🍳 Rasoi — Privacy Policy

Who we are

Rasoi is a service of ABSU Mobilities (proprietor: Sumaiya Fatima), Hyderabad, Telangana, India — the data controller for this service. Contact: support@abdulsfresh.in.

What we collect and why

• Account: email address and a salted password hash (PBKDF2) — to sign you in. Up to 6 logins per home, created by your home.
• Kitchen data you enter: pantry items, dishes, recipes, meal plans, leftover coverage choices, shopping lists, budget, purchases, cook history, family member profiles (name/emoji/diet/appetite as you type them) — this is the product; it is stored only to serve your home.
• Payments: for Razorpay Checkout we store the Razorpay order ID and payment ID, server-calculated amount, selected plan, billing state or union territory, GST treatment, capture/approval timestamps and invoice number. For manual UPI fallback we store the UTR and the same invoice fields. These references support activation, duplicate-payment prevention, refunds and statutory records. We never receive or store your full card number, CVV, bank password or UPI PIN.
• Usage counters: we record that your home used the app on a given day (a daily hit count only — no URLs, no content, no device fingerprinting) to understand retention and to know who to help.
• Signed-in app sessions: while Rasoi is visible in the foreground, a random per-tab/app-launch identifier sends a heartbeat about every 30 seconds. We store the signed-in account and home, session start/last-seen/end times, active foreground seconds, current section (Cook, Plan, List or Pantry), client channel (web/PWA/native), app version and chosen language. This helps us diagnose usage and improve workflows. We do not store IP addresses, GPS coordinates, user-agent strings, physical location or device fingerprints. Background time is not counted. Session detail is deleted after 90 days and is erased immediately when the home is deleted.
• Anonymous public counter: the visitor display uses random browser and tab identifiers to estimate unique browsers and sessions active in the last two minutes. Only SHA-256 hashes of those random IDs are stored — no IP address, user agent or page history. Visitor hashes are retained for the lifetime total; inactive session hashes are deleted after seven days. Clearing browser storage creates a new visitor ID.
• Morning notification (optional): if you enable the 7am menu notification, your browser's push subscription (an anonymous push endpoint) is stored. Disable it any time by revoking notification permission in your browser/phone.
• Support email: if you write to us, we keep the correspondence.

What we deliberately do NOT do

• No ads, no ad networks and no selling of personal data.
• No third-party analytics or tracking SDKs. No cookies except your own login session.
• Bill-scan photos are processed for text and never stored — only the total you confirm is kept.
• Location (if you use "set region from location") never leaves your device — only the chosen cuisine pack name is saved.

Payment processor

If you choose secure Checkout, Razorpay Software Private Limited processes the payment under its own privacy and security terms. We send Razorpay the exact order amount, currency, an internal receipt, selected plan metadata and the account email used to prefill Checkout. Razorpay returns payment/order references and capture status; card, bank and UPI credentials stay with Razorpay and the relevant bank/payment network. Manual UPI remains available and does not use Razorpay Checkout.

Where data lives

On our server in a separate SQLite database per home — no shared tables between homes. Daily encrypted-transport backups are kept for 14 days on the server and 30 days offsite, then rotate away permanently. If you press Backup + sync, Rasoi also keeps up to five integrity-checked checkpoints of that home's database on the same server; older checkpoints rotate out and all of them are removed when the home is deleted. Connections use HTTPS.

Deleting your data

The home's owner can delete the home from inside the app (Pantry → home → delete). This is immediate and irreversible: pantry, dishes, recipes, plans, budget, history and all logins are erased from the server. Payment claim records are retained for legal/audit purposes only. Uninstalling the app never deletes anything — log back in and your home is intact; only an explicit delete removes data.

Children

Rasoi is a household tool intended for adults managing a kitchen; it is not directed at children under 13 and we knowingly collect no data from them.

Changes & contact

If this policy changes materially we will note it on this page with a new effective date. Questions or requests (access, correction, erasure): support@abdulsfresh.in — we reply within 24 hours.

← back to Rasoi