phurh theihna tur dikna i nei a ni. I data chu PDPA thil phut awmte zawm chungin kan process a, a tulna hmuna remtihna lak leh data processing hnathawh dan chiang taka hriattirna pek te pawh a tel.

16.5 Middle East leh Africa hmar lam

UAE, Saudi Arabia, leh MENA jurisdiction dang a hmangtute tan chuan data humhalhna dan hman tur kan zawm a, chung zingah chuan UAE Federal Decree-Law on Personal Data Protection, Saudi Arabia Personal Data Protection Law, leh a tlukpui regional framework te pawh a tel a ni. Hei hian a tulna hmunah data localization mamawhna a huam tel bawk.

16.6 Thuneihna dangte

Foodfy hian kan hnathawhna hmun zawng zawngah data humhalhna dan zawm turin kan inpeih reng a ni. I jurisdiction-in a chunga tarlan loh data humhalhna tur thil chiang tak a neih chuan, i tualchhung dan hnuaia i dikna chanvo kan humhalh dan tur hriat duh chuan [email protected] ah zawhfiah theih a ni.

17. Data tihchhiat hriattirna

I dikna leh zalenna tichhe thei tur personal data bawhchhiatna a awm chuan Foodfy chuan:

Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and equivalent provisions in other jurisdictions.
Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34 and equivalent provisions.
Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
Kan internal breach register angin personal data bawhchhiatna zawng zawng, thil dik tak, nghawng, leh siamthatna tur hmalakna te pawh tiamin, document vek rawh.

I data tihchhiat a nih i rin chuan [email protected] ah zawhfiah nghal rawh.

18. Naupang leh Kum tling lo

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

Nu leh pa emaw, enkawltu emaw remtihna tel lova naupang kum bithliah hnuai lam atanga kan hriat lohvin mimal data kan khawlkhawm tih kan hriat chuan, chu thu chu kan system atanga paih chhuah tumin hma kan la nghal ang. Naupang hnen atanga thu kan lakkhawm nia i rin chuan [email protected] ah min rawn biak nghal thei ang.

19. Third-Party Link leh Service te

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. He Privacy Policy-a inthlak danglamna

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

We will update the "Last updated" date at the top of this page.
We will provide prominent notice on the Platform.
I data kan process dan nasa taka nghawng thei material changes te tan chuan, inthlak danglamna a hman hma ni 30 tal email hmangin kan hriattir ang che.
Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Min rawn biak theih reng e

He Privacy Policy, i personal data, emaw, kan data humhalh dan chungchangah zawhna, ngaihtuahna, emaw dilna i neih chuan a hnuaia channel hmang hian min rawn biak theih reng e:

Data humhalh hna thawktu a ni: [email protected]
Privacy Inquiries: [email protected]
Security Issues: [email protected]
General Support: [email protected]
Website ah a awm: foodfy.ai

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.