LUNCHO. AT THE GATE.
ON TIME.

Luncho Privacy Policy

Last updated: 11 September 2026.

Luncho ("we") delivers pre-ordered lunch boxes to college gates in Bengaluru. This policy explains what the Luncho Android app and the ordering page at luncho.in collect, why, and your choices.

What we collect

  • Mobile number. Used to sign you in with a one-time password and to confirm your order over WhatsApp or SMS. It is your account identifier.
  • Name. The name you type for the label on your box.
  • College gate. Which campus gate to deliver to.
  • Orders. What you ordered, when, for which day, how much you paid, and the order's status (payment verified, packed, collected, cancelled).
  • Payment reference. The reference we put in your UPI payment note and, if you provide it, the 12-digit UPI transaction id (UTR). We never see or store your UPI PIN, bank account or card details; payment happens inside your own UPI app.
  • Notification token. If you allow notifications, a device token from Google's Firebase Cloud Messaging so we can send you the cutoff reminder, your order confirmation, and "your box is at the gate".

We do not collect your location, contacts, photos, email address or device advertising identifiers, and the app contains no advertising or analytics SDKs.

Why we use it

To take your order, cook the right number of boxes, hand the right box to the right person at the gate, verify prepaid payments, issue refunds, and send you the notifications you have asked for. We also use order history to show you "same as last time".

Where it lives

Data is stored in Google Firebase (Firestore, Authentication, Cloud Messaging) in the asia-south1 (Mumbai) region and encrypted in transit and at rest. Only the Luncho kitchen team can see orders, through an authenticated admin tool.

Sharing

We do not sell or share personal data with third parties for their own purposes. Google acts as our processor for hosting, authentication and notifications. Your name, order number and box contents appear on the sticker on your box, which is handed to you at the gate.

Retention

Orders are kept for accounting for up to 8 years as Indian tax rules require, in a form that includes your name and mobile number. Notification tokens are removed when you sign out or turn notifications off. You can turn off each type of notification in the app under You → Notifications.

Your choices and rights

  • Change your name or usual gate in the app at any time.
  • Turn notifications off in the app or in Android settings.
  • Delete your account and personal data from inside the app: You → Delete account. It signs you out and removes your profile straight away. If you would rather ask us, message the support number in the app or email hello@luncho.in from the number you signed up with, and we complete it within 30 days. Either way we keep the order records Indian tax law requires us to keep, as described under Retention. We cannot delete an account while you have a box on its way, because the gate needs the name until you have collected it.
  • Under India's Digital Personal Data Protection Act, 2023, you may access, correct or erase your data and nominate someone to act for you. Use the same contact.

Children

Luncho is for college students and adults. We do not knowingly collect data from anyone under 18.

Changes

We will update this page and the date above when the policy changes. Continued use after a change means you accept it.

Contact

Luncho · Bengaluru · hello@luncho.in · Instagram @luncho.blr