Privacy policy

Last updated: 13 October 2026

This policy explains what information Zippy Island ("Zippy Island", "we") collects through the Zippy Island app and website, why, who we share it with and the choices you have. It applies to customers, restaurant partners and delivery partners.

What we collect

• Account details. Customers: mobile number and, if you add it, your name. Restaurant and delivery partners: name, email, mobile number and a password (stored only as a secure hash).
• Addresses and location. Delivery addresses you save, with their map position. When you allow it, the app uses your phone's location to suggest your address. Delivery partners share their location while they are online, so we can offer them nearby orders.
• Orders. What you order, from where, the bill, delivery times, notes you add, ratings and reviews.
• Payments. Online payments are processed by Razorpay. We receive the payment status and reference, never your full card, UPI PIN or bank login details.
• Partner documents. Restaurants and delivery partners upload documents such as FSSAI licence, PAN, bank proof, driving licence, vehicle RC, ID proof and a photo, so we can verify them. These are stored privately and seen only by our staff.
• Calls. When you call a restaurant, rider or customer through the app, we record who called whom and when, not the conversation. With the current phone connection, the person you call may see your number.
• Device information. A notification token so we can send order updates, and basic technical logs (such as IP address and app version) to keep the service secure.
• Messages to us. What you send through the website's contact form or to our support.

How we use it

• To take, prepare, deliver and support your orders, and to show restaurants and riders only what they need for that order.
• To log you in (customers by a one-time code on WhatsApp; partners by email and password) and keep your account secure.
• To calculate delivery charges by road distance, check that an address is in our delivery area and process payments and refunds.
• To verify partners, pay them and keep accounts of every order.
• To send order updates and account messages. We do not send marketing messages without your consent.
• To prevent fraud and misuse, and to meet our legal and tax obligations.

Who we share it with

We do not sell your personal information. We share it only as needed to run the service:

• The restaurant and rider on your order: your name, delivery address, order details and notes.
• Service providers: Razorpay (payments), Google Maps Platform (address search, maps and distances), Google Firebase Cloud Messaging (notifications), our WhatsApp messaging provider (login codes), Cloudflare (secure file storage), our email provider and our hosting provider. They may use the information only to provide their service to us.
• Authorities, when the law requires it or to protect the safety of our users.

How long we keep it

We keep your account information while your account is active. Order, payment and tax records are kept for as long as Indian law requires (usually up to 8 years). Partner documents are kept while the partnership is active and for as long as needed afterwards for legal and accounting purposes.

Your choices and rights

• You can update your name and saved addresses in the app, and turn off location or notifications in your phone's settings.
• You can ask us for a copy of your information, to correct it, or to delete your account through our contact form. Some records (such as tax invoices) must be kept even after an account is deleted.

Security

Data is sent over encrypted connections. Passwords and login codes are stored only as secure hashes, documents are kept in private storage, and staff access is limited by role. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Children

Zippy Island is meant for people aged 18 and over. Partners must be 18 or older.

Grievance officer

If you have a complaint about how we handle your information, please contact our grievance officer through our contact form. We will acknowledge it within 48 hours and resolve it within 30 days.

Changes to this policy

If we change this policy, we will update the date above and, for important changes, tell you in the app.