Privacy Policy

Information we collect

• Account information: your name, email address, account identifier, and profile information supplied through Firebase Authentication.
• Order information: restaurants, items, quantities, prices, fulfilment preference, delivery instructions, order status, and transaction references.
• Location information: when you choose restaurant delivery, we collect the exact pin you confirm, whether it came from GPS or the map, any available GPS accuracy, the selected landmark, consent time, and optional delivery directions. Grabit does not continuously track your location or request GPS permission when you choose a point manually.
• Restaurant information: restaurant details, menu availability, operating hours, owner contact information, and order actions.
• Technical information: limited request, security, diagnostic, and integration records needed to operate and protect the service.

How we use information

We use this information to authenticate users, display menus, create and fulfil orders, process payment confirmations, show order status, deliver an order to the chosen location, notify restaurants, provide support, prevent misuse, and monitor service reliability.

How information is shared

Order and delivery details are shared with the restaurant responsible for fulfilling your order and with authorised Grabit administrators. We also use service providers that process information on our behalf:

• Google Firebase for authentication.
• Supabase for application data and backend services.
• Razorpay for payment processing. Grabit does not store your complete card, bank, wallet, or UPI credentials.
• Meta WhatsApp Business Platform for operational restaurant notifications and responses.
• Vercel for application hosting and delivery.

We do not sell personal information.

Location retention

Precise GPS records attached to an order expire and are deleted within 24 hours. Restaurants can access a delivery location only for the relevant order while it is needed for fulfilment. Other order and transaction records may be retained for operational, dispute, security, accounting, or legal purposes.

Your choices and rights

You may choose customer pickup instead of sharing GPS information. You can deny or revoke location permission through your browser or device settings. You may also request access, correction, or deletion of your personal information, subject to records we must retain for legitimate or legal purposes.

Security and children

We use access controls, authenticated requests, and restricted database permissions designed to protect information. No online system can guarantee absolute security. Grabit is intended for college-campus users and is not directed to children under 13.

Changes to this policy

We may update this policy as the pilot and its integrations change. The effective date above will be revised when material changes are published.

Contact and deletion requests

For privacy questions or account and data-deletion requests, contact Grabit through its business WhatsApp number at +91 63784 77323. Please do not include payment credentials or passwords in your message.