Legal
Privacy Policy
Presto is a kitchen in HSR Layout, Bengaluru, and an app that keeps your day's calorie and protein budget. This policy explains what personal data we collect through the Presto app and prestofoods.co.in, why, and what you can do about it. We wrote it to be read.
Who we are
Presto is operated by [registered legal entity name], [registered address], Bengaluru, Karnataka, India ("Presto", "we", "us"). For the purposes of India's Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data described here.
What we collect
| Data | Why we need it |
|---|---|
| Mobile number | To sign you in with a one-time code, and to reach you about an order. It is your account identity; we don't use passwords. |
| Name (optional) | To address you in the app and on delivery. |
| Delivery addresses | To deliver your orders and to tell you whether we deliver to you. |
| Goal and body details — current and target weight, pace, age, height, sex, foods you leave out | To calculate your daily calorie and protein budget and hide dishes you've excluded. Nothing else. |
| Food log — meals delivered by us, food you log from elsewhere, weigh-ins | To show what's left in your day and your progress over time. This is the heart of the app. |
| Orders and weekly plans | To cook, deliver and bill your meals, and for our records. |
| Payment references | Payments are processed by Razorpay. We receive a payment ID and status — never your card number, UPI PIN or bank details, which go straight to Razorpay. |
| Food descriptions you type | To estimate calories for outside food. The text may be sent to an AI model provider to produce the estimate (see below). |
| Basic technical data — app version, device type, crash reports, server logs | To keep the service running and fix problems. |
We do not collect your location in the background, your contacts, photos, or health data from other apps. We do not sell your personal data, and we do not use it for third-party advertising.
Health-related data
Your weight, goal and food log say something about your health, so we treat them with extra care: they are used only to run your budget and progress, are never shared for marketing, and are deleted with your account. Presto provides nutrition information, not medical advice, and does not diagnose, treat or claim to improve any condition.
Who we share it with
Only the service providers needed to run Presto, under contracts that limit their use of your data to providing their service to us:
- Amazon Web Services (Mumbai region) — hosting for our app servers and website.
- Supabase (Mumbai region) — our database.
- Razorpay — payment processing.
- An SMS provider — to send sign-in codes.
- Anthropic — to estimate calories from food descriptions you type. We send only the description, not your name or number.
- Delivery partners — your name, number and address, to hand over your order.
We may disclose data if required by law or a valid order from a court or government authority.
Where it's stored and for how long
Your data is stored in India (AWS and Supabase, Mumbai region); some providers, such as the AI model provider, may process data outside India. We keep your data while your account is open. When you delete your account, we delete your profile, goals, food log, weigh-ins, addresses and order history from our systems. Records that law requires us to keep — such as tax and payment records — are kept by us or by Razorpay for the period the law requires, and are not used for anything else.
Your choices and rights
- Access and correct your profile, goals and log at any time in the app.
- Delete your account in the app: Profile → Delete account. This is immediate and permanent.
- Withdraw consent by deleting your account or contacting us.
- Nominate someone to exercise your rights if you are unable to, and raise a grievance with our Grievance Officer below. If you are not satisfied, you may approach the Data Protection Board of India.
Security
Data is encrypted in transit (HTTPS) and at rest. Sign-in codes and session tokens are stored only as keyed hashes. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Children
Presto is for people 18 and over. We don't knowingly collect data from children; if you believe a child has an account, contact us and we will delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top shows when it last changed.
Contact and Grievance Officer
Questions or requests: hello@prestofoods.co.in.
Grievance Officer: [name], [designation], grievance@prestofoods.co.in, [address]. We acknowledge grievances within 24 hours and resolve them within 15 days.