Effective Date:
July 22, 2026
This Privacy Policy describes how BBD MESS MENU (Android App) ("We", "Us", "Our", or the "Company") collects, processes, uses, and protects your personal data when you use our mobile application and related services.
We are committed to protecting your privacy in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology Act, 2000, and Google Play Data Safety guidelines.
1. Roles Under the DPDP Act, 2023
2. Notice of Itemized Data Collection (Section 5, DPDP Act)
We collect and process the following specific categories of personal data with your explicit consent:
A. Identity & Authentication Data
B. Campus Contact Information
C. Behavioral & Review Data
D. Telemetry, Diagnostic & Usage Data
3. Consent & Right to Withdraw Consent (Section 6, DPDP Act)
By signing in with your College ID and setting up your profile, you provide free, specific, informed, unconditional, and unambiguous consent to the collection and processing of your personal data as itemized in Section 2.
Right to Withdraw Consent (Section 6(4))
You have the absolute right to withdraw your consent at any time. You can withdraw consent by:
Upon withdrawal of consent, we will cease processing your personal data and erase all associated records (student_profiles and reviews) from our active databases within 7 business days, except where retention is legally mandated.
4. Right to Erasure / Account Deletion (Section 12(3), DPDP Act & Google Play)
Under Section 12(3) of the DPDP Act and Google Play Store policies, you have the right to request the erasure of your personal data when the purpose of collection is fulfilled or upon withdrawing consent.
5. Third-Party Data Processors & Disclosure (Section 8 & Section 16)
We do not sell your personal data. We disclose your data only to the following vetted Data Processors who process data on our behalf under strict security obligations (Section 8(5)):
| Data Processor | Service Provided | Data Shared |
|---|---|---|
| Supabase Inc. | Cloud Database & Authentication | user_id, email, full_name, hostel, room_number, phone, reviews |
| Google Cloud / OAuth | User Authentication | ID Token, Email, Profile Photo |
| Microsoft Clarity | Session Telemetry & Crash Diagnostics | Anonymized Touch Gestures, Screen Visits, Diagnostic Data |
| OneSignal | Push Notification Service | Device Push Token, OS Version |
| BBD Mess Administration | Mess Management & Feedback Resolution | Student Name, College Email, Hostel, Room Number, Food Reviews |
In the event of any data breach impacting your personal data, we will promptly notify both you and the Data Protection Board of India (DPBI) in compliance with Section 8(6) of the DPDP Act.
6. Independent Project (No Official Affiliation)
This application is an independent student initiative and is not officially affiliated with, endorsed by, or sponsored by BBD University or its administration. Any use of university names or hostel designations is purely for descriptive and navigational purposes.
7. User-Generated Content (Reviews)
If you post reviews or comments on the application, you are solely responsible for the content you submit. We do not endorse any user-generated content and reserve the right to remove or modify any content that we determine, in our sole discretion, to be abusive, defamatory, illegal, or in violation of these Terms.
8. Accuracy of Information
The mess menus displayed on this application are provided for convenience only. While we strive to keep the information accurate, we do not guarantee that the food served will match the menu shown. We are not liable for any sudden menu changes, food availability, or any health-related issues (including allergies) arising from reliance on this information.
9. Limitation of Liability
In no event shall the app developers, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your access to or use of or inability to access or use the Service.
10. Contact Us
If you have any questions about these Terms, please contact us at veerpratap3007@gmail.com or tanayanandmishra@gmail.com.
11. Data Security & Storage (Section 8(5))
All data transmitted between the Application and our cloud servers (Supabase) is encrypted in transit using industry-standard TLS/HTTPS protocols and stored with enterprise-grade encryption at rest.
12. Children's Privacy
Our Application is intended exclusively for college students and adults aged 18 and above. We do not knowingly collect personal data from minors under the age of 18 without verified parental consent (Section 9).
13. Developer Contact & DPDP Act Compliance (Section 8(9) & Section 13)
In compliance with Section 8(9) and Section 13 of the Digital Personal Data Protection Act, 2023, the contact details of the Developer are published below:
Right to Approach the Data Protection Board (Section 13(3))
If your inquiry or grievance is not resolved to your satisfaction by the Developer, you have the statutory right to file a formal complaint with the Data Protection Board of India (DPBI).
14. Changes to this Privacy Policy
We may update our Privacy Policy periodically to reflect changes in legal or technical requirements. We will notify you of any significant changes via an in-app banner or push notification prior to the changes taking effect.