1Introduction
RotiJet ("the app", "we", "us", or "our") is a food-ordering and delivery application published by The Soft Mechanic. This Privacy Policy explains what information the RotiJet Android app collects, how we use it, who we share it with, and the choices and rights you have. The app is intended for users in India.
By creating an account and using RotiJet, you agree to the practices described in this policy. If you do not agree, please do not use the app.
If you have any questions, contact us at thesoftmechanic.help@gmail.com.
2Information We Collect
RotiJet requires you to sign in before using its core features. We collect only the data described below.
Account and profile information
- Name — taken from your Google account when you sign in with Google, or set to a default and editable by you in your profile when you sign in by phone.
- Email address — collected when you sign in with Google. If you sign in with a phone number, no email is collected unless you add one.
- Phone number — collected when you sign in using phone/OTP verification, or when you enter it in your profile or in a delivery address.
- Profile photo URL — if you sign in with Google, we store the web link to your Google account's profile picture so we can display it. The app does not access, capture, or upload photos from your device.
- Account identifier (User ID) — a unique account ID (Firebase Authentication UID) is created to identify your account and link your data. Your phone number and/or Google account act as your sign-in identifiers.
Delivery addresses
The delivery addresses you save — including a label, the free-text address line (and any pincode you type), and a contact phone number for that address.
Device location (precise GPS)
RotiJet does collect precise device location, but only when you choose to:
- When you tap "Use my current location" on the address screen, the app reads your device's current GPS coordinates (latitude/longitude) to help fill in and pinpoint your delivery address. These coordinates are saved with the address and with orders placed to that address so the delivery rider can find the drop-off point.
- This capture is one-time, on-demand, and only while the app is open (foreground). RotiJet does not track your location in the background and does not monitor your location continuously.
- Location capture is optional — you can instead type your address manually without granting location access.
We request the ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION permissions for this feature.
Order and purchase history
Details of the orders you place, including the items, quantities and prices, subtotal, delivery fee, discount and any coupon used, order total, the Cash on Delivery (COD) payment method, payment status, and the order time.
Notifications token
A push-notification token (Firebase Cloud Messaging token) is generated for your device so we can send you order-status updates.
RotiJet AI / Food Hero voice (optional, on-device)
Food Hero uses your microphone only after you choose Talk, accept the in-app explanation, and grant Android microphone permission. Audio is processed by the phone’s on-device speech-recognition service to create an editable food-query draft. Capture is limited to 15 seconds while the AI screen is open; cancel, closing the controls, or leaving the screen stops it. RotiJet does not save or upload this audio, or send the voice draft to its servers, analytics or advertising services. You review the draft and choose Send. If you separately enable local search history, submitted queries can be retained in that device-only history and cleared through the AI History controls.
Spoken replies use the phone’s installed offline Hindi/English text-to-speech voices. Automatic replies start enabled for a new AI screen session and can be muted or stopped in the header menu; this does not enable the microphone. Missing offline support leaves typing available: the feature does not fall back to cloud speech or automatically download voice/language models. An installed-voice status check reads speaker metadata without recording or speaking. The app passes speech data to the selected on-device Android voice services for these purposes.
Hero size, movement, flight speed, speech speed, microphone language, pinned position, smart-reading setting and permission-prompt history are saved privately on this phone, excluded from Android backup/device transfer, and removed by clearing the app’s storage or uninstalling. Reset position removes the saved pin. Hide/Show is temporary for the AI screen session and does not change voice controls. These control preferences do not contain audio, transcripts or account identifiers. Microphone consent/grants are not saved as Hero preferences. You can decline microphone access, revoke it in Android App settings, and continue typing without it.
Optional on-device food tools
Group budget planning uses the menu already loaded on your phone and your chosen filters, headcount and dish-price budget. It calculates menu-item quantities and subtotals locally; it does not infer portion size, nutrition or whether a meal will feed a person. Delivery, taxes and other charges are checked separately in checkout. Reviewing a plan does not automatically place an order.
If you choose Save in Saved quick requests, the name and food-request text you enter (including any dictated text you choose to save) are kept on this phone, up to six requests. This is separate from optional recent-search history and is never enabled automatically. You can edit, remove individual requests or clear all saved requests in those controls. Using a request fills an editable input; you choose Send. These records and optional food preferences/history use private storage excluded from Android backup and device transfer, and are removed by clearing app storage or uninstalling. They are not sent to RotiJet servers, cloud models, analytics or advertising services by these tools. Other people using the app on the same phone may see them; avoid personal or payment details. Raw microphone audio is not saved.
Feedback and support submissions
When you choose to send App Feedback, we collect the feedback type, rating, subject, message, app version, Android version, and device make/model. If you use the app without an account login, your signed-in identity is not verified, or the app cannot safely link the session to a RotiJet profile, the feedback is handled in guest mode. A guest-mode record uses only a pseudonymous one-way-hashed Firebase session identifier for duplicate prevention and abuse limits; no raw Firebase UID, RotiJet account ID, name, email address, or phone number is attached, so our support team cannot reply directly. Only for a successfully linked and verified signed-in account, if you enable “Support may contact me”, we attach your name and available Firebase-verified email address or phone number so our support team can reply. Please do not include payment-card, UPI PIN, password, contact details, or other sensitive information in a feedback message.
Diagnostics and device information (automatically collected)
The app uses Google Firebase Crashlytics and Firebase Analytics, which automatically collect:
- Crash logs and diagnostics — crash reports, error information, and technical details such as device model, operating-system version, and an installation identifier, tagged with your account ID to help us diagnose problems.
- App-activity and device identifiers — the Firebase Analytics SDK automatically collects app-usage information and app-instance/installation identifiers. It may also use your device’s advertising ID for analytics and measurement. RotiJet shows no ads: we do not use this identifier to build advertising profiles and we do not share it with advertisers. You can reset or delete your advertising ID at any time from your device Settings › Privacy › Ads.
What we do NOT collect
- We do not collect or store card, UPI, CVV, PIN, or bank account details. Online payments are handled entirely by our payment partner PayU; those details are entered with PayU and never reach RotiJet.
- We do not access your camera, contacts, or hardware identifiers such as your IMEI or Android ID. If you choose to set a profile photo, you pick a single image using the system photo picker — the app is given only that one image and has no access to the rest of your gallery.
- Your cart and favourites are stored only on your device and are not transmitted to us, except that the cart becomes an order when you check out.
3Payments
RotiJet accepts Cash on Delivery (COD) and online payment — UPI, cards, net-banking and wallets.
Online payments are processed by our payment partner PayU. You enter your card, UPI, CVV, PIN or bank details on PayU’s own screens. RotiJet does not request, receive, process or store any of those details.
To start an online payment we pass PayU the order amount and the delivery contact phone number for that order. We do not send your name or email address to PayU. PayU tells us only whether the payment succeeded, together with its own transaction reference, which we store against your order so we can confirm and support it.
For Cash on Delivery you pay the applicable amount to the delivery rider when your order is delivered; we record that amount and its payment status to fulfil the order.
4How We Use Your Information
We use the information we collect to:
- Create and manage your account and let you sign in.
- Take, process, and fulfil your food orders.
- Deliver your order to the correct location, including using your saved address and the precise GPS drop-point you provide.
- Contact you about your order and enable delivery riders to reach you.
- Record the order amount and its payment status — for Cash on Delivery, and for online payments the confirmation and transaction reference returned by PayU.
- Send you order-status notifications.
- Show you your own order history.
- Review feedback you choose to submit, reply when you permit contact, diagnose reported bugs, and improve RotiJet.
- Diagnose crashes, fix bugs, and improve the reliability and performance of the app.
5Sharing and Third Parties
We do not sell your personal information, and we do not share it for third-party advertising. We share data only as needed to operate the service:
- Delivery partner / riders (Jetray): To fulfil and deliver your order, the delivery details from your order — your name, phone number, delivery address, and the precise GPS drop-point — are shared with the delivery/rider service (Jetray) so the rider can reach you.
- Google / Firebase (service provider): We use Google Firebase for authentication, database storage (Cloud Firestore), push notifications (Firebase Cloud Messaging), crash reporting (Crashlytics), and analytics (Firebase Analytics). The related account, order, diagnostics, and identifier data described above is processed on Google's Firebase infrastructure, and crash/analytics data is shared with Google in its role as our processor.
We may also disclose information if required by law, regulation, legal process, or enforceable governmental request.
6Data Security
All data transmitted between the app and our servers, and to the third-party services above, is encrypted in transit using industry-standard TLS/HTTPS. Data stored on our behalf is held on Google Firebase's secured infrastructure. While no method of transmission or storage is completely secure, we take reasonable measures to protect your information.
7Data Retention and Deletion
We retain your account information, saved addresses, order history, notification token, and feedback submissions for as long as needed to provide support and operate the service.
Deleting saved addresses: You can delete any individual saved address from within the app at any time.
Deleting your account and associated data: To request deletion of your account and the personal data associated with it, email thesoftmechanic.help@gmail.com from the email address or with the phone number linked to your account, with the subject "Delete my RotiJet data". On receiving and verifying your request, we will delete your account record, saved addresses, stored notification token, and app-feedback submissions linked to your signed-in account. Guest-mode feedback — including fallback feedback sent while signed in but unverified or unlinked — is not stored under a RotiJet account and is not automatically deleted with that account; to request deletion, email the Feedback ID shown after submission. Order records may be retained where necessary to meet legal, accounting, or tax obligations, after which they will be deleted or anonymised.
8Children's Privacy
RotiJet is a food-ordering service that involves payments and precise-location collection, and it is intended for adults. It is not directed to or intended for children. We do not knowingly collect personal information from children under 18 (and in no case under 13). If you believe a child has provided us with personal information, please contact us at thesoftmechanic.help@gmail.com and we will delete it.
9Your Rights
- Access and update your profile information within the app.
- Add or delete saved delivery addresses.
- Choose not to grant location permission and enter your address manually.
- Request deletion of your account and associated personal data (see "Data Retention and Deletion").
To exercise any of these rights, contact us at thesoftmechanic.help@gmail.com.
10Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide notice within the app. Your continued use of RotiJet after an update means you accept the revised policy.
11Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:
The Soft Mechanic
Email: thesoftmechanic.help@gmail.com