1Introduction
RotiJet ("the app", "we", "us", or "our") is a food-ordering and delivery application published by The Soft Mechanic. This Privacy Policy explains what information the RotiJet Android app collects, how we use it, who we share it with, and the choices and rights you have. The app is intended for users in India.
By creating an account and using RotiJet, you agree to the practices described in this policy. If you do not agree, please do not use the app.
If you have any questions, contact us at thesoftmechanic.help@gmail.com.
2Information We Collect
RotiJet requires you to sign in before using its core features. We collect only the data described below.
Account and profile information
- Name — taken from your Google account when you sign in with Google, or set to a default and editable by you in your profile when you sign in by phone.
- Email address — collected when you sign in with Google. If you sign in with a phone number, no email is collected unless you add one.
- Phone number — collected when you sign in using phone/OTP verification, or when you enter it in your profile or in a delivery address.
- Profile photo URL — if you sign in with Google, we store the web link to your Google account's profile picture so we can display it. The app does not access, capture, or upload photos from your device.
- Account identifier (User ID) — a unique account ID (Firebase Authentication UID) is created to identify your account and link your data. Your phone number and/or Google account act as your sign-in identifiers.
Delivery addresses
The delivery addresses you save — including a label, the free-text address line (and any pincode you type), and a contact phone number for that address.
Device location (precise GPS)
RotiJet does collect precise device location, but only when you choose to:
- When you tap "Use my current location" on the address screen, the app reads your device's current GPS coordinates (latitude/longitude) to help fill in and pinpoint your delivery address. These coordinates are saved with the address and with orders placed to that address so the delivery rider can find the drop-off point.
- This capture is one-time, on-demand, and only while the app is open (foreground). RotiJet does not track your location in the background and does not monitor your location continuously.
- Location capture is optional — you can instead type your address manually without granting location access.
We request the ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION permissions for this feature.
Order and purchase history
Details of the orders you place, including the items, quantities and prices, subtotal, delivery fee, discount and any coupon used, order total, the payment method you selected (e.g., Cash on Delivery), payment status, and the order time.
Notifications token
A push-notification token (Firebase Cloud Messaging token) is generated for your device so we can send you order-status updates.
Diagnostics and device information (automatically collected)
The app uses Google Firebase Crashlytics and Firebase Analytics, which automatically collect:
- Crash logs and diagnostics — crash reports, error information, and technical details such as device model, operating-system version, and an installation identifier, tagged with your account ID to help us diagnose problems.
- App-activity and device identifiers — the Firebase Analytics SDK automatically collects app-usage information and app-instance/installation identifiers. It may also use your device’s advertising ID for analytics and measurement. RotiJet shows no ads: we do not use this identifier to build advertising profiles and we do not share it with advertisers. You can reset or delete your advertising ID at any time from your device Settings › Privacy › Ads.
What we do NOT collect
- We do not collect or store your card, UPI, or bank account details (see "Payments" below).
- We do not access your camera, photo gallery, media files, contacts, or hardware identifiers such as your IMEI or Android ID.
- Your cart and favourites are stored only on your device and are not transmitted to us, except that the cart becomes an order when you check out.
3Payments
RotiJet offers Cash on Delivery, and may offer online payment through Cashfree Payments, our third-party payment processor.
When an online payment is made, all card, UPI, and bank details are entered directly into Cashfree's own Drop Checkout interface, which hosts the entire payment form. RotiJet never sees, handles, or stores your raw card number, CVV, UPI PIN, or bank details. The app only records the payment method label (for example "Cash on Delivery"), the payment status, the amount, and, for online payments, an order identifier and a payment session created on our server.
To process an online payment, your name, phone number, and email address may be shared with Cashfree so it can complete the transaction. Cashfree processes this information under its own privacy policy and terms.
4How We Use Your Information
We use the information we collect to:
- Create and manage your account and let you sign in.
- Take, process, and fulfil your food orders.
- Deliver your order to the correct location, including using your saved address and the precise GPS drop-point you provide.
- Contact you about your order and enable delivery riders to reach you.
- Process payments (via Cash on Delivery or, where applicable, Cashfree).
- Send you order-status notifications.
- Show you your own order history.
- Diagnose crashes, fix bugs, and improve the reliability and performance of the app.
5Sharing and Third Parties
We do not sell your personal information, and we do not share it for third-party advertising. We share data only as needed to operate the service:
- Delivery partner / riders (Jetray): To fulfil and deliver your order, the delivery details from your order — your name, phone number, delivery address, and the precise GPS drop-point — are shared with the delivery/rider service (Jetray) so the rider can reach you.
- Google / Firebase (service provider): We use Google Firebase for authentication, database storage (Cloud Firestore), push notifications (Firebase Cloud Messaging), crash reporting (Crashlytics), and analytics (Firebase Analytics). The related account, order, diagnostics, and identifier data described above is processed on Google's Firebase infrastructure, and crash/analytics data is shared with Google in its role as our processor.
- Cashfree (payment processor): As described in "Payments", when you make an online payment your name, phone, and email may be shared with Cashfree to process the transaction, and your payment instrument details are collected directly by Cashfree.
We may also disclose information if required by law, regulation, legal process, or enforceable governmental request.
6Data Security
All data transmitted between the app and our servers, and to the third-party services above, is encrypted in transit using industry-standard TLS/HTTPS. Data stored on our behalf is held on Google Firebase's secured infrastructure. While no method of transmission or storage is completely secure, we take reasonable measures to protect your information.
7Data Retention and Deletion
We retain your account information, saved addresses, order history, and notification token for as long as your account exists, so that we can provide the service and keep your order records.
Deleting saved addresses: You can delete any individual saved address from within the app at any time.
Deleting your account and associated data: To request deletion of your account and the personal data associated with it, email thesoftmechanic.help@gmail.com from the email address or with the phone number linked to your account, with the subject "Delete my RotiJet data". On receiving and verifying your request, we will delete your account record, saved addresses, and stored notification token. Order records may be retained where necessary to meet legal, accounting, or tax obligations, after which they will be deleted or anonymised.
8Children's Privacy
RotiJet is a food-ordering service that involves payments and precise-location collection, and it is intended for adults. It is not directed to or intended for children. We do not knowingly collect personal information from children under 18 (and in no case under 13). If you believe a child has provided us with personal information, please contact us at thesoftmechanic.help@gmail.com and we will delete it.
9Your Rights
- Access and update your profile information within the app.
- Add or delete saved delivery addresses.
- Choose not to grant location permission and enter your address manually.
- Request deletion of your account and associated personal data (see "Data Retention and Deletion").
To exercise any of these rights, contact us at thesoftmechanic.help@gmail.com.
10Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide notice within the app. Your continued use of RotiJet after an update means you accept the revised policy.
11Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:
The Soft Mechanic
Email: thesoftmechanic.help@gmail.com