Privacy Policy
Scope and contact
Memobox Techno Lab Pvt Ltd operates Zomeal’s website, customer app and provider app. For privacy questions contact the Zomeal Grievance Team at support@zomeal.in, +91 6370648872, or Rairangpur, Mayurbhanj, Odisha – 757043, India.
Data we handle
Depending on your use, we handle your name, phone number, delivery address and pincode, account identifiers, meal preferences, subscriptions, order and wallet records, payment references, referrals, reviews, support messages and notification device tokens. Provider records can include business and contact details, service areas, menu and kitchen photos, food licences and settlement information. Website enquiries include the information and consent you submit. Technical logs may include device, network and error information.
Purposes
We use relevant data to authenticate accounts, check serviceability, fulfil meals, process and reconcile payments, manage referrals, send service alerts, resolve complaints and prevent fraud. We use enquiry details for the availability and testing updates requested. Promotional contact choices can be withdrawn without withdrawing a valid refund request.
Who receives data
Authorised Zomeal staff and service partners receive data needed for their roles. Your selected provider and allocated delivery personnel receive the contact, address and order details needed to fulfil delivery. Our infrastructure and authentication services include Supabase and SMS delivery services; Firebase Cloud Messaging handles push delivery and Razorpay processes payments. We may disclose records when lawfully required. We do not sell personal information.
Payment and permissions
Do not send us OTPs, UPI PINs, card PINs or passwords. Payment credentials are entered through the payment provider. Notification permission is optional and can be changed in device settings; disabling it may mean you miss service alerts. Photos or other device permissions are used for features you choose. Entering an address does not require continuous location tracking.
Storage, cookies and security
The website and apps may use local storage or similar technology for sessions and preferences; hosting and service providers process technical requests. Third-party resources such as website fonts can receive network information. Access controls and other safeguards reduce risk but cannot guarantee absolute security. Service providers may process data outside India subject to applicable legal requirements.
Retention and your choices
We retain records only as needed for service, security, disputes and applicable legal obligations. Request access, correction, consent withdrawal or deletion through support using your registered contact. We may reasonably verify identity. Deletion may be limited for payment, tax, fraud or dispute records that must be retained; we will explain any relevant limits. Optional marketing can be stopped separately.
Children, deletion and changes
The service is intended for adult account holders. Contact us if a child’s information was supplied without appropriate authority. See Account Deletion for the request process. We will publish policy updates and communicate material changes where appropriate. This notice does not restrict rights available under applicable data-protection law.