1 Overview & Scope

Welcome to Vansaa Cloud Kitchen ("we", "us", "our"). We operate the Vansaa food ordering platform, official digital menu, and associated mobile applications published on the Google Play Store.

We are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy governs our data practices across our website (vansaa.com or our official domains) and Android mobile application, in strict accordance with the Google Play Developer Distribution Agreement, Google Play User Data Policy, and applicable local privacy regulations in Nepal.

2 Information We Collect

When you use the Vansaa Cloud Kitchen app or web portal to browse food, customize items, or place delivery orders, we collect the following types of information:

3 How We Use Your Information

We process your data strictly under the following legitimate legal and operational bases:

• Order Processing & Fulfillment: Communicating your chosen dishes to our chefs and dispatching delivery riders to your specified location.
• Direct Customer Support: Responding via phone calls, WhatsApp messages, or email when you request order assistance, status updates, or custom dietary accommodations.
• Promotions & Deals (Optional): Providing notifications about active promo discounts (such as 15% OFF deals or festival specials) if you have opted in.
• Safety & Fraud Prevention: Preventing duplicate, spam, or malicious fake orders to protect our riders and kitchen staff.

4 Android & App Permissions Disclosures

In full transparency with Google Play Store permission guidelines, our Android app may request runtime permissions. Each permission can be granted or revoked at any time in your device's Android App Settings:

• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION (Optional): Used exclusively when you tap "Detect My Location" on the checkout page to pinpoint your delivery address on the map. You can always type your address manually without enabling location.
• INTERNET & ACCESS_NETWORK_STATE: Required to load live menu prices, check item availability, and send order tickets to our kitchen server.
• POST_NOTIFICATIONS (Android 13+): Used exclusively to notify you when your food is being cooked, out for delivery, or has arrived.

5 Data Sharing & Third Parties

We do NOT sell, rent, trade, or monetize your personal information. We only share data with essential third-party service providers who help us operate our cloud kitchen:

• Delivery Personnel: Our delivery riders receive your name, address, landmark, and phone number solely to hand over your hot food package.
• WhatsApp API / Meta Platforms: Direct WhatsApp order transmission (wa.me) enables instant communication between you and our kitchen hotline.
• Mapping & Geocoding Services: (e.g. Google Maps API / OpenStreetMap) To render map markers for delivery routing.
• Firebase / Crashlytics (Google): For anonymous app crash analytics, error monitoring, and performance telemetry.
• Legal & Regulatory Authorities: Only when strictly required by Nepalese law, court order, or governmental audit.

6 Data Security & Storage Practices

We implement industry-standard administrative, technical, and physical safeguards to safeguard user data:

• Encryption in Transit: All data transmitted between your device and our servers is secured using modern HTTPS / TLS 1.3 encryption.
• Access Control: Only authorized kitchen supervisors and dispatch administrators have access to customer order details.
• No Credit Card Storage: We do not store credit card numbers, CVVs, or bank passwords on our servers. Digital wallet payments are handled externally via certified gateway interfaces.

7 Data Retention & Account/Data Deletion

We retain personal data only for as long as necessary to fulfill orders, maintain customer support history, and satisfy legal accounting/tax regulations.

Upon receiving your request via our Data Deletion Page or email to vansaacloudkitchen@gmail.com, your profile, contact details, and address records will be permanently erased within 7 to 14 business days.

8 Children's Privacy (COPPA Compliance)

Our services and applications are not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information from our servers.

9 Your Privacy Rights & Choices

Depending on your jurisdiction, you possess the following rights regarding your data:

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You can request complete deletion of your account and data.
• Right to Withdraw Consent: You may revoke location or notification permissions through your Android device settings.

10 Contact Us & Data Protection Officer

If you have questions, feedback, or grievance requests concerning this Privacy Policy, our data handling practices, or Google Play compliance, please reach out to our team: