# Privacy Policy for Bento (Student App)
**Last Updated: December 19, 2025**
**Effective Date: December 19, 2025**
## 1. Introduction
Welcome to Bento ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Bento (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy.
## 2. Information We Collect
### 2.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account
- Subscribe to meal plans
- Use our services
This information may include:
- **Contact Information**: Name, email address, phone number
- **Profile Information**: Profile photo, address, preferences
- **Payment Information**: Payment method details (processed securely by payment providers)
- **Location Data**: Delivery address, current location (with your permission)
### 2.2 Information Collected Automatically
When you use the App, we may automatically collect certain information, including:
- **Device Information**: Device type, operating system, unique device identifiers
- **Usage Data**: App features used, time spent on the App, crash reports
- **Location Data**: GPS location (with your permission) for finding nearby mess services
- **Advertising Data**: Advertising ID for personalized ads (can be reset in device settings)
### 2.3 Information from Third Parties
We may receive information about you from third parties including:
- Firebase (authentication and analytics)
- Supabase (database services)
- Payment processors (Cashfree)
- Advertising networks (Google AdMob)
## 3. How We Use Your Information
We use the information we collect to:
- **Provide Services**: Create and manage your account, process orders, manage subscriptions
- **Food Delivery**: Process meal orders and subscriptions, track attendance
- **Communication**: Send notifications about orders, updates, and promotional offers
- **Personalization**: Customize your experience and show relevant content
- **Advertising**: Display personalized advertisements (you can opt out in settings)
- **Analytics**: Understand how users interact with our App to improve our services
- **Security**: Detect, prevent, and address fraud and security issues
- **Legal Compliance**: Comply with applicable laws and regulations
## 4. Permissions We Request
### 4.1 Camera Permission
We request camera access to:
- Upload profile photos
- Scan QR codes for meal attendance tracking
### 4.2 Location Permission
We request location access to:
- Find nearby mess services and restaurants
- Show mess locations on the map
- Provide location-based recommendations
### 4.3 Storage Permission
We request storage access to:
- Save and upload images
- Cache data for offline access
### 4.4 Internet Permission
Required for:
- Syncing data with our servers
- Real-time order updates
- Push notifications
- Loading advertisements
### 4.5 Notifications Permission
We request notification access to:
- Send order status updates
- Meal reminders
- Promotional offers and updates
## 5. Advertising
### 5.1 Third-Party Advertising
Our App displays advertisements provided by Google AdMob and other advertising partners. These ads help us provide the App for free.
### 5.2 Personalized Advertising
We and our advertising partners may collect and use data about your interests to show you personalized ads. This includes:
- Advertising ID
- App usage patterns
- Device information
### 5.3 Opt-Out Options
You can opt out of personalized advertising by:
- Resetting your Advertising ID in device settings
- Enabling "Limit Ad Tracking" on your device
- Adjusting ad preferences in the App settings
### 5.4 Ad Networks
We work with the following advertising partners:
- **Google AdMob**: [Privacy Policy](https://policies.google.com/privacy)
## 6. Data Sharing and Disclosure
We may share your information in the following situations:
### 6.1 With Service Providers
We share data with third-party service providers who perform services on our behalf:
- **Firebase**: Authentication, analytics, crash reporting
- **Supabase**: Database and backend services
- **OneSignal**: Push notifications
- **Google Maps**: Location and mapping services
- **Cashfree**: Payment processing
- **Google AdMob**: Advertising services
### 6.2 With Mess Partners
Your order information (name, contact, subscription details) will be shared with mess partners to fulfill your orders.
### 6.3 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities.
### 6.4 Business Transfers
In case of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
## 7. Data Storage and Security
### 7.1 Data Storage
- Your data is stored securely on Supabase servers
- We use industry-standard encryption for data transmission
- Sensitive information (like passwords) is hashed and never stored in plain text
### 7.2 Security Measures
We implement appropriate technical and organizational measures to protect your personal information, including:
- SSL/TLS encryption
- Secure authentication mechanisms (OTP verification)
- Regular security audits
- Access controls and monitoring
### 7.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.
## 8. Your Rights
You have the right to:
- **Access**: Request access to your personal information
- **Correction**: Request correction of inaccurate information
- **Deletion**: Request deletion of your personal information
- **Portability**: Request a copy of your data in a portable format
- **Opt-out**: Opt out of marketing communications and personalized ads
- **Withdraw Consent**: Withdraw consent for data processing
To exercise these rights, contact us at: **support@bento.app**
## 9. Children's Privacy
Our App is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
## 10. Third-Party Links
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.
## 11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy frequently.
## 12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at:
**Bento**
- **Email**: support@bento.app
- Address**: LMS finswell viman nagar pune maharashtra 411014
Company: Noonx Technologies
Contact: hello@noonx.in
---
## Summary of Data Collection
| Data Type | Purpose | Shared With |
|-----------|---------|-------------|
| Name, Email, Phone | Account creation, Communication | Service providers, Mess partners |
| Location | Find nearby mess, Map display | Google Maps |
| Photos | Profile picture, QR scanning | Cloud storage |
| Payment Info | Order processing | Cashfree |
| Device Info | Analytics, Crash reporting | Firebase |
| Advertising ID | Personalized ads | Google AdMob |
---
*This Privacy Policy is compliant with Google Play Store requirements and applicable data protection regulations.*