Privacy Policy — Tummy & Mummy

Tummy & Mummy ("T&M", "we", "us") operates a homemade food marketplace platform connecting home-based food producers ("Mummy Producers") with consumers ("Tummy Consumers") and verified service providers ("Helpers"). Our platform is accessible at tummyandmummy.com and associated subdomains.

• Account information: name, mobile number, email address, delivery address
• Producer information: Aadhaar number (for KYC verification), PAN, bank details, FSSAI license number, kitchen photos, product photos
• Order information: products ordered, delivery addresses, payment details (processed by Razorpay — we do not store card numbers)
• Usage data: pages visited, features used, device information, IP address
• Voice data: conversations with Asha (our voice AI assistant) are recorded and processed by ElevenLabs for onboarding assistance
• Location data: approximate location for delivery area matching and nearest helper recommendations

• To operate the marketplace and process orders
• To verify producer identity (KYC) and food safety compliance
• To match producers with verified service providers
• To send transactional messages via WhatsApp (MSG91) and email
• To improve our platform and AI assistant
• To comply with FSSAI and other regulatory requirements

• Razorpay (payment processing) — razorpay.com/privacy
• MSG91 (WhatsApp and SMS communications) — msg91.com/privacy
• ElevenLabs (voice AI processing) — elevenlabs.io/privacy
• Supabase (data hosting) — supabase.com/privacy
• Google Analytics (anonymous usage analytics, only with your consent)

We retain your account data as long as your account is active. Order records are retained for 8 years per Indian tax law. Voice recordings are retained for 90 days for quality improvement, then deleted. You can request deletion of your account by contacting us.

• Right to access your personal data
• Right to correction of inaccurate data
• Right to erasure (with exceptions for legal obligations)
• Right to grievance redressal
• Right to nominate another person to exercise rights in case of death or incapacity

We use industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure payment processing via Razorpay PCI-DSS compliance, and access controls on our database.

We use essential cookies for platform functionality and optional analytics cookies (Google Analytics) only with your explicit consent.

For privacy concerns, contact our Data Protection Officer at privacy@tummyandmummy.com or call +91-XXXXXXXXXX.

We may update this policy. Material changes will be communicated via WhatsApp or in-app notification.