What we collect
We collect only what we need to cook and deliver your bowls.
- Name, mobile number and email address.
- Delivery address and delivery instructions.
- Dietary preferences, such as Jain or no onion, no garlic.
- Order history and messages you send us.
- Payment status from our payment provider. We never see or store your card or UPI details.
Why we use it
We use your data to deliver your orders, send delivery updates, handle payments and refunds, and answer your questions. We send marketing messages only if you ask for them, and you can stop at any time.
Analytics and cookies
We use no tracking cookies until you say so. A small banner asks once. If you choose Allow analytics, we set two first-party cookies: one remembers your choice, the other holds a random ID so we can tell visits apart. We use PostHog to count page visits and a few clicks, such as choosing a plan or checking your area, so we can see where people get stuck.
We never send your name, phone number, email, address, or what you type into search boxes. Page addresses are sent without their query strings, apart from campaign tags that start with utm_. We do not run analytics on admin or account pages.
If you choose No thanks, or your browser sends a Global Privacy Control signal, we collect nothing. Use Cookie settings in the footer to change your mind at any time. Your choice is remembered for a year.
Error tracking
When something breaks on our site or servers, we send a report to Sentry so we can fix it. It holds the error, the page or route where it happened, the app version and, for signed-in requests, an internal account number. It does not hold your name, phone number, email, request contents, cookies or the part of the address after a question mark. This needs no cookies and does not depend on the analytics choice.
Your rights
Under India's Digital Personal Data Protection Act you have rights over your personal data.
- Access and export: ask for a copy of the data we hold about you.
- Correction: ask us to fix anything that is wrong or out of date.
- Deletion: ask us to erase your account and data, unless the law requires us to keep some records, such as GST invoices.
- Withdraw consent: stop marketing messages or switch off analytics whenever you like.
- Grievance: raise a complaint with us and, if unresolved, with the Data Protection Board of India.
How long we keep it
We keep account data while your account is active. Invoices and payment records are kept for as long as tax law requires. After that we delete or anonymise them.
Contact us about your data
Email hello@leafday.in with the subject line Data request. We will reply within 30 days.