Privacy Policy
Version 2.1 · Last updated 04 September 2026
We do not sell your personal data and we run no third-party advertising in this app. Food money goes straight from you to the cook or restaurant, so we never see a card, UPI PIN or bank number.
Who we are
Mr Rasoi is built and operated by 4AM TECH IO PVT LTD, a company registered in India at 07 Park Plaza, Behind Deepak Hospital, Mumbai, whose company website is 4amtech.com. Mr Rasoi is a product and brand of that company, not a separate legal entity. In this policy, "we", "us" and "Mr Rasoi" all mean 4AM TECH IO PVT LTD. Under Indian data-protection law we are the data fiduciary for the personal data described here, and Musa Zaveri is our Grievance Officer.
This policy covers the Mr Rasoi mobile app and the mrrasoi.store website. It applies to customers who order food, and to the restaurants and home kitchens that list on the platform.
What we collect
We collect only what we need to help you find a cook or restaurant nearby and place an order.
- Your account details: name and phone number.
- Delivery addresses you save, and the one you pick at checkout.
- Your order history, so reorder and support work.
- Anything you write to us: support messages, an order issue you report, and the photos you attach to it.
- Ratings and reviews you leave for a seller, which are shown publicly with your first name.
- If you apply as a seller: business and owner details, address and map pin, operating hours, cuisines, fulfilment and payment settings.
- Seller verification evidence such as FSSAI, optional GST, PAN or identity documents, storefront and menu media, kitchen evidence, and the review notes linked to the application.
Device and app information
A small amount of information reaches us automatically when you use the app. We use it to deliver notifications and keep the service secure. There is no analytics or crash-reporting SDK in this app.
- A push notification token issued by Firebase Cloud Messaging, so order updates can reach your device.
- The app version you are running, so we can tell which build a report came from. We do not read your device model or operating-system version.
- Sign-in records, including the phone number you verify and the authentication token Firebase issues for your session.
- Server request logs, including IP address and timestamp, kept for security, abuse prevention and debugging.
No tracking We do not use advertising identifiers, we do not fingerprint your device, and we do not track you across other apps or websites.
Permissions we ask for
Every permission is requested at the moment it is needed, is optional, and can be withdrawn later from your device settings.
- Location, to place your delivery address or a seller map pin and to estimate distance. You can decline and type an address by hand instead.
- Camera and photo library, only when you choose to add a storefront photo, a menu image, a kitchen document or evidence for an order issue.
- Notifications, so we can send order updates and dispute deadlines. You can turn these off and keep using the app.
Location
When you allow location access, we use it to help choose an address or seller map pin and to estimate delivery distance. Customers can always enter an address manually. A seller delivery pin is stored with the application so serviceability can be reviewed and calculated.
We read your location only while the app is open. Mr Rasoi does not track your location in the background.
How we use your information
- To show you cooks and restaurants that can deliver to your address.
- To pass your order and delivery details to the seller you chose.
- To send order updates you asked for, such as when food is ready.
- To run the support and dispute process when an order goes wrong, including showing your report to the seller involved.
- To keep the app safe, prevent misuse and enforce our terms.
- To review seller applications, record document decisions and correction requests, and maintain an auditable approval history.
- To meet our legal, tax and record-keeping duties.
Seller privacy Sensitive seller documents are restricted to the seller who uploaded them and to authorised reviewers. Public storefront photos and menu images may be shown to customers after the seller goes live.
The 4AM Tech strip on the home screen
The customer home screen carries a promotional strip for 4AM Tech. 4AM TECH IO PVT LTD is the company that builds and operates Mr Rasoi, so this is our own first-party branding, not an advertisement sold to an outside party. Tapping it opens a page inside the app describing 4AM Tech services, and the actions there can open 4amtech.com in your browser.
No advertising or analytics SDK is embedded in that strip. No personal data, device identifier, location or order history is passed to it or used to decide what it shows. Every customer sees the same strip in the same place.
Once you leave the app for 4amtech.com or any other external site, that site’s own privacy policy applies to what happens there.
Payment information
Customers pay the cook or restaurant directly, in cash or by UPI. Mr Rasoi does not collect, hold or route that money, and we never store your card number, UPI PIN or bank account details.
A seller who pays the business-services fee in the app is taken to Razorpay’s secure checkout. Card and UPI details are entered with Razorpay under their own terms and privacy policy, not with us. We retain only the amount, date, payment reference and result, so we can raise an invoice and show a payment history.
How we protect your information
- All traffic between the app and our servers is encrypted in transit over HTTPS.
- Sign-in uses one-time phone verification, so there is no password of yours for anyone to steal.
- Seller documents are readable only by the seller who uploaded them and by authorised reviewers.
- Access to production systems is limited to a small number of authorised people and is logged.
No system is perfectly secure. If a breach affects your personal data, we will act on it and notify you and the authorities as the law requires.
Data retention
We keep account and order records while they are needed to operate the service, resolve disputes and meet legal or tax duties. Seller applications, verification decisions and audit records may need to be retained after an account closes so platform-safety and compliance decisions remain traceable.
When a record is no longer required, we delete it or strip it of anything that identifies you.
Your rights and choices
Under Indian data-protection law you may ask us to do any of the following, free of charge.
- Give you a copy of the personal data we hold about you and tell you who we shared it with.
- Correct anything inaccurate, incomplete or out of date.
- Erase data we no longer need for the purpose you gave it for.
- Withdraw a consent you gave, such as location or notifications, at any time.
- Nominate another person to exercise these rights on your behalf if you die or are unable to act.
Delete your account You can delete your account from inside the app: open Account, then Delete account. That removes your profile, saved addresses and order history from the live service, apart from records we must keep for legal, tax, safety or dispute reasons.
Requests reach us fastest at the grievance address below. We may need to confirm who you are before we act on one.
Children
Mr Rasoi is meant for people aged 18 and over. We do not knowingly collect personal data from a child. If you believe a child has given us data, write to the grievance officer and we will delete it.
Changes to this policy
If we change this policy we will update the version and date at the top of this page, and where the change materially affects you we will tell you in the app before it takes effect. The current version is always available here, and at mrrasoi.store/privacy.
Contact the grievance officer
For a privacy question, an access or deletion request, or a formal grievance under the Information Technology Rules, contact the responsible person below. We acknowledge a grievance within 24 hours and aim to resolve it within 15 days.