Privacy Policy

1. Who we are and what this covers

This Privacy Policy describes how Nomio Foodtech Pvt Ltd ("Nomio", "we", "us") collects, uses, stores, and shares personal information when you use our services, including:

• The Nomio – Home Cooked Meals mobile application (for example the Android package com.nomioapp and equivalent builds on other platforms);
• Our website at nomio.in and related web properties we operate.

Nomio connects customers who order home-cooked food with home chefs who prepare meals, and delivery partners who may fulfill deliveries where that service is available. Different roles use different parts of the product; we explain role-specific data practices below so it is clear what applies to you.

2. Categories of information we collect

Depending on how you use Nomio, we may collect the following categories of information:

2.1 You provide directly

• Identity and contact: name, email, phone number, and similar profile fields.
• Addresses: delivery addresses, labels (e.g. home/work), and coordinates when you place a pin on a map or confirm a suggested address.
• Orders and preferences: items ordered, dietary preferences, special instructions, order history, and saved addresses.
• Chef and partner onboarding: business or display name, service area, bank or payout details (processed in line with our agreements), identity or verification documents where required, vehicle or availability information for delivery partners, and related compliance information.
• Communications: messages you send us (support, feedback, disputes) and, where the product provides in-app messaging related to an order, content needed to operate that feature.
• Media you choose to upload: for example photos for profile, verification, or delivery proof where the app requests them.

2.2 From your device (with permission)

• Location: see Section 5 for a detailed breakdown of foreground vs background location and how it differs by role.
• Camera, photos, microphone: only when you use a feature that requires them (for example scanning, uploading images, or voice notes if offered), subject to the permissions you grant on your device.
• Notifications: device tokens or similar identifiers so we can send order updates and service notifications you opt into.

2.3 Automatically generated or inferred

• Operational and security logs: timestamps, app version, device type, coarse IP-derived information, and diagnostic data to keep the service reliable and secure.
• Delivery and duty metrics: for partners on duty or on active delivery, distance and time aggregates used to calculate earnings, assign orders, and show status in the product.
• Website usage: on nomio.in, cookies and similar technologies as described in Section 10.

2.4 Payments

Payment card or UPI flows are handled by licensed payment partners. We typically receive limited information from them (such as transaction status, last four digits where applicable, or a payment reference)—not your full card number stored on Nomio servers in place of the processor.

3. How we use personal information

We use the information above to:

• Create and secure your account and authenticate you.
• Display menus, chefs, and plans relevant to your area or selected address.
• Place, pay for, prepare, dispatch, and deliver orders end-to-end.
• Show order tracking to customers (including partner location during an active assignment where applicable).
• Operate delivery partner tools: going online/offline, accepting offers, navigation aids, and—where enabled—duty sessions that record distance for earnings.
• Operate chef tools: kitchen or service location, slots, menus, and compliance checks.
• Send transactional messages (order status, OTPs, critical alerts).
• Send marketing where you have consented and applicable law allows; you can opt out as described in communications or account settings where available.
• Detect abuse, fraud, and technical issues; improve reliability and performance.
• Comply with law, respond to lawful requests, and enforce our terms.

4. Processing by role (what applies to you)

4.1 Customers

• We use your address and/or foreground device location (when you allow it) to power discovery, distance estimates, checkout, and delivery.
• In the current Nomio app implementation, customers are not asked for Android "Allow all the time" / background location for core browsing and ordering; location for customers is intended to be used while you interact with the app or when you explicitly use a location-based feature, subject to your OS permissions.
• During an active delivery, you may see a delivery partner's location or status updates we derive from their device so you can track progress.

4.2 Home chefs (sellers on Nomio)

• We process business profile data, kitchen or pickup location (often via map or address), verification documents, menus, and order data needed to fulfill customer orders.
• Location for chefs is used to set and display service area and to operate maps and logistics features—not to run unrelated background location tracking for advertising.

4.3 Delivery partners

• When you go online for deliveries or use partner features, we collect foreground location to update your position for dispatch, routing context, and customer-facing tracking while you are using the app.
• Android: The Nomio Android app is built without ACCESS_BACKGROUND_LOCATION. We do not ask for "Allow all the time" on Android. Delivery and duty location updates use while-in-use / foreground access so live tracking and distance-based features work when the app is open or active; updates may pause or be limited when the app is fully in the background, depending on your device.
• iOS: Where supported, we may request Always location for delivery partners so updates can continue when the app is not on screen—see Section 5. A dedicated in-app explanation may appear before the system asks for broader access.
• If you use duty or similar earning modes, we process location samples to compute distance and time associated with your session for earnings and operations.

5. Location information (detailed)

Location is sensitive. This section states, as clearly as possible, what the Nomio app is designed to do today and how it differs by role.

5.1 Types of location access

• Coarse / approximate location: lower-precision signals (for example network-based) where the OS provides them.
• Precise / foreground location: higher-accuracy signals (for example GPS) while you use the app or when you trigger a location action, depending on your permission choices.
• Background / "Always" location: continued access when the app is not in the foreground. Our Android app does not declare or use ACCESS_BACKGROUND_LOCATION and does not request "Allow all the time" on Android. On iOS, "Always" location may apply for delivery partners where supported and enabled.

5.2 Purposes—foreground location (all roles that use location)

• Confirm or suggest addresses and show maps.
• Show relevant chefs, meals, or service availability for an area.
• Support checkout, delivery fees or distance estimates where applicable.
• For delivery partners: update position while online and during navigation-related workflows.

5.3 Android vs iOS (delivery partners)

Android: We do not use Google Play's background location permission. Partner and duty features use foreground / while-in-use location only. Customers and chefs are likewise not asked for background location on Android in our current implementation.

iOS: For delivery partners, Always location may be used so updates can continue when the app is not visible, for the same operational purposes (tracking, duty distance, dispatch)—not for unrelated advertising.

5.4 In-app disclosure (iOS expanded location)

On iOS, before the system asks for Always location access, the app may show a dedicated in-app screen that explains why broader access helps deliveries and duty-related features, and that the system dialog follows. You acknowledge that screen (for example with Continue) before we request expanded permission. This supplements this Privacy Policy and platform expectations for clear notice.

5.5 Sharing, processors, and maps

Location and address data may be processed by service providers we use to run Nomio—for example map, geocoding, or routing providers (such as Google Maps Platform or similar)—under contractual safeguards. Those providers process data under their own policies as well. We share location-derived information with chefs and delivery partners only as needed to fulfill orders and operate the marketplace (for example delivery address or partner position during an assignment).

5.6 Retention (location-related)

We retain location-related data only as long as needed for the purposes above, including order records, dispute handling, fraud prevention, legal obligations, and improving reliability. Aggregated or de-identified analytics may be retained longer where permitted by law.

5.7 Your controls

You can review or revoke location access at any time in device settings (for example Android: Settings → Apps → Nomio → Permissions → Location; iOS: Settings → Privacy & Security → Location Services). If you revoke access, features that depend on location may stop working or fall back to manual address entry where the app supports it.

6. How we share information

We may share personal information with:

• Other users on the platform as needed to complete an order (for example a chef seeing delivery instructions; a customer seeing assigned partner status during delivery).
• Payment and financial partners to authorize and settle transactions.
• Cloud hosting, maps, communications (SMS/email/push), analytics, and security vendors who process data on our instructions.
• Professional advisers (lawyers, auditors) where confidentially appropriate.
• Authorities when required by applicable law or to protect rights, safety, and integrity of users and Nomio.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate notice and safeguards where required.

We do not sell your personal information in the conventional sense of selling lists of identifiable individuals to random advertisers. Where "sale" or "sharing" has specific legal definitions in your jurisdiction, we will honor applicable opt-out rights as required.

7. Retention

We keep personal information for as long as your account is active, as needed to provide services, and as required by law (for example tax, accounting, or food-safety records). When data is no longer needed, we delete or de-identify it subject to backup and archival constraints.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit for modern app and web traffic, access controls, and monitoring. No online service is completely secure; if you believe your account is compromised, contact us promptly.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict certain processing of your personal information, and to withdraw consent where processing is consent-based. Laws such as India's Digital Personal Data Protection Act, 2023 and other frameworks may apply.

• To request access, correction, or deletion, email privacy@nomio.in from your registered contact where possible.
• For account deletion options in the product, see our account deletion page where available.
• You may opt out of marketing emails or SMS using the unsubscribe instructions included in those messages, where applicable.

10. Cookies and similar technologies (website)

Our website may use cookies, local storage, pixels, and similar technologies to remember preferences, measure traffic, improve performance, and—where you consent—support marketing. You can control cookies through your browser settings and, where we provide a cookie or consent banner, through those controls.

11. Children's privacy

Nomio is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have done so, contact us and we will take appropriate steps to delete the information.

12. International transfers

We primarily operate in India. If we use service providers in other countries, we implement appropriate safeguards consistent with applicable law (such as contractual clauses or adequacy decisions where relevant).

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. For material changes, we may provide additional notice (for example in-app or by email) where required by law.

14. Contact us

Questions about this Privacy Policy or our data practices: