🍳 Rasoi — Privacy Policy

Who we are

Rasoi is a service of ABSU Mobilities (proprietor: Sumaiya Fatima), Hyderabad, Telangana, India — the data controller for this service. Contact: support@rasoisaathi.in.

What we collect and why

• Account: email address and a salted password hash (PBKDF2) — to sign you in. Up to 6 logins per home, created by your home.
• Kitchen data you enter: pantry items, dishes, recipes, meal plans, leftover coverage choices, shopping lists, budget, purchases, cook history, family member profiles (name/emoji/diet/appetite as you type them) — this is the product; it is stored only to serve your home.
• Health figures you choose to enter: for an adult member, birth year, gender, activity level, height, weight, waist, weigh-ins, a weight goal, food exclusions and a pregnancy note, entered by your home and shown only on that member's own sheet. They drive the nutrition targets, the BMI and waist-to-height lines and the week report; nothing is inferred, they are never shared or sold, and clearing a field removes it. With an AI key set, a nutrition question about a member can carry that member's figures to Gemini as part of the answer (see AI helper below).
• Payments: for Razorpay Checkout we store the Razorpay order ID and payment ID, server-calculated amount, selected plan, billing state or union territory, GST treatment, capture/approval timestamps and invoice number. For manual UPI fallback we store the UTR and the same invoice fields. These references support activation, duplicate-payment prevention, refunds and statutory records. We never receive or store your full card number, CVV, bank password or UPI PIN.
• Usage counters: we record that your home used the app on a given day (a daily hit count only — no URLs, no content, no device fingerprinting) to understand retention and to know who to help.
• Signed-in app sessions: while Rasoi is visible in the foreground, a random per-tab/app-launch identifier sends a heartbeat about every 30 seconds. We store the signed-in account and home, session start/last-seen/end times, active foreground seconds, current section (Cook, Plan, List or Pantry), client channel (web/PWA/native), app version and chosen language. This helps us diagnose usage and improve workflows. We do not store IP addresses, GPS coordinates, user-agent strings, physical location or device fingerprints. Background time is not counted. Session detail is deleted after 90 days and is erased immediately when the home is deleted.
• Anonymous public counter: the visitor display uses random browser and tab identifiers to estimate unique browsers and sessions active in the last two minutes. Only SHA-256 hashes of those random IDs are stored — no IP address, user agent or page history. Visitor hashes are retained for the lifetime total; inactive session hashes are deleted after seven days. Clearing browser storage creates a new visitor ID.
• Morning notification (optional): if you enable the 7am menu notification, your browser's push subscription (an anonymous push endpoint) is stored. Disable it any time by revoking notification permission in your browser/phone.
• Support email: if you write to us, we keep the correspondence.
• Bill scans: the photo or PDF you upload is read for text on our server and discarded. What stays is the bill record: shop name, date, total, the item lines we read (with their prices), and any shop words you teach Rasoi. That record feeds your budget and price history and is erased with the home.
• AI helper (optional, your own key): the AI tab works only if your home adds its own Google Gemini API key. The key is stored encrypted on our server and shown back only as its last characters. While a key is set, what you type in the AI tab, any photos you attach and any voice notes you record are sent to Google's Gemini API under Google's terms so it can answer, together with the kitchen facts the answer needs (pantry, plan, budget, prices, cook history, nutrition figures); photos and audio are processed and discarded by us, and the chat text is kept for about 30 days (you can clear it any time). Without a key nothing is sent to Google, and the app's own commands still work.
• Shop link (optional): if you invite your kirana to receive orders in Rasoi, that phone's push subscription and the orders you send it are stored with your home. Removing the link or deleting the home removes them.

What we deliberately do NOT do

• No ads, no ad networks and no selling of personal data.
• No third-party analytics or tracking SDKs. No cookies except your own login session.
• Bill-scan photos are processed for text and never stored; only the text we read from them stays, as described above.
• Location (if you use "set region from location") never leaves your device — only the chosen cuisine pack name is saved.

Payment processor

If you choose secure Checkout, Razorpay Software Private Limited processes the payment under its own privacy and security terms. We send Razorpay the exact order amount, currency, an internal receipt, selected plan metadata and the account email used to prefill Checkout. Razorpay returns payment/order references and capture status; card, bank and UPI credentials stay with Razorpay and the relevant bank/payment network. Manual UPI remains available and does not use Razorpay Checkout.

Where data lives

On our server in a separate SQLite database per home — no shared tables between homes. Daily encrypted-transport backups are kept for 14 days on the server and 30 days offsite, then rotate away permanently. If you press Backup + sync, Rasoi also keeps up to five integrity-checked checkpoints of that home's database on the same server; older checkpoints rotate out and all of them are removed when the home is deleted. Connections use HTTPS.

Deleting your data

Single items can be removed inside the app at any time: a family member and their figures, a plan row, a weigh-in, a saman you added, a brand, or the AI chat (clear chat). The server deletes the row; it does not hide it. Anything the app has no control for, email us and we remove it by hand.

The home's owner can delete the home from inside the app (⚙ settings → home → delete home, then confirm with the password). This is immediate and irreversible: pantry, dishes, recipes, plans, budget, history, bill records, AI chat, the encrypted AI key and all logins are erased from the server. Payment records (invoice number, amount, plan, payment reference) are retained for legal/audit purposes only. Uninstalling the app never deletes anything: log back in and your home is intact; only an explicit delete removes data.

Homes started without an account ("start without an account") hold no email or password; the only key is the login session on that device. Such a home can be deleted from the same place without a password, and if nobody opens it for 30 days the server erases it the same way. Saving the home (adding an email and password) turns it into an ordinary account and stops that clock.

No longer have the app installed? Email support@rasoisaathi.in from the address you signed up with and ask for the home to be deleted; we confirm by reply and erase it the same way.

Children

Rasoi is a household tool intended for adults managing a kitchen; it is not directed at children under 13 and we knowingly collect no data from them.

Changes & contact

If this policy changes materially we will note it on this page with a new effective date. Questions or requests (access, correction, erasure): support@rasoisaathi.in — we reply within 24 hours.

← back to Rasoi