Privacy Policy

1. Introduction

This Privacy Policy explains how NutriBox, a product of MAK Services (“NutriBox”, “we”, “us”), collects, uses, shares and protects your information when you use the NutriBox app (customers), the NutriBox Shop app (partner shops) and this website.

By using our apps you agree to this policy. We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

In short: we collect only what we need to deliver your boxes, we never sell your data, and you can delete your account anytime.

2. Information we collect

Customers (NutriBox app)

Information	Why we need it
Mobile number	Login with a one-time password (OTP), delivery contact and order updates
Name and email (email optional)	Your profile, invoices and support
Delivery address and map location (latitude/longitude)	Finding the nearest partner shop and delivering your box
Delivery instructions	Helping the delivery person reach you
Subscription and order details (box, plan, extras, dates, skips, pauses)	Running your plan, invoices and support
Payment status and payment reference IDs	Confirming payments and refunds. We do not collect or store card, bank or UPI PIN details.
Device notification token	Sending order and delivery notifications

Location is used only when you choose your address (current location or map). The customer app does not track your location in the background.

Partner shops (NutriBox Shop app)

Shop name, owner name, mobile number, address, shop photo and delivery radius, used for registration, approval and order assignment.
Live location while delivering: when the shop marks an order “Out for delivery”, the Shop app shares the device location (about every 15 seconds) so customers with a box on the way can track it. Sharing stops automatically when those deliveries are completed, and a notification is shown the whole time it is on.
Delivery status updates (packed, out for delivery, delivered, not available).

3. How we use your information

To create and secure your account (OTP login).
To process subscriptions, payments, invoices and refunds.
To assign your orders to the nearest partner shop and deliver them.
To send order, payment and delivery notifications, and important service messages.
To show live delivery tracking while your box is on the way.
To provide customer support and prevent fraud or misuse.
To improve our service using aggregated, non-identifying reports.

We do not use your data for third-party advertising.

We never sell your personal data. We share only what is necessary:

Your assigned partner shop: your name, mobile number, delivery address, map location, instructions and order details, so it can pack and deliver your box.
Customers of a shop: while a box is “Out for delivery”, only that customer can see the shop’s live delivery location.
Service providers who process data for us:
- Google Firebase (secure database, login, file storage, notifications and cloud functions)
- Google Maps Platform (maps and address lookup)
- Razorpay (online and UPI payments)
- Fast2SMS (OTP text messages)
Legal reasons: when required by law, court order or government authority, or to protect the rights and safety of our users.

5. Data storage and security

Data is stored on Google Cloud / Firebase servers with encryption in transit (HTTPS) and at rest.
Access is protected by security rules: customers see only their own data, shops see only their assigned orders, and only authorised NutriBox admins can view all records.
Payment secrets and SMS keys are kept on the server only, never inside the apps.
OTPs are stored in hashed form and expire within minutes.

No method of transmission or storage is 100% secure, but we use industry-standard measures to protect your data.

6. How long we keep data

Account and profile data: until you delete your account.
Order, payment and invoice records: for the period required by tax and accounting laws, even after account deletion.
Notifications: deleted with your account.
Live delivery location: only the latest position is kept, and it is reset daily.

7. Your rights and choices

Access and correction: view and edit your name, email and address in the app under Profile.
Notifications: turn off notifications in your phone settings anytime.
Location: you can deny location permission and pick your address manually on the map.
Deletion: delete your account anytime (see below).
Grievance: contact us using the details below. We aim to respond within 7 working days.

8. Delete your account

Option 1: in the app (instant)
Open the NutriBox app, go to Profile and tap Delete my account, then confirm.

Option 2: by email
Send an email to support@makservices.in from any address, with the subject “Delete my NutriBox account” and your registered mobile number. We will verify it and delete the account within 7 working days.

What is deleted: your profile, saved address and location, notification history and login.

What is kept: past order, payment and invoice records, only as required by law.

If you have an active or paused plan, please contact support first so any remaining deliveries or refunds can be settled.

Partner shops can request deletion of their shop account by emailing us from their registered details.

9. Children

Our apps are intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the “Last updated” date. Significant changes will be notified in the app.

11. Contact us

NutriBox (MAK Services)
India
Email: support@makservices.in
Website: makservices.in/nutribox