This page explains how HomeTiffin, made by AV Technologies, handles information. HomeTiffin is one of the apps covered by the AV Technologies Privacy Policy (last updated September 2026). The parts that apply to HomeTiffin are below, in the same words, together with a plain list of what HomeTiffin stores.
What HomeTiffin stores
- Your account: your name and email address. If you sign in with Google, the name and email address on your Google profile.
- Your kitchen: its name, your public page, menus, plans, prices, items and the settings you choose.
- Your customers: the names, phone numbers, addresses and notes you enter, their meals, leaves and pauses, and their order history.
- Orders placed on your kitchen page or menu link: the name, phone number, delivery address and note the customer types.
- Payments and expenses you record. Your customers pay you directly; HomeTiffin does not take their payments and never sees card details.
- If you turn on alerts in the phone app: a notification token for your phone.
The AV Technologies Privacy Policy, as it applies to HomeTiffin
- Scope. This covers information we handle when you sign up, use our products, or contact us — whether you are a business that uses us or a person using a tool built for one.
- What we collect. Account and business details (name, email, phone, business name); content you upload (photos, scanned slips, product/customer lists, orders, notes); usage data (device, browser, approximate location from IP, actions taken); payment records (never your full card number); and cookies to keep you signed in and remember preferences.
- How we use it. To run and maintain the apps; power features you ask for; send the reminders and reports you set up to your own customers; take payments and manage your subscription; provide support; and keep the service secure and meet legal obligations.
- Sharing and processors. We do not sell your information. We share it only with providers needed to run the product: Supabase (database, sign-in, storage), Cloudflare (hosting), payment processors (such as Razorpay), WhatsApp / Meta (the messages you set up), Google Firebase Cloud Messaging and Apple Push Notification service (app notifications, which can include a business name and amounts), and Resend (email, such as sign-in, invitation and summary emails). We may also share it if the law requires, or to protect rights and safety.
- Retention. We keep your information while your account is active and for a reasonable period afterwards (support, legal, accounting, restore), then delete or anonymise it. You can ask us to delete it at any time, except records the law requires us, or a business using our apps, to keep.
- Your rights. You can ask us to access, correct, delete or export your data. Just email us; many apps also let you edit or export your records directly in the product.
- Regional rights. EEA / UK (GDPR): access, correct, delete, restrict, object and portability; our legal bases are performing our contract, our legitimate interests, your consent where asked, and legal obligations; you can withdraw consent and complain to your local authority. California (CCPA / CPRA): we do not sell your personal information or share it for cross-context advertising. India (DPDP Act 2023): you may access, correct, complete, update and erase your personal data, nominate someone to exercise your rights, and raise a grievance with us at the contact below.
- International transfers. AV Technologies is in India, and our providers may store and process data in India, the United States, the European Union and other countries. Using the service from outside India means you consent to that transfer and processing, with reasonable safeguards.
- Security and data loss. We take reasonable steps to protect your information (secure hosting, encrypted connections, access controls, per-account isolation), but no system is perfectly secure. To the maximum extent permitted by law, we are not liable for any data loss, corruption, breach or unauthorised access beyond those reasonable steps — keep your own backups of anything important.
- Children and minors. You must meet the minimum age to use the service — at least 13, or higher where the law requires. Where a user is below the age of digital consent in their country (for example under 18 in India under the DPDP Act 2023, or under 16 in parts of the EEA), a parent or guardian must consent on their behalf. We do not knowingly collect personal data from children below these ages; if you believe we have, contact us and we will delete it.
- Changes. We may update this policy; the date above shows the latest version, and continued use means you accept it.
- Contact. Questions about this policy or your data? Email hello@avtechnologies.io.
Your data in HomeTiffin
- Download: in the web app, Settings → Download my data gives your customers, payments, orders, order items, daily records and expenses as spreadsheet (CSV) files.
- Delete: Settings → Delete my account schedules your account and kitchen for deletion after 14 days; signing back in before then cancels it. You can also use this page.