Your data, treated like it belongs to you.

Short version: we read your Swiggy order history once, reduce it to aggregated monthly numbers, throw away the raw data, and give you a shareable card. We never see your payments, addresses, or anything we don't need. You can delete everything at any time in one click.

1. Who we are

"Foodburn" (we, us, our) is a service operated at foodburn.in. We generate monthly humour cards from Indian users' Swiggy order history.

2. What we collect

• Phone number. Used only for sign-in via OTP.
• Display name (optional). Shown on your roast card.
• Aggregated monthly stats. Total spend, order count, top restaurant, top item, peak hour, weekend percentage, longest gap, biryani count, vegetarian count. Computed once at sync-time from your Swiggy data, then stored.
• Generated roast cards. The 4-line roast text and verdict our model produces for you.
• Sync ledger. A timestamp and a salted hash of your IP and user-agent, used only to enforce the 3-syncs-per-month limit and detect abuse. The original IP is never stored.

3. What we do not collect

• Individual orders or order history (we read them once, compute, discard)
• Payment methods, card numbers, UPI handles, bank details
• Delivery addresses
• Phone contacts, photos, location, microphone, or camera
• Anything outside the Swiggy MCP scope you authorize

4. Where it lives

Your data is stored on managed cloud infrastructure located in India. Access is enforced at the database level — each user can read only their own profile, stats, roasts, and sync log.

5. Service providers

To run the service, we share the minimum necessary data with vetted providers:

• A managed database & authentication provider — stores your profile, stats, roast history, and sign-in session.
• An AI text-generation provider — receives only your aggregated monthly stats and display name to generate roast text. No phone number, no IP, no raw orders.
• An SMS provider — delivers the one-time code for sign-in.
• A cloud hosting provider — serves the website.

A current list of named providers is available to enterprise partners and regulators on request.

6. Cookies

We use session cookies for authentication only (HTTP-only, secure, same-site). No advertising cookies, no third-party tracking, no analytics that profile you across the web.

7. Your rights

• Access: Sign in to see everything we've stored on you on the dashboard.
• Deletion: Click "Delete My Account" in Settings. Your phone number is freed, all stats and roasts are removed via cascading delete. This is irreversible.
• Correction: Edit your display name in Settings; stats are recomputed from Swiggy on each sync.

8. Retention

We keep your data while your account is active. When you delete your account, all data is removed within 24 hours. Sync log entries auto- expire after 90 days.

9. Children

Foodburn is intended for users 18 years or older. If you believe a minor has signed up, contact us and we'll delete the account.

10. Changes

We'll update the date at the top of this page when we change anything material. Continued use after changes constitutes acceptance.

11. Contact

Questions, deletion requests, or security reports: support@foodburn.in.