Privacy Policy
This policy is written in plain language. We explain what data we collect, why we collect it, how long we keep it, and what rights you have over it — as required by India's Digital Personal Data Protection Act, 2023 (DPDPA). By clicking “I Consent” at sign-up, you confirm that you are above 18 years of age, have read and understood this notice, and consent to the processing of your personal data (detailed below) for the purposes specified.
1. Who We Are
NestBeat is a kitchen planning application that helps households plan meals, understand the dietary requirements of family members, and place orders through quick commerce partners. NestBeat determines the purpose and means of processing your personal data with your consent.
Registered Address: NestBeat.ai, India — full registered address available on request at hello@nestbeat.ai.
Grievance Officer / Contact: The Founding Team, hello@nestbeat.ai
2. What Personal Data We Collect
All personal data you share with us is optional. You can use the core features of the app without providing any of the following. You may choose to share the following for a more personalised experience:
2.1 Account Data
- Name: to personalise your experience.
- Email address: for account login, notifications, and support.
- Phone number: for order confirmations and delivery coordination with quick commerce partners.
2.2 Family Profile Data
This is sensitive in nature because it describes identifiable individuals — including potentially minors. We collect it only if you actively choose to add family members. You can delete family members or their data at any time, and see exactly what is stored or inferred within the app.
- Names of family members: to create personalised meal plans for each person. You may use nicknames instead of real names.
- Ages: to tailor nutritional suggestions — children's needs differ from adults'.
- Relationship to you: to understand household structure for planning purposes.
- Dietary preferences, allergies, or restrictions (if shared): to avoid ingredients that could cause harm or that a member does not consume.
2.3 Usage and Behavioural Data
- Meal plans you create, save, or discard.
- Ingredients you search for or add.
- Items you add to cart or purchase via quick commerce partners.
- Frequency of app usage and features used.
- Your chats with our AI agent in the app.
This data is used by our AI systems to learn your household's patterns and improve the relevance of suggestions over time.
2.4 Device and Technical Data
- Device type and operating system.
- App version and session data.
- Crash logs and performance data (anonymised where possible).
This data is used to resolve bugs and improve app performance.
3. Why We Process Your Data (Purpose and Legal Basis)
Under the DPDPA, we may process your personal data only for specific purposes for which you have given consent, or for certain legitimate uses permitted by law:
- Provide and personalise the app (meal plans, kitchen suggestions) — basis: your consent at sign-up; data: account, family profile, usage data.
- Enable quick commerce checkout — basis: your consent and performance of a transaction you initiate; data: phone number, cart items, delivery address (collected at checkout, not stored by us).
- AI-based pattern learning and recommendation — basis: your consent; you may opt out of AI personalisation in Settings at any time without losing access; data: usage/behavioural and family profile data.
- Security, fraud prevention, and legal compliance — basis: legitimate use under DPDPA; data: device/technical and account data.
We do not sell your data, use it for targeted advertising, or share it with third parties for their own marketing purposes.
4. Children's Data
If you add family members under 18, please read this carefully. Under the DPDPA, anyone under 18 is legally a child. By adding a minor's profile, you confirm that you are their parent or legal guardian, and you consent — on their behalf, for the limited purpose of household meal planning — to their profile data being used.
We do not behaviourally monitor minors, serve them targeted advertisements, or use their data for any purpose beyond the meal plan for which it was shared. We ask you to confirm at sign-up that you are 18 or older; the service is not intended for users under 18 to hold their own account. If we become aware that an account is held by someone under 18, we will deactivate it and delete associated data.
5. Who We Share Your Data With
We share your data only as described below. We do not sell your data.
5.1 Quick Commerce Partners
When you initiate a checkout, we share your order details (items, quantity) and contact/delivery information with the relevant quick commerce platform to fulfil your order. This transfer is necessary to complete a transaction you have requested. These partners have their own privacy policies governing how they handle your data.
5.2 Technology and Infrastructure Providers
We use cloud hosting, database, and AI infrastructure providers who process data on our behalf under contractual obligations that prohibit using your data for any purpose other than providing their service to us. Your data is not used to train any models and is protected by enterprise-grade security.
5.3 Legal Requirements
We may disclose data if required by law, a court order, or a competent authority, or to protect the rights, property, or safety of our users or others.
5.4 Cross-Border Transfers
Some infrastructure providers may process data outside India. Where this occurs, we ensure contractual safeguards consistent with DPDPA requirements and any applicable Central Government restrictions on cross-border transfers.
6. How Long We Keep Your Data
- Account data: while your account is active and up to 30 days after deletion, to allow recovery if deletion was accidental.
- Family profile data: while your account is active; deleted immediately upon your request or account deletion.
- Usage and behavioural data: in identifiable form for up to 12 months; older data is anonymised and used only in aggregate.
- Transaction/order data: up to 7 years where required for financial and tax compliance.
- Technical/crash logs: up to 6 months.
When retention periods expire, data is securely deleted or anonymised.
7. Your Rights Under the DPDPA
As a Data Principal, you have the following rights, exercisable by contacting us (Section 10):
7.1 Right to Access
Obtain a summary of the personal data we hold and the purposes of processing — accessible from the Family tab.
7.2 Right to Correction and Erasure
Correct inaccurate or incomplete data and erase data no longer necessary or where you withdraw consent — directly in the app, anytime, from the Family tab.
7.3 Right to Withdraw Consent
Withdraw consent for any or all processing at any time from Settings and the Family tab. Withdrawal does not affect the lawfulness of prior processing. Withdrawing consent for core features will result in account deletion, as we cannot provide the service without a minimum level of data.
7.4 Right to Grievance Redressal
File a complaint via the Grievances tab; we respond within 30 days. If unsatisfied, you may escalate to the Data Protection Board of India.
7.5 Right of Nomination
Nominate another individual to exercise your rights in the event of death or incapacity — contact hello@nestbeat.ai to register a nominee.
8. How We Protect Your Data
- Encryption of data in transit (TLS) and at rest.
- Access controls limiting data access to authorised personnel only.
- Regular security reviews and vulnerability assessments.
- Pseudonymisation of AI training data where feasible.
In the event of a breach likely to affect you, we will notify the Data Protection Board of India and affected users in accordance with DPDPA timelines.
9. Consent Management and Policy Changes
Your consent is obtained at sign-up and for specific features where applicable. You may manage consent preferences under the Family section, or request account deletion or erasure through Settings. If we make material changes to this policy, we will notify you via the app and/or email before they take effect, and seek fresh consent where required. Continued use after notification of non-material changes constitutes acceptance.
10. Contact Us and Grievance Redressal
For privacy questions, requests to exercise your rights, or complaints, contact our Grievance Officer: The Founding Team, hello@nestbeat.ai. Response time: within 30 days. If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India (once operational).