Privacy Policy

Last updated: June 11, 2026

Who We Are

This Privacy Policy describes how Akshaya Pathra Kitchen ("we," "us," or "our") collects, uses, and shares information when you use our website, online ordering platform, and loyalty/wallet program.

Information We Collect

We collect information you provide directly to us, including:

Account information: name, email address, phone number, profile photo
Address information: shipping and billing addresses you provide
Order history: items ordered, order totals, pickup/delivery preferences
Payment information: card details are tokenized and processed by Clover; we do not store full card numbers on our servers
Wallet & loyalty: wallet balance, points balance, tier, and transaction history
Communication preferences: whether you have opted in to email and SMS notifications
Authentication: we use Supabase Auth to manage sign-in; depending on your chosen sign-in method, this may include Google account email, magic-link verification, or phone number for one-time codes

How We Use Your Information

To process and fulfill your orders
To manage your account, wallet balance, and loyalty points
To send transactional communications about your account and orders (order status, payment receipts, wallet activity, loyalty milestones) via email and, if you have opted in, SMS
To send authentication codes when you sign in (via SMS, email magic link, or Google sign-in)
To prevent fraud, debug issues, and improve our service
To comply with legal obligations

SMS & Phone Number Use

Your phone number is used only for: (a) one-time sign-in verification codes that you request, and (b) transactional SMS notifications you have explicitly opted in to receive (order status, wallet activity, loyalty updates). SMS notifications are off by default and require a separate affirmative opt-in action.

We do not share, sell, or rent your phone number to third parties for marketing purposes. For full details on SMS, see our SMS Terms & Consent.

Third-Party Service Providers

We use the following third-party providers to operate the service. Each receives only the information necessary for its role:

Supabase — database, authentication, and file storage
Clover — point-of-sale, menu sync, card payment processing, order management at the restaurant
Twilio — SMS delivery (transactional notifications and sign-in codes)
Resend — transactional email delivery
Google — optional Google Sign-In for authentication (if you choose it)
Vercel — website hosting and serverless infrastructure

We do not sell your personal information to any party. We do not share it with advertisers or data brokers.

Cookies & Local Storage

We use cookies and browser local storage to keep you signed in, remember your cart, and remember your UI preferences (such as menu view style). We do not use third-party advertising or tracking cookies.

Data Retention

We retain your account information, order history, and wallet transaction records for as long as your account is active and as needed to comply with tax, accounting, and other legal obligations. You may request account deletion at any time (see Your Rights below).

Your Rights

You may, at any time:

Access — request a copy of the personal information we hold about you
Correct — update your name, email, phone, or address from your Profile page
Delete — request deletion of your account and associated personal information (subject to records we are legally required to keep, such as completed tax-reportable transactions)
Opt out — disable SMS or email notifications from your Profile page, or reply STOP to any SMS we send

To make any of these requests, contact us via our Contact page.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

Security

We use industry-standard safeguards to protect your information, including encrypted database connections, hashed authentication credentials, and access controls. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated by email or in-app notice to active users.

Contact Us

Questions, requests, or complaints about this policy can be directed to us via our Contact page.