Nexasource Technologies

PRIVACY POLICY FOR FYOODY

Effective date: October 01, 2026
Operated by: Nexasource Technologies Private Limited
Privacy and support email: support@nexasourcetechnologies.in

1. Who we are and what this policy covers

Nexasource Technologies Private Limited (“Nexasource”, “Fyoody”, “we”, “us” or “our”) operates:

Fyoody, our customer food-ordering application.
Fyoody Partner, our restaurant and merchant application.
Fyoody Driver, our delivery-partner application.
Our related websites, support services and platform administration systems.

This Privacy Policy explains how we collect, use, disclose, protect, retain and delete personal information.

Our initial delivery operations are in supported areas of Bengaluru, India. Availability in an app store does not mean that delivery is available at every address.

The information processed depends on your role, the features you use, your device permissions and applicable legal requirements. Information listed for merchants or drivers is not automatically collected from customers.

This policy provides notice of our practices. Where consent is required, we obtain it separately through an appropriate affirmative action. Acceptance of our Terms does not replace a permission request or consent required by law.

2. Information we collect

2.1 Customer information

When you use Fyoody as a customer, we collect information necessary to provide the features you use, including:

Name, mobile number, account identifier and email address where provided.
Saved delivery addresses, landmarks, address labels, city, state and PIN code.
Delivery-location coordinates when provided or collected with permission.
Cart contents, restaurant selections, ordered items, order values, delivery instructions and order history.
Payment method, payment status, transaction references and refund information.
Support requests, complaints, feedback and information you submit to resolve an issue.
Promotional or reward activity where the relevant feature is offered.

The Customer app does not provide profile-photo capture or photo-library upload functionality. Its launch video is application content, not a collection of your personal photos or videos.

2.2 Merchant and restaurant information

When you apply for or use Fyoody Partner, we collect information required for onboarding, verification, order fulfilment and settlements, including:

Restaurant name, business address, business location, operating hours and contact details.
Owner or authorized representative details.
Menus, prices, availability, restaurant descriptions, logos and photographs submitted for publication.
Business, identity, food-safety/FSSAI, tax/GST, licence and address-verification documents where required.
Bank account details, IFSC, cancelled-cheque information and other settlement details where required.
Order acceptance, preparation, availability, sales, settlement, payout and support records.

We do not require every document from every merchant. Requirements depend on the applicable onboarding process and law.

2.3 Driver and delivery-partner information

When you apply for or use Fyoody Driver, we collect information required for eligibility, delivery operations, safety and payouts, including:

Name, contact details, account identifier and address.
Identity, driving-licence and vehicle details and supporting documents where required.
Profile or verification photographs and vehicle photographs where submitted.
Bank account and payout details.
Availability status, assigned deliveries, pickup and delivery events, earnings and settlement records.
Location and route-related information as described below.
Emergency or nominee contact details where requested.

If you provide another person’s information, you must be authorized to do so and inform them of its intended use.

2.4 Payment information

Payments are processed through supported payment-service providers, including Razorpay where offered.

We receive or maintain information such as:

Order amount and applicable charges.
Payment method and status.
Payment, order and refund reference identifiers.
Transaction timestamps and reconciliation records.

Do not send us your UPI PIN, CVV, OTP or other payment authentication secrets through support channels.

Complete payment credentials entered into a payment provider’s interface are handled according to that provider’s processes and privacy notice. Our application and server logs should not record sensitive payment authentication credentials.

2.5 Device, notification and operational information

Our services and integrated providers may process information necessary for service delivery, security and troubleshooting, including:

App version, operating-system version and relevant device information.
IP address, request timestamps and network information.
App-instance, installation or notification identifiers where used.
Push-notification tokens.
Authentication, order-status, payment-status and delivery events.
Technical error and service logs.

Additional analytics, advertising or diagnostic collection depends on the services actually enabled. We describe material changes before introducing new uses where notice or consent is required.

3. Location and device permissions

3.1 Fyoody

The Customer app requests location access while you use the app to help identify a delivery address, determine serviceability and show nearby restaurants. The Customer app does not request Always location authorization or collect your device location in the background for continuous tracking.

Displaying a delivery partner’s progress is separate from collecting the customer device’s location.

You may deny or revoke location permission through device settings. Manual address selection may remain available where supported, but location-dependent features may be limited.

3.2 Fyoody Partner

Restaurant location and address information are used for restaurant discovery, serviceability, pickup coordination and delivery operations. Where the Partner app requests device-location permission, it is used for the location-dependent function explained at the time of the request.

3.3 Fyoody Driver

The Driver app uses location to support driver availability, assignment, navigation, pickup, delivery progress, estimated arrival and operational safety.

Location collection is associated with being online or performing delivery-related activity. Where background collection is implemented, location may continue to be transmitted while the app is minimized during those activities, subject to the disclosure presented in the app, your consent and device permissions.

Going offline or completing a delivery does not erase location records already legitimately retained. You can control permissions in device settings, although disabling required permissions may prevent delivery-related functions.

3.4 Other permissions

Depending on the app and feature, we may request notifications, camera or selected-file access for order updates, onboarding documents, restaurant content or support submissions.

Permissions are requested for the relevant feature. We do not treat a permission available in one Fyoody app as permission for another app.

4. Why we use information

We use personal information to:

Register, authenticate and secure accounts, including OTP verification.
Provide restaurant discovery, address selection and serviceability checks.
Process orders, payments, cancellations, refunds and invoices.
Coordinate restaurants, customers and delivery partners.
Calculate delivery-related distances, charges and estimates.
Provide tracking, notifications and support.
Verify merchant and driver eligibility and documentation.
Calculate earnings, settlements and payouts.
Investigate complaints, payment discrepancies, fraud and safety incidents.
Maintain service reliability and investigate technical problems.
Meet applicable accounting, tax, food-safety, payment and other legal requirements.
Send optional marketing communications where permitted and subject to applicable choices.

We do not use consent for one purpose as blanket permission for unrelated processing. Where consent is required, it can be withdrawn through available settings or by contacting us, subject to lawful retention and processing requirements.

5. Who receives information

5.1 Restaurants and merchants

For order fulfilment, we disclose relevant customer and order information to the selected restaurant, such as item selections, order identifiers, customer name and necessary delivery/contact instructions.

We limit disclosure to what is appropriate for the relevant operational function.

5.2 Delivery partners

The assigned delivery partner receives information needed to complete the delivery, including pickup and delivery locations, relevant customer contact details, delivery instructions and order identifiers.

5.3 Customers

Customers may see relevant restaurant information and delivery-partner information, such as the driver’s display name, delivery progress, relevant location and contact options where provided.

We do not publish drivers’ bank details, identity documents or other private onboarding records to customers.

5.4 Technology and service providers

Providers used by the platform include, as applicable:

Google Firebase services, including Firebase Cloud Messaging, for application services and notification delivery.
Apple Push Notification service for notification delivery on Apple devices.
Google Maps services for maps and related location functionality.
Razorpay and participating financial/payment providers for payment and refund processing.
Our contracted hosting, database, storage, SMS/OTP, support and security providers.

Not every provider is included in every app, and a provider’s presence does not mean every one of its optional services is enabled.

Providers receive data needed for their functions. We use appropriate contractual and technical safeguards and require service providers to protect information consistently with applicable law and their agreed responsibilities. Providers may also have independent legal obligations described in their own privacy notices.

5.5 Legal obligations and corporate transactions

We may disclose information when necessary to comply with law or valid legal process, address fraud or safety risks, protect legal rights, or complete a lawful corporate transaction.

Corporate transfers remain subject to applicable confidentiality, notice and data-protection obligations.

We do not sell personal information.

6. Processing locations

We operate in India. Depending on the provider and service configuration, information may be processed in India or other countries. Where cross-border processing occurs, we apply safeguards required by applicable law. We do not represent that all platform information is stored exclusively in India.

7. Retention

We retain identifiable information only for the period needed for the relevant purpose or applicable legal requirements.

Account and profile information is maintained while the account is active, subject to deletion requests.
Order, payment, refund, invoice and settlement records may be retained for accounting, tax, reconciliation, chargebacks and legal claims.
Merchant and driver verification records are retained for onboarding, safety, compliance and related legal requirements.
Support, security and fraud records are retained for the relevant investigation, dispute or legal obligation.
Detailed location and technical records are retained only for relevant operational, safety, troubleshooting or legal purposes, not indefinitely merely because storage is available.

Information retained after account deletion is limited to the necessary records, restricted from ordinary account use and deleted or irreversibly anonymized when the retention reason ends.

Where backup copies exist, deletion from backups follows the backup lifecycle. Retained backup data is restricted and is not used to restore a deleted account for ordinary business use.

You may contact us for information about the retention applicable to your request.

8. Account deletion and privacy choices

8.1 How to request deletion

You can initiate account deletion through the account/profile settings in Fyoody, Fyoody Partner or Fyoody Driver.

For the Fyoody, Fyoody Partner & Fyoody Driver app, the current path is:
Profile → Account Settings → Delete my account

You can also look for more details related to account deletion from the below link.

https://www.nexasourcetechnologies.in/delete-account

Specify the app/account concerned. We may verify ownership before acting, but we will not ask for your password, payment PIN or unrelated sensitive documents.

8.2 What happens next

Under our current deletion workflow:

Account access is deactivated when the request is accepted.
Permanent deletion of eligible account data is scheduled after seven days.
During that period, the same phone number cannot be used to log in or create a replacement account.
If the request was accidental, contact support within seven days. Reversal is subject to verification and whether deletion has already occurred.
Eligible profile information, saved addresses, favourites, notification tokens, preferences and associated personal data are deleted or irreversibly anonymized.
Specific records may be retained for the purposes described in Section 7.

Deletion is not limited to disabling login. Uninstalling the app alone does not delete your account.

Deleting an account does not cancel an existing refund entitlement or extinguish lawful settlement, payment or complaint rights. Contact support for assistance with outstanding matters.

8.3 Other choices

Subject to applicable law, you may request access, correction, deletion, consent withdrawal or assistance with other privacy rights.

You can:

Update available account fields in the app.
Manage device permissions.
Opt out of optional marketing.
Contact our privacy/grievance contact.

Withdrawing a permission or consent does not automatically erase records lawfully retained before withdrawal. We explain material consequences where relevant.

9. Security

We use appropriate technical and organizational safeguards, including access restrictions, authentication controls, secure transmission, restricted staff access and security monitoring.

Personal and sensitive data transmitted by our services must be protected using appropriate modern encryption, such as HTTPS/TLS.

No system can guarantee absolute security. Protect your device and authentication information and report suspected unauthorized access promptly. Where required, we notify affected people or authorities of security incidents in accordance with applicable law.

10. Children

Fyoody accounts are intended for adults aged 18 or older. The platform is not designed for children to independently create accounts or transact.

An adult may order food for others but must not provide unnecessary personal information about a child.

If we learn that a child’s personal information was collected contrary to applicable requirements, we will take appropriate steps, which may include restriction or deletion. Contact us to raise a concern.

An app-store content age rating is not a statement of contractual eligibility.

11. Changes

We update this policy when our practices, services or legal requirements change.

We publish the revised date and provide additional notice or obtain fresh consent where required for a material change. We will not rely solely on continued use where applicable law requires affirmative consent.

12. Contact and grievance handling

Legal entity: Nexasource Technologies Private Limited
Platform: Fyoody, Fyoody partner & Fyoody Driver
Email: support@nexasourcetechnologies.in
Website: https://www.nexasourcetechnologies.in/

Grievance Officer: Suhas S
Designation: Operational Head
Email: support@nexasourcetechnologies.in
Business/contact address: No,1, 3rd cross, Basaveshwara layout, Nagashetty halli, Bangalore - 560094
Contact telephone: +91 9731163031

For consumer complaints, we acknowledge receipt within 48 hours and seek to resolve the complaint within one month. Privacy requests are handled within the time required by applicable law.

We may ask for proportionate identity-verification information. Contacting us does not limit your right to approach an appropriate regulator, consumer commission or other competent authority.