Privacy Policy
Dastak – Local Delivery (Android app and website) · Operated by Dastak, Rohtak, Haryana, India
Effective date: 13 October 2026 · Last updated: 14 October 2026
1. Who we are
Dastak is a local food-ordering and delivery service in Rohtak that connects customers, restaurants and cafes, and delivery partners. In this policy "Dastak", "we" and "us" means Dastak, Rohtak. For any privacy question or complaint, write to rohtakdastak@gmail.com.
2. Data we collect
| Who | What we collect | Why |
|---|---|---|
| Everyone with an account | Name, email address, mobile number, password (stored only as a secure hash by our login provider), role (customer, restaurant, delivery partner, admin). | Create and secure your account, contact you about orders. |
| Customers | Saved delivery addresses with a map pin, delivery instructions, order items and notes, order history, ratings and reviews, support messages. | Deliver your order, show your history, handle complaints. |
| Payments | The 12-digit UPI reference (UTR) you submit and the order amount. You pay in your own UPI app; we never receive your card, bank account or UPI PIN. | Manually verify that a payment was received. |
| Location | Your phone's location only when you tap "Use my current location" (or choose a point on the map). The app does not track customers in the background. | Show restaurants that deliver to you and pin your address. |
| Delivery partners | Full name, mobile, email, residential address, city and service area, emergency contact, vehicle type and registration number, the last 4 characters of your Aadhaar and driving licence, photos of your Aadhaar, licence, vehicle RC and a profile selfie, payout UPI ID or the last 4 digits of your bank account and IFSC, payout QR image, deliveries and earnings, payout records, ratings. | Verify your identity and eligibility, assign deliveries, calculate and pay earnings. |
| Delivery partners – live location | Your current location every ~20 seconds, only during an active delivery and only while you switch on "Share live location". Only the latest point is kept and it is deleted when the delivery ends. | Let the customer and restaurant see where their order is. |
| Restaurant owners | Restaurant name, owner name, contact number and email, address and map location, opening hours, menu, prices and photos, sales and order records. | List your restaurant and process its orders and settlements. |
| Device | A push-notification token if you allow notifications. | Send order and account notifications. |
We do not ask for your full Aadhaar or licence number in the app. Do not type them anywhere in the app.
3. Who can see your data
- Restaurants see the items, notes and delivery address of orders placed with them, and the name, phone and vehicle number of the partner delivering their order.
- Delivery partners see the pickup address, delivery address, item count and delivery note of orders they accept.
- Customers see the live location of the partner delivering their order, only while it is being delivered.
- Public reviews show your rating, comment and only the first letter of your name.
- Authorised Dastak administrators can see account, order, payment and partner records to run the service. Partner identity documents and payout QR codes are kept in private storage and are opened only by administrators through links that expire within minutes. Document checks are a manual review by our staff, not a government verification.
4. Service providers
We use these providers to run the app. They process data on our behalf; servers may be located outside India.
- Supabase – database, login, file storage and realtime updates.
- Google Firebase Cloud Messaging – push notifications.
- OpenStreetMap – map tiles. Your device requests map images directly from OpenStreetMap servers, which receive your IP address and the map area shown.
- Google Maps Platform – when enabled, our server sends the restaurant and delivery coordinates to Google to calculate the road distance for the delivery fee, and the app may show Google maps. Tapping "Navigate" opens Google Maps on the partner's phone.
- Ola Maps (Krutrim) – when Google is unavailable, our server sends the restaurant and delivery coordinates to Ola Maps to calculate the road distance. When you type in the address search box, our server sends that text and an approximate nearby location to Ola Maps to suggest addresses.
- Vercel – hosts our website.
We do not sell personal data, share it for advertising, or use it to train AI models. We may disclose data if required by Indian law or a valid order of a court or government authority.
5. How long we keep data
- Account, address and partner profile data: until you delete your account.
- Partner identity documents and payout QR: until your account is deleted, or earlier on request once verification is no longer needed.
- Partner live location: only the latest point, deleted when the delivery ends.
- Orders, payments, delivery earnings and payouts: kept as required by Indian tax and accounting laws (generally up to 8 years). After you delete your account these records no longer show your name, phone or email.
6. Deleting your account
In the app: Account → Delete my account, then type DELETE. If you cannot use the app, see our
account deletion page. Deletion removes your name, phone, email, saved addresses, notifications,
support chats, partner documents and payout QR, and permanently disables sign-in. It cannot be completed while an order, payment
verification, active delivery or unpaid earning is pending; the app tells you what to finish first.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you may ask to access, correct or erase your personal data, withdraw consent, and nominate another person to act for you. Most details can be edited in the app. For anything else, email rohtakdastak@gmail.com from your registered email. We aim to reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
8. Security
Data travels over encrypted HTTPS connections. Database access is restricted by per-user rules so customers, restaurants and partners can see only their own records. Identity documents are stored privately. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.
9. Children
Dastak is not meant for anyone under 18. Delivery partners and restaurant owners must be adults.
10. Changes
We will update this page when our practices change and show the new date at the top. Important changes will also be announced in the app.
11. Contact and grievance officer
Grievance Officer, Dastak, Rohtak, Haryana, India
Email: rohtakdastak@gmail.com