Privacy Policy, amealio

This Privacy Policy describes how amealio collects, uses, shares and protects your personal data when you use our website, mobile applications, WhatsApp channel and merchant tools. It is issued in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Who we are

amealio is the data fiduciary for the personal data collected through the amealio consumer and merchant products in India. You can reach us at hello@amealio.com and our Grievance and Data Protection contact at grievance@amealio.com.

2. Personal data we collect

Identity and contact: name, mobile number, email, WhatsApp identifier and profile photo.
Preferences: dietary, cuisine, allergy, celebration and lifestyle preferences.
Transactions: orders, reservations, celebration bookings, invoices and refunds.
Payments: tokenized payment identifiers processed through our RBI regulated payment partner. We do not store full card numbers.
Device and usage: IP address, device model, operating system, app version, cookies, pages viewed and interactions.
Location: approximate location for discovery and precise location, only with your consent, for delivery and reservations.
Media: photos and videos you capture or upload through Selfie Wall, Smart Mirror and reviews.
Merchant data: restaurant profile, menu, inventory, staff and order data required for the service.

3. How we use personal data

To create and secure your account and provide 1 click WhatsApp login.
To operate discovery, reservations, ordering, delivery, catering, celebrations and loyalty features.
To personalize menus, recommendations and celebration ideas using your Taste Profile.
To process payments, refunds and issue GST invoices.
To send transactional and, with consent, promotional communications.
To prevent fraud, ensure safety, enforce our Terms and comply with legal obligations.
To improve our services, train and evaluate models on de identified or aggregated data.

4. Legal grounds under the DPDP Act

We process personal data on the basis of your consent, or on the legitimate uses permitted by the DPDP Act such as performance of a service you requested, compliance with law and safety of persons and property. Where consent is required, we obtain it through clear and specific notices.

Partner restaurants, only as needed to deliver your reservation, order or celebration.
Logistics providers on the ONDC network for delivery fulfilment.
Payment processors and banks for processing payments, refunds and chargebacks.
Cloud, analytics and communication providers acting as data processors under contract.
Government authorities where required by law or by a valid legal request.
Successors in the event of a merger, acquisition or reorganization, subject to equivalent protections.

6. Cross border transfers

We may transfer personal data outside India to countries permitted by the Government of India under the DPDP Act. Where we do so, we put in place appropriate safeguards to protect your data.

7. Data retention

We retain personal data for as long as required to provide the service, comply with legal, tax and accounting obligations and resolve disputes. When retention is no longer required, we delete or anonymize the data.

8. Your rights

Subject to applicable law, you have the right to:

Access a summary of personal data processed about you.
Correct inaccurate or incomplete data and update your preferences.
Erase personal data that is no longer required, subject to legal retention.
Withdraw consent for processing that relies on consent, without affecting prior lawful processing.
Nominate another individual to exercise your rights in the event of your death or incapacity.
Register a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.

To exercise these rights, write to grievance@amealio.com.

9. Children

amealio is intended for users 18 years and above. We do not knowingly process personal data of a child except with verifiable consent of a parent or lawful guardian as required by the DPDP Act.

10. Security

We follow reasonable security practices aligned with ISO 27001 principles, including encryption in transit and at rest, role based access, audit logs, secure development and periodic reviews. No system is fully secure and you are responsible for the confidentiality of your credentials.

11. Cookies and analytics

We use cookies and similar technologies for authentication, preferences and analytics. Where required, we obtain your consent for non essential cookies. You can manage cookies through your browser settings.

12. Grievance Officer

Grievance Officer, amealio
Email: grievance@amealio.com
WhatsApp: +91 85755 09999
Response acknowledgement within 48 hours and resolution within 30 days of a valid complaint, in line with the Information Technology Rules, 2011 and the Consumer Protection (E Commerce) Rules, 2020.

13. Changes to this Policy

We will notify material changes in the app or by email at least 15 days before they take effect. Continued use of amealio after the effective date constitutes acceptance of the updated Policy.

Privacy Policy