Privacy Policy
Last updated: 14 August 2026
1. Who we are
Tummy & Mummy operates a marketplace connecting home chefs ("Mummy producers") with customers across India. This policy explains how we handle personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Information we collect
- Account data: name, mobile number, delivery addresses, area and preferences.
- Producer KYC: FSSAI registration, identity and bank details for payouts (producers only).
- Order data: items purchased, payment status, delivery records and support conversations.
- Usage data: pages viewed, device and browser information, and approximate IP-based location.
- Voice data: voice input to our assistant, processed to fulfil your request.
- Location: shared only with your permission, to show nearby kitchens and estimate delivery.
3. How we use your information
To create and secure your account, process and deliver orders, provide customer support, prevent fraud, comply with tax and food-safety law, and improve our products. We send service messages about your orders; marketing messages only with your consent.
4. Third parties we work with
- Razorpay — payment processing
- MSG91 — SMS and WhatsApp notifications
- ElevenLabs — voice features
- Supabase — database and file storage
- Google Analytics — anonymised usage analytics (only after cookie consent)
We do not sell your personal data.
5. Data retention
Order and invoice records are retained for 8 years as required by Indian tax law. Voice recordings are deleted within 90 days. Account data is kept while your account is active and deleted on request, except where law requires retention.
6. Your rights
You may request access to your data, correction of inaccurate data, and erasure of data we no longer need. You may nominate another person to exercise your rights in the event of death or incapacity. To raise a complaint, contact our Grievance Officer at privacy@tummyandmummy.com; we respond within 30 days.
7. Security
Data is transmitted over TLS and stored with access controls, row-level security and audit logging. No system is perfectly secure; please protect your login OTPs.
8. Cookies
We use essential cookies to keep you signed in and your cart intact, and analytics cookies only if you accept them in the cookie banner. You can decline analytics at any time by clearing site data.
9. Contact
Privacy queries and grievances: privacy@tummyandmummy.com
10. Changes to this policy
We may update this policy; material changes will be notified in the app or by message. Continued use after an update means you accept the revised policy.
