Privacy Policy

Last Updated: September 2026

LunchBuddy ("App", "we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

1. Information We Collect

1.1 Information You Voluntarily Provide

We collect information you provide directly through the App, including:

• Account Information: Email address, name, job title, company name
• Profile Information: Bio, gender, age, profile photo, casual interests, and icebreakers
• Work Email Verification: Secondary corporate email address (used to verify your work status)
• Availability Schedule: Your preferred days for in-office lunch meetings
• Feedback & Communications: Bug reports, feature suggestions, feedback, and screenshots you submit
• Chat Messages: Messages sent within the App to matched users or group tables
• Ratings & Reviews: Feedback about your lunch experiences, reliability ratings, and vibe checks

1.2 Information Collected Automatically

When you use the App, we automatically collect:

• Location Data: Precise GPS location coordinates to verify you are within your tech park and facilitate venue suggestions. This is collected only when you explicitly allow location permissions.
• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: Information about how you interact with the App (e.g., features used, time spent, actions taken)
• Log Data: Server logs including IP address, access times, error messages

1.3 Camera and Photo Library Access

The App requests access to:

• Camera: To allow you to take a profile photo
• Photo Library: To allow you to select an existing photo for your profile

You have full control over these permissions and can revoke them at any time through your device settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Information Used	Legal Basis
Account Creation & Authentication	Email, name, corporate email	Contract performance
User Matching & Recommendations	Profile info, interests, location, availability	Contract performance
Location Verification	GPS location coordinates	Contract performance & fraud prevention
Venue Suggestions	Location, preferences, match data	Contract performance
Reliability & Safety Scoring	Feedback, check-in data, ratings	Contract performance & legitimate interest
Customer Support	Contact info, feedback, usage data	Legitimate interest
App Improvement & Analytics	Usage data, error logs, feature interactions	Legitimate interest
Safety & Abuse Prevention	Block records, reports, user behavior	Legitimate interest & legal obligation

3. Third-Party Services

We use the following third-party services that may collect and process your information:

3.1 Authentication

• Supabase Auth: We use Supabase to handle user authentication and email verification. Supabase stores your email address and authentication credentials.
  Supabase Privacy Policy

3.2 Location & Venue Services

• Google Places API: When you search for venues or use Lunch Now, we use Google Places API to provide venue suggestions, addresses, and location information.
  Google Privacy Policy

4. Data Sharing & Disclosure

4.1 Information Shared with Other Users

To facilitate the lunch matching experience, the following information is shared with other users:

• Name and profile photo
• Job title and company
• Bio and interests (casual interests & icebreakers)
• Gender and age (used for avatar fallback icons)
• Reliability score (shown as a trust badge)
• Chat messages and communications
• Contact information (only if both users opt in for "keep in touch")

4.2 Information NOT Shared

The following information is NEVER shared with other users:

• Email address (except for corporate email verification badge)
• Exact GPS location coordinates
• Device information or identifiers

4.3 Service Providers

We share information with service providers who assist us in operating the App and providing services to you (e.g., Supabase for authentication, Google for location services). These service providers are contractually obligated to use your information only as necessary to provide services.

4.4 Legal Compliance & Safety

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the safety, rights, and property of LunchBuddy, our users, or the public
• Prevent or detect fraud, security issues, or illegal activities

5. Data Retention

We retain your personal information for as long as necessary to provide services and fulfill the purposes described in this Privacy Policy. Specifically:

• Account Information: Retained while your account is active and for 90 days after deletion for recovery purposes
• Location Data: Processed in real-time; not stored long-term unless for analytics
• Chat Messages: Retained indefinitely for user reference (can be deleted by users)
• Feedback & Bug Reports: Retained for improving the App
• Usage & Log Data: Retained for 90 days for troubleshooting and analytics

6. Your Privacy Rights & Choices

6.1 Access & Portability

You have the right to access your personal information and request a copy of your data. You can request a data export by contacting us at admin.quantiva@gmail.com.

6.2 Correction & Updates

You can update your profile information (name, job title, interests, bio, photo) directly within the App at any time.

6.3 Deletion & Right to Be Forgotten

You have the right to request deletion of your personal data. To delete your account and associated data, please:

1. Email us at admin.quantiva@gmail.com with your request to delete your account
2. Include your registered email address
3. We will delete your data within 30 days, except where retention is legally required

6.4 Opt-Out of Communications

You can opt out of promotional emails through your App settings or by emailing us.

6.5 Location & Permission Control

You can revoke location, camera, and photo library permissions at any time through your device settings. Revoking location permission will limit your ability to use location-dependent features like Lunch Now.

6.6 Cookie & Tracking Choices

Most mobile apps do not use cookies, but if we use similar tracking technologies, you can manage preferences through your device settings.

7. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS encryption (TLS 1.2 or higher)
• Encryption at Rest: Sensitive data is encrypted in our database
• Authentication: Supabase Auth handles secure password management and JWT token-based sessions
• Access Controls: Only authorized personnel with business need can access personal data
• Password Security: Email-based OTP authentication (no passwords stored)
• Photo Storage: Profile photos are stored securely and not exposed to unauthorized access

Note: While we implement strong security measures, no system is completely secure. Please report any security vulnerabilities to admin.quantiva@gmail.com.

8. Children's Privacy

LunchBuddy is designed for professionals and requires a corporate email address to sign up. The App is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal information, we will delete such data immediately. Parents or guardians who believe their child has used LunchBuddy should contact us at admin.quantiva@gmail.com.

9. Data Storage & Location

LunchBuddy is based and operated in India. Your personal data is primarily stored and processed in India in compliance with the Digital Personal Data Protection Act, 2023. If you are accessing the App from outside India, your data may be transferred to India for storage and processing. By using LunchBuddy, you consent to the processing and storage of your information in India.

10. Data Protection & Legal Compliance

10.1 India Data Protection Act (DPDP Act, 2023)

LunchBuddy is operated in India and complies with the Digital Personal Data Protection Act, 2023 (DPDP Act). Under this Act, users have the following rights:

• Right to Access: You can request a copy of your personal data we hold
• Right to Correct: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data (with lawful exceptions)
• Right to Data Portability: You can request your data in a portable format
• Right to Withdraw Consent: You can withdraw your consent to our processing of your data
• Right to Grievance Redressal: You can lodge a complaint with our Data Protection Officer

To exercise any of these rights, contact us at admin.quantiva@gmail.com. We will respond to requests within 30 days.

10.2 GDPR (European Residents)

If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can correct inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can limit how we process your data
• Right to Data Portability: You can request data in a portable format
• Right to Object: You can object to certain processing activities
• Right to Lodge a Complaint: You can file a complaint with your national Data Protection Authority

10.3 CCPA (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and use
• Right to Delete: Request deletion of personal information (with exceptions)
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Correct: Correct inaccurate personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at admin.quantiva@gmail.com.

11. Block & Report Features

LunchBuddy includes safety features to protect users:

• Block User: You can block another user to prevent matching and communication. Blocks are bidirectional and confidential.
• Report User: You can report inappropriate behavior, harassment, or policy violations. Reports are reviewed by our moderation team.
• Data Associated with Reports: When you report a user, we collect your block reason and report details to investigate and take appropriate action.

12. Third-Party Links & Services

The App may contain links to third-party websites and services (e.g., Google Places, Razorpay). This Privacy Policy applies only to LunchBuddy. We are not responsible for the privacy practices of third-party services. Please review their privacy policies before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy or by sending you an email notification. Your continued use of the App after changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or want to exercise your rights, please contact us:

15. Summary of Key Points for Google Play

© 2026 Quantiva. All rights reserved. | LunchBuddy Privacy Policy