RestoMama Courier Privacy Policy

RestoMama is a product of Priority Queues Private Limited.

1. What this policy covers

1.1 This policy explains how Priority Queues collects, uses, shares and keeps personal data about delivery partners who use RestoMama Courier: the RestoMama Courier app for Android (package name com.restomama.courier), the RestoMama Courier web app, and the delivery-partner sign-up form on the RestoMama website. They all use the same account, so this policy covers the data held on your account whichever one you use.

1.2 We decide why and how this personal data is used, so we are its data fiduciary, and you are the data principal.

1.3 The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 apply in phases; their substantive obligations, and the Data Protection Board of India's power to hear complaints, commence on 13 May 2027. Until then, we handle personal data under the Information Technology Act, 2000 (section 43A) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We already give you the rights described in section 10.

1.4 This policy does not cover how a restaurant, or an app you choose to open from ours (such as a navigation app), handles your data. Their own policies apply.

1.5 The terms that govern your work through RestoMama Courier are in the RestoMama Courier Delivery Partner Terms. This policy and those terms are published in the RestoMama legal centre at https://www.restomama.com/policies/.

1.6 You can ask for this policy in any language listed in the Eighth Schedule to the Constitution of India by writing to admin@priorityqueues.com.

2. Personal data we collect

2.1 Account and profile

2.2 Identity and verification

We do not carry out Aadhaar authentication or e-KYC, and we do not collect biometric data (fingerprints, iris scans or face templates). Our staff compare an identity selfie with your documents by looking at them.

2.3 Location

• When. Only while you are online, and during an SOS incident you raise. On the Android app, going online starts a location service, shown by a notification, that reports your location while you are online, including when the app is closed or the screen is off. The Android app does not ask for the "Allow all the time" location permission. On the web app, your location is reported only while the app is open in your browser.
• How often. On the Android app, about every 15 seconds, and about every 8 seconds while you have a delivery in progress. On the web app, about every 15 seconds.
• What. Each reading contains your latitude and longitude, its accuracy, your speed and direction of travel, the time, a sequence number and your device identifier (section 2.7). We also keep your most recent position on your account.
• Why. To offer you nearby deliveries, guide you to the restaurant and the customer, show the customer your position between pickup and delivery (section 4.2), estimate arrival times for the restaurant and the customer, work out pay under the rate-card method in the Delivery Partner Terms, investigate disputes and suspected fraud, and help you in a safety incident.
• Precise location. We ask for precise location because we cannot offer you deliveries with a reading less accurate than 250 metres.

It stops when you go offline. We do not collect your location while you are offline, except when you raise an SOS incident.

2.4 Deliveries

• Offers sent to you, whether you saw, accepted, declined or let them lapse, and any reason you gave.
• Deliveries you accepted, released (with your reason) or returned (with your reason and photo), and the time of each status change.
• Proof of delivery: photos you take, a customer's signature drawn on your screen, and the outcome of the delivery code check. For age-restricted orders we record the outcome of the ID check and the name you enter, but not the date of birth you enter.
• Photos you take at pickup.
• Your reports of waiting at a restaurant, and the messages you send customers through the app.
• Ratings and comments customers give your deliveries, and complaints about your deliveries.
• When you go online and offline, and daily totals of your online time, your time on deliveries, and the offers you received, accepted, declined and missed.
• Shifts you book, join a waitlist for, cancel or miss, and the zones you choose.

2.5 Earnings, cash and payouts

• Your earnings history: pay, bonuses, promotions, tips, adjustments with their reasons, set-offs and payouts.
• Cash on delivery you collected, and your cash deposits: amount, method, a photo of the receipt (required in the Android app, optional on the web app), and whether our staff confirmed or rejected it.
• Payout methods. For a bank account you enter the account holder's name, the full account number and the IFSC. Our payout-method record keeps the name, the last four digits of the account number and the IFSC; the full number you type is not kept in that record. The bank-account proof you upload (section 2.2), such as a cancelled cheque or passbook page, shows your full account number, and our staff use it to verify the account and to make bank transfers to it. For UPI we keep the UPI ID.
• Payout records, including the bank reference number of each payout, and weekly pay statements.
• Tax details: your PAN and legal name, and tax documents we issue to you. Your full PAN is stored on our servers but is shown in the app only in masked form.

Some of this is sensitive personal data or information under the 2011 Rules (passwords and financial information), and we handle it as section 9 describes.

2.6 Safety features

• SOS incidents you raise: type, your note, your location readings during the incident and any photo you attach.
• Trusted contacts you add: their name and mobile number. We send a code to their phone to confirm them. Add someone only with their agreement.
• Live-location links you create: when each one was created, when it expires or was revoked. A person with the link sees the first word of the full name on your account (not your display name), your vehicle type, the last four characters of your vehicle number and your live location, until the link expires or you revoke it.

2.7 Device and technical data

• Device identifier. The app creates a random identifier the first time it runs and sends it with each location reading. It is not a hardware identifier. It stays after you sign out, so that we can detect one account being used on several phones, or several accounts on one phone. On Android it is removed when you uninstall the app; on the web app, when you clear the site's data in your browser.
• App version. The platform and version of the app you are using.
• Push notification details. If push notifications are switched on for your device, the push token or subscription your phone or browser gives us and, for the web app, your browser's user-agent string.
• Crash reports (Android only). If the Android app crashes, it saves a report on your phone and sends it to us the next time you open the app. The report contains the app version, your Android version, your phone's make and model, the time, and the error message and technical trace exactly as the app produced them. We do not currently remove personal data from the error message or trace before the report is saved and sent, so a report can occasionally contain personal data that the app was handling at that moment. Crash reports are linked to your account. The app sends them automatically and has no setting to switch them off at present; you can ask us to delete your crash reports at any time by writing to admin@priorityqueues.com.
• Server data. Our servers and hosting providers record your IP address and details of each request, to keep the service running and secure.

2.8 What we do not collect

We do not read your contacts, SMS messages, call logs, calendar or other apps. The apps contain no advertising and no third-party analytics or advertising tools. We do not collect your card details or UPI PIN. Photos you take in the Android app for delivery proof, pickups, returns, your profile, an identity selfie or a document, and photos you choose in the Documents screen of Account, are re-encoded on your phone before upload, which leaves out embedded details such as the photo's location tag. Photos of cash-deposit receipts, files you choose from your phone during sign-up, PDF files, and all photos uploaded through the web app are sent as they are and can include such details.

3. How we use your data, and on what basis

We use your personal data on the basis of your consent, given when you accept this policy and the specific consents in the app, and, where the law allows us to without consent, for legitimate uses such as complying with the law, responding to a medical emergency or a threat to someone's safety, and meeting a court order or government request.

4. Who can see your data

We do not sell your personal data.

4.1 The restaurant and its ordering system. When you accept a delivery, we send the ordering system the order came from (RestoMama's restaurant platform) your display name (or your name, if you have not set one), your mobile number, a link to your profile photo, your vehicle number, status updates, estimated arrival times and the messages you send the customer through the app. It does not receive your location. The restaurant's staff can see these to follow and contact you about the delivery. For deliveries paid under the rate-card method, we also send the pay amounts for that delivery and the cash you collected, for billing.

4.2 The customer. The customer's tracking page shows the first word of your display name (or your name), your vehicle type, the last four characters of your vehicle number and, from pickup until delivery, your live location. Anyone the customer shares their tracking link with sees the same. Depending on how the customer ordered, they may also see your mobile number so that they can call you about the delivery.

4.3 Our staff. Our operations staff can see your account to review applications, support deliveries, reconcile cash and payouts, and handle safety incidents, appeals and complaints. Access depends on each staff member's role. Every time a staff member requests access to your government ID, Aadhaar, PAN, profile photo or identity selfie, we log who requested it and when.

4.4 Trusted contacts. A person you share a live-location link with sees the details described in section 2.6 until the link expires or you revoke it.

4.5 Service providers who process data for us.

They may use your data only to provide their service to us.

4.6 The navigation app you choose. If you open navigation from our app, the destination is passed to the navigation app you picked, and that app's privacy policy applies.

4.7 Government and legal. We disclose personal data to courts, the police, tax authorities and other government bodies when the law requires it, including under the Code on Social Security, 2020, or to protect someone's safety.

4.8 Business transfer. If another company takes over the RestoMama Courier business, your data may pass to it, on terms that protect it as this policy does.

5. ID and Selfie Processing Consent

This section is the "ID processing consent" you accept in the app before you photograph or upload a government ID, Aadhaar, PAN or identity selfie for the first time. Our server refuses those uploads until you have accepted it.

• Why we ask. To verify your identity so that restaurants, customers and we can trust who is delivering, and to decide whether to approve your account.
• What we collect. A photo or file of the identity documents you choose to upload (government ID, Aadhaar, PAN) and, if we ask you to re-verify, a selfie. For the Aadhaar number we accept only a masked number, with the first eight digits hidden. Upload a masked Aadhaar (the version UIDAI lets you download) or cover the first eight digits before you photograph your card; we store the image exactly as you upload it, and we reject any Aadhaar image on which all 12 digits can be read.
• Who can see them. Only our staff whose role gives them access to delivery partners' accounts, and only to review your identity or to deal with a safety, fraud or legal matter. We log each time a staff member requests access to one. Restaurants, customers and other partners never see them, and we never use them for marketing.
• How they are stored. In a private storage location that is not publicly accessible. Staff open them through links that expire after 5 minutes.
• How long we keep them. An identity document or selfie that is rejected, or that you replace with a new one, is deleted from storage 90 days after it was rejected or replaced; we keep only the record that the review happened, without the image or the document number. An approved identity document is kept while your account is open, and after that as described in the RestoMama Courier Account Deletion Policy.
• Withdrawing this consent. You can withdraw it by writing to admin@priorityqueues.com. We cannot verify you without it, so withdrawing it means we close your account as described in the Account Deletion Policy.

6. Background-check consent

The app asks for your consent to a background check. At present, giving consent only records it, with its date and time; no background check is run, and your data is not sent to any background-verification provider. If we start using such a provider, we will tell you who it is and what it checks before we share any of your data with it.

7. Notifications and marketing

7.1 Messages you need to work. New offers and updates on your deliveries are sent in the app and, where switched on, as push notifications. You can switch off push notifications, new-offer notifications and job-update notifications in App settings; if you do, you see offers only while the app is open.

7.2 Shift reminders and promotion notices are on unless you switch them off in App settings.

7.3 Marketing. During sign-up, the "Stay in the loop" step asks whether you want occasional messages about bonuses and new features. It is off unless you choose to opt in, and you can change it at any time in App settings under "Marketing". We send marketing messages only if you have opted in.

8. How long we keep your data

9. Security

• Data travels between the apps and our servers over encrypted (HTTPS) connections. The Android app refuses unencrypted connections.
• Passwords are stored only as one-way hashes.
• On Android, your sign-in tokens are stored in encrypted storage on your phone. On the web app, they are stored in your browser's storage for the site, so sign out on a shared computer.
• A sign-in session can be renewed only once with the same token; a reused token is refused.
• Identity documents, other documents and delivery photos are kept in private storage with public access blocked. Your profile photo is kept in a separate, publicly readable location so that it can be shown to restaurants and customers; anyone with its link can view it.
• Staff access depends on their role, and each request to view an identity document is logged.

No system is completely secure. If a breach of your personal data occurs, we will report it to the Indian Computer Emergency Response Team (CERT-In) and inform you and any other authority as the law requires.

10. Your rights and choices

10.1 You can ask us:

• for a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with;
• to correct, complete or update your personal data. You can change most of your profile, vehicles, address, payout methods and tax details in the app yourself;
• to erase your personal data, as described in the RestoMama Courier Account Deletion Policy. You can ask in the web app (Account, then Manage your data), in version 1.8.1 or later of the Android app (Account, then Account data, then Delete my account) or by email. You can ask for a copy of your data in the same places;
• to withdraw a consent. You can refuse or withdraw marketing consent in App settings, and turn off location, camera or notification permissions in your phone's settings, although without location you cannot go online and without the camera you cannot take proof photos;
• to nominate another person to exercise your rights if you die or become unable to do so; and
• to address a grievance about how we handle your data.

10.2 To use any of these rights, write to the Grievance Officer (section 14) from the email address on your account, or give the mobile number on your account. We will verify that the request comes from you before we act on it. We acknowledge a request within 24 hours and resolve it within 15 days of receiving it.

10.3 From 13 May 2027, if you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India using the online complaint facility the Board provides. You must first use our grievance process (section 13(3) of the Digital Personal Data Protection Act, 2023).

10.4 Please give us accurate information and do not impersonate anyone; these are also your duties under the Digital Personal Data Protection Act, 2023.

11. Children

RestoMama Courier is only for people aged 18 or over. We do not knowingly create accounts for anyone under 18. If you believe someone under 18 has an account, write to the Grievance Officer and we will close it.

12. Where your data is processed

Our servers and database are hosted by Railway outside India, and the web app is served by Vercel, whose network may serve it from outside India. Your documents and photos are stored by Amazon Web Services in its Mumbai (ap-south-1) region, in India. Google, which delivers push notifications, and WhatsApp (operated by Meta), through which MSG91 sends our messages, may also process data outside India. We transfer personal data outside India only as Indian law allows.

13. Changes to this policy

When we change this policy we publish the new version in the RestoMama legal centre and ask you to accept it in the app. If a change affects how we use data you have already given us, we tell you before it applies.

14. Grievance Officer and contact

• Name: Leo Johny
• Designation: Director, Priority Queues Private Limited
• Email: admin@priorityqueues.com
• Phone: +91 97477 47702 (Monday to Saturday, 9:30 am – 6:30 pm IST)
• Address: Priority Queues Private Limited, Door No. 463, Thayyil House, Vazhukakkode, Anjumoorthy, Palakkad, Kerala 678682, India

We acknowledge a grievance within 24 hours and resolve it within 15 days of receiving it, as rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 requires. If you are not satisfied with the Grievance Officer's decision, you may appeal to the Grievance Appellate Committee set up by the Government of India within 30 days of receiving that decision, as rule 3A of those Rules provides.

Effective date: 30 September 2026 Last updated: 30 September 2026