Applies to: the RestoMama app for Android (com.restomama.marketplace) and the RestoMama website at marketplace.restomama.com (together, "RestoMama"). Effective date: 28 September 2026. Last updated: 28 September 2026.
1. Who we are
RestoMama is operated by Priority Queues Pvt Ltd, a company incorporated in India ("we", "us"). Registered office: Priority Queues Private Limited, Door No.463, Thayyil House Vazhukakkode, Anjumoorthy, Palakkad - 678682, India. For the personal data described here we decide why and how it is used, so under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary. You are the Data Principal.
RestoMama is a marketplace. Restaurants that appear on RestoMama are independent businesses. They prepare and sell your food. We pass them the details they need to fulfil your order (see section 5).
2. What personal data we collect
2.1 Data you give us
| Data |
When |
Why |
| Mobile number |
To sign in (one-time code) |
Identify your account, send sign-in codes, contact you about an order |
| First name, optional last name, optional email address |
At sign-up or in Account |
Show your name to the restaurant on your order, send receipts and codes, keep your account |
| Language (English or Hindi) |
Account > Language |
Show the app and messages in your language |
| Saved delivery addresses: label, address lines, apartment, landmark, city, state, PIN code, drop-off instructions, and optionally a pin on the map (latitude and longitude) |
Account > Addresses, or at checkout |
Deliver your order and pre-fill checkout. You can keep up to 50 |
| Order details: restaurant, items, notes, delivery or pickup, scheduled time, the delivery address and map pin used, instructions to the restaurant or courier, name for pickup, promo code, amounts, payment method, payment status |
When you place an order |
Fulfil, track and support your order, keep receipts |
| Payment proof for manual UPI, if a restaurant uses it: a transaction reference (UTR) and optionally a screenshot |
When you choose to submit proof |
Let the seller confirm that you paid. A screenshot of a payment app can show your name or UPI ID: crop it if you prefer |
| Help requests on an order: category, description, messages and up to 3 photos |
When you report a problem |
Investigate and resolve it |
| Reviews: star rating, text (10 to 1000 characters), up to 5 photos |
When you review an order |
Publish helpful reviews after moderation |
| Business profile (optional): company name, work email, GSTIN |
Account > Business |
Keep your company details on your account for your own expense records. It is stored for you and is not sent to the restaurant |
| Preferences: which notifications you want on each channel, marketing consent, personalised recommendations, public profile |
Account > Privacy |
Respect your choices. We record when and how you gave or withdrew marketing consent |
| Saved items: favourite restaurants, carts, group orders you join, shopping lists, your last 20 searches (when signed in) |
As you use the app |
Make the app work and personalise it |
2.2 Data from your device
- Location. If you tap "Use my current location", the app asks Android for permission and takes a single fix from your device. It never tracks you in the background. We use it to show restaurants near you and set your delivery point. It is sent to our server with that search and is stored only if you save it as an address or place an order there. You can refuse: type an address or pick a saved one instead. On Android 12 and later you can allow approximate location only.
- Photos. Photos you attach are chosen with the Android photo picker; the app has no access to the rest of your gallery. We re-encode each photo on your device, which removes location and camera details (EXIF), and again on our server. We do not use your camera, microphone or contacts.
- One-time-code autofill. If you allow it, Android's SMS consent shows the app the one message that holds your code. The app does not have general permission to read your SMS.
- Session data. When you sign in we keep a record of the session: a hash of the refresh token, the app or browser identifier (user agent) and dates, so you can stay signed in and we can sign you out everywhere.
- Crash reports. If the Android app crashes, freezes or is stopped by the system, it saves a short technical report on your device and sends it to our servers the next time you open the app. The report holds the app version, your phone model and Android version, the time, and the error's technical trace (which parts of the app were running). We remove phone numbers, email addresses, tokens and one-time codes from the trace before it is saved. It is not linked to your account and has no name, address, order or location in it. Only our engineering team reads these reports, to find and fix faults. You cannot turn this off in the app; you can stop it by uninstalling the app.
- Technical data. Our servers and hosting providers see your IP address and the address of each request (including, for searches, coordinates or search words), and use them to keep the service secure and to limit abuse. These logs are kept only for a limited operational period before they are deleted.
2.3 Data from others
- Restaurants and our order system tell us the status of your order, refunds, and the first name of the delivery partner where shown.
2.4 What we do not collect
We do not collect or store your card number, CVV, UPI PIN, bank account number, date of birth, contacts, or continuous location. The app contains no advertising and no third-party analytics or crash-reporting service: crash reports (section 2.2) go to our own servers only.
3. How and why we use your data (and the legal basis)
Under the DPDP Act we process your data either with your consent, or for a legitimate use the Act allows, such as giving you something you asked for, meeting a legal obligation, or preventing fraud.
| Purpose |
Basis |
| Create and secure your account, sign you in with a one-time code |
Your request; legitimate use |
| Show restaurants near you, take and deliver your orders, take payment, provide receipts and support, handle refunds |
Your request; legitimate use |
| Send order updates (SMS, WhatsApp, push, in-app; email if you verified an email) |
Your request; these cannot be turned off for orders, security and account messages |
| Send offers and recommendations |
Your consent, which is off by default and which you can withdraw at any time in Account > Privacy and marketing choices |
| Personalised recommendations based on what you order |
Your consent, switchable in Account > Privacy |
| Publish your review, and your first name and last initial on a public profile |
Your consent (public profile is off by default) |
| Keep records for payment, tax and legal reasons |
Legal obligation |
| Prevent fraud and abuse, keep the service safe, comply with law and orders of authorities |
Legitimate use; legal obligation |
| Find and fix crashes and freezes in the app (crash reports) |
Legitimate use |
| Improve the service using aggregated search terms (only terms used by at least 3 different customers, without customer IDs) |
Legitimate use |
When you sign up, you see: "By continuing you agree to the RestoMama terms and privacy policy." and a separate, unticked-by-default choice "Send me offers and updates".
4. Cookies and similar technologies (website)
- We do not use advertising or analytics cookies or trackers.
- The website stores, in your browser's local storage, your sign-in tokens, your chosen delivery point, delivery or pickup choice, and app configuration, so the site works. Clearing site data signs you out.
- The pickup map and the order-tracking map load map tiles from OpenStreetMap's servers. OpenStreetMap sees your IP address and the map area you view. The Android app does the same in the pickup map and the live order map.
- The Android app has no cookies, and it excludes its data from Android cloud backup and device transfer.
5. Who we share data with
We do not sell your personal data. We share it only as follows.
To fulfil your order
- The restaurant or store you order from receives, through our order system, your name, mobile number, items and notes, delivery or pickup choice, delivery address and map pin, instructions, pickup name, promo code and amounts. If you send a gift they receive the recipient's name and note. Apartment and landmark are kept in your address book and are not sent as separate fields.
- A delivery partner, where delivery is used, receives what is needed to deliver to you (address, map pin, your name and contact number, instructions).
- Payment gateways that take your payment on their own page (PhonePe, Paytm, Cashfree and RazorpayX) receive the amount and order reference. Card and UPI details you type on their page go to them, never to us.
- rm-platform, our order-management system operated by us, holds the restaurant side of your orders, help requests, review text, and receives your mobile number and name with each order.
Service providers (processors) that work for us
- MSG91 delivers one-time codes and messages by SMS, WhatsApp, voice and email.
- Storage and hosting: object storage for photos and your data archives (Amazon S3 or a compatible service, in the Mumbai region, ap-south-1), Railway (application and PostgreSQL database) and Vercel (website).
- OpenStreetMap tile servers: your IP address and the map area you view.
Others
- Government bodies, courts or regulators when the law requires it.
- A buyer or successor, if we merge or transfer the business, on terms that protect this data.
- With your consent, for anything else we tell you about at the time.
Public content. A review you publish is public: its rating, text and approved photos, with your first name and last initial only if you turned on Public profile.
6. How long we keep data
| Data |
Kept for |
| Sign-in codes, step-up codes, email verification codes |
Deleted 1 day after they expire |
| Sign-in sessions |
Deleted 30 days after they expire or you sign out |
| Notifications you did not save |
Deleted after 90 days |
| Your data download file |
Deleted 7 days after it is ready |
| Open carts |
Expire after 14 days of no use and are removed 30 days after that |
| Photos you uploaded but did not attach to a review or help request |
Deleted after 24 hours |
| Your last 20 searches |
Kept until you delete your account; older ones are replaced |
| Addresses, favourites, lists, preferences, business profile |
Until you remove them or delete your account |
| Order records, payment and refund records, delivery trip records |
Kept for tax, accounting and legal needs; after you delete your account they are kept without your name, phone, email, address or instructions, for as long as Indian tax, GST and company law requires records of this kind to be retained. |
| Help request text and evidence photos |
Held with the order system; evidence photos are deleted when you delete your account |
| Web server and hosting logs |
A limited operational period, then deleted or rotated |
| Crash reports |
Deleted after 90 days |
When you delete your account, see section 8.
7. Security
- All traffic between the app or website and our servers uses HTTPS. The Android app refuses unencrypted connections.
- One-time codes are stored only as salted hashes, expire after 5 minutes by default, allow 5 wrong tries, and are rate limited. Passwords, where offered, are stored as salted hashes.
- Sessions use short-lived access tokens and rotating refresh tokens stored on your device in encrypted storage; using an old refresh token signs out all sessions.
- Photos are stored in a private bucket with server-side encryption; review photos are hidden until a review is approved.
- The app hides its payment and code-entry screens from screenshots and screen recording.
- Card and UPI credentials are never handled by our app or servers.
- Sensitive account actions (deleting your account, downloading your data, changing or removing a password, linking or unlinking a sign-in account) need a fresh one-time-code check.
No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
8. Your rights and how to use them
Under the DPDP Act you may:
- Access the personal data we hold and how it is used: write to admin@restomama.com from the email address on your account, or tell us your mobile number, and we will send you a copy of your profile, addresses, orders and support data after verifying you with a one-time code.
- Correct or update your name, email, language, addresses, preferences and business details: in Account.
- Erase your data: Account > Manage account > Delete account (needs a one-time code). Your account is scheduled for deletion after a 30-day grace period in which you can change your mind by signing in and choosing Keep my account. Then we erase your personal data as set out at https://marketplace.restomama.com/policies/delete-account.html. Some order and payment records stay without your contact details, because the law requires it.
- Withdraw consent: turn off marketing in Account > Privacy and marketing choices; turn off Public profile and Personalised recommendations there too; revoke the location or notification permission in Android Settings.
- Grievance redressal and nominate another person to exercise your rights if you die or become incapable: write to the Grievance Officer below.
- If you cannot use the app, or a feature above is not yet available, email admin@restomama.com from the account's email or tell us your mobile number, and we will verify you with a one-time code. We aim to reply within 7 days and to act within 30 days.
- You can also complain to the Data Protection Board of India once it is operational, after you have used our grievance process.
9. Children
RestoMama is for people aged 18 and over. We do not knowingly collect data of anyone under 18. If you think a child has an account, write to the Grievance Officer and we will delete it.
10. Where your data is processed
Our service providers may process data outside India, for example Google (Firebase Cloud Messaging) and any cloud region used by our hosting. We transfer personal data abroad only as the DPDP Act and its rules allow. MSG91 is based in India; Railway and Vercel may process data in cloud regions outside India as part of their standard infrastructure.
11. Changes to this policy
When we make a material change we will update the date above and tell you in the app or by message before it applies. Older versions are available on request by writing to admin@restomama.com.
12. Grievance Officer and contact
In line with the DPDP Act and the Information Technology Rules, 2011 and 2021:
- Grievance Officer: Leo Johny
- Email: admin@restomama.com
- Postal address: Priority Queues Private Limited, Door No.463, Thayyil House Vazhukakkode, Anjumoorthy, Palakkad - 678682, India
We acknowledge complaints within 24 hours and resolve them within 15 days, in line with the Information Technology Rules.