crave
Back to App
Home/Policies/Privacy Policy

Privacy Policy

Last updated on February 19, 2026

1. Applicability and Scope

crave. Technologies India Limited (formerly known as Crave App Solutions Pvt. Ltd.) and its operating subsidiaries ("crave.", "Company," "we," "us," or "our") respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, process, store, disclose, and safeguard your personal information when you access or use the crave. mobile applications, website at https://crave.app, Crave XP Instamart delivery network, and associated API integrations (collectively, the "Services").

By accessing or using our Services, registering an account, or interacting with our merchants and delivery partners along the Kanakapura Road Corridor and greater Bengaluru region, you consent to the data collection and processing practices described herein.

2. Information We Collect

We collect several categories of information from and about users of our Services:

A. Information You Provide Directly

  • Account Credentials: Full name, verified mobile number, email address, profile avatar, and saved delivery addresses.
  • Payment Metadata: Transaction reference IDs, preferred payment methods (UPI IDs, card tokenization details), and billing address. We do not store raw card CVVs or bank PINs.
  • Communications & Feedback: Customer support chats, order delivery instructions, voice call recordings via masked proxy lines, and restaurant review ratings.

B. Information Collected Automatically

  • Precise Location Telemetry: High-accuracy GPS coordinates collected while the app is active in the foreground or background during active order fulfillment to calculate accurate ETAs and route delivery partners.
  • Device & Telemetry Data: IP address, device hardware model, operating system version, unique device identifier (UUID), network operator, and push notification tokens.
  • Usage Analytics: Browsing history, food search queries, items added to Crave XP grocery carts, clickstream pathways, and time spent on specific merchant menus.

C. Information From Third Parties

  • Authentication data from single sign-on (SSO) providers (e.g., Google OAuth, Apple ID).
  • Delivery confirmation telemetry and OTP verification updates from independent driver partners.
  • Fraud prevention metrics and risk assessment scores from accredited payment gateways.

3. How We Use Your Information

We process your personal information for specific, legitimate operational purposes:

  • Order Fulfillment & Dispatch: Transmitting order items to restaurant kitchens or Crave XP dark store fulfillment managers, routing nearby driver partners, and tracking real-time delivery telemetry.
  • Customer Support & Dispute Resolution: Responding to order inquiries, refund requests, delivery delays, and quality assurance complaints.
  • Platform Personalization: Recommending hyper-local restaurants, curated dish suggestions, and personalized promotional deals based on order history.
  • Safety & Fraud Prevention: Detecting fraudulent transactions, unauthorized account logins, driver spoofing, and compliance violations under Indian law.
  • Legal Compliance: Retaining financial transaction records for tax compliance, GST invoicing, and regulatory audits under the Information Technology Act, 2000.

4. Disclosure of Information to Third Parties

We do not sell your personal data. We disclose your information only to necessary operational partners:

Restaurant & Dark Store Partners

Order items, customer first name, delivery address line, and special cooking instructions required to prepare and package food.

Delivery Partners & Drivers

Delivery destination coordinates, contact phone masking link, and recipient customer name to complete drop-off.

Payment Processors & Banking Partners

Encrypted token IDs and transaction sums to complete UPI, card, and net-banking checkouts securely.

Regulatory Authorities & Law Enforcement

When mandated under valid judicial orders, court summons, or regulatory inquiries under Indian law.

5. Data Security & Retention Policy

crave. employs industry-standard encryption protocols (TLS 1.3 in transit, AES-256 at rest) to safeguard user data. We retain personal data for as long as your account remains active or as required by applicable tax, statutory, and legal retention laws in India.

6. Your Rights & Account Deletion

You have the right to access, update, or correct your profile data at any time via your account settings. You may also request complete deletion of your account and personal records by contacting our Privacy Officer at privacy@crave.app.

Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Grievance Officer: Anand Kumar

Designation: Head of Data Privacy & Legal Compliance

Address: crave. Tech Park, 4th Floor, Kanakapura Main Road, Bengaluru, Karnataka - 560062

Email: grievance@crave.app