PRIVACY POLICY

Crust N Chill Admin

Effective Date: 9 November 2026
Last Updated: 9 November 2026

Application Name: Crust N Chill Admin
Business Name: Crust N Chill
Website: https://crustnchill.com
Official Email: crustnchill.care@gmail.com

Business Address:
1st Floor, Near Telephone Exchange,
Azad Market, Mandrella,
Jhunjhunu, Rajasthan, India - 333025.

Privacy and Grievance Contact: Atul Singh
Grievance Email: atulbola8@gmail.com
Contact Number: +91-9649051211

1. Introduction

Crust N Chill ("we", "our", "us", or "the Company") respects the privacy of individuals and is committed to protecting personal information handled through the Crust N Chill Admin mobile application ("Application" or "App").

Crust N Chill Admin is an internal business management application developed exclusively for authorised staff members working with Crust N Chill.

The Application enables authorised personnel to manage and monitor restaurant operations, including customer orders, customer information, menu management, promotions, inventory, logistics, delivery coordination, business reports and other operational activities.

This Privacy Policy explains:

What information is collected, accessed or processed through the Application.
How and why the information is used.
How information is stored and protected.
When information may be shared with third parties.
How long information is retained.
How authorised users can request account deletion.
How individuals can raise privacy-related concerns.

This policy applies specifically to the Crust N Chill Admin Application. It does not automatically replace the separate privacy policy applicable to the customer-facing Crust N Chill ordering application or website.

By accessing or using the Application, authorised staff members acknowledge that they have been provided access to this Privacy Policy.

2. Purpose and Scope of the Application

Crust N Chill Admin is designed exclusively for internal restaurant management and business operations.

The Application is not intended for public registration or general consumer use.

Access is restricted to staff members and other personnel specifically authorised by Crust N Chill.

The Application may be used for the following purposes:

Managing and monitoring customer orders.
Accessing customer information associated with restaurant orders.
Managing customer complaints and service requests.
Managing restaurant menus, products, categories and availability.
Managing promotions, discounts and offers.
Managing restaurant inventory and stock purchases.
Monitoring stock movements and inventory records.
Managing delivery and logistics-related information.
Accessing business reports and sales analysis.
Managing internal administrative activities.
Coordinating restaurant operations and customer service.

3. Information We Collect and Process

Depending on the user's role and the features accessed, the Application may access, collect, process or display the following categories of information.

3.1 Administrator and Staff Information

To provide authorised access to the Application, we may process:

Username or login identifier.
Password and authentication credentials.
Staff identification information, where maintained.
Assigned user role or permission level.
Account status and access permissions.
Login and authentication-related records.

The Application currently uses username and password authentication.

Authentication information is used to verify authorised access and protect the Application against unauthorised usage.

Passwords and authentication secrets are not intended to be displayed to other users.

Staff accounts are created and managed by authorised business administrators. Public self-registration is not available.

3.2 Customer Information

Authorised staff members may access customer information collected through Crust N Chill's customer-facing ordering services.

This information may include:

Customer name.
Customer phone number.
Customer delivery address.
Order history.
Order details and items purchased.
Order status and delivery status.
Payment method and payment status, where available.
Loyalty wallet and reward coins information.
Customer complaints and service requests.
Other information associated with customer orders and restaurant services.

This information is processed to enable restaurant staff to fulfil orders, coordinate deliveries, handle customer complaints, provide customer support and manage restaurant operations.

Access to customer information is restricted to authorised personnel based on their operational responsibilities.

3.3 Order and Transaction Information

The Application may process restaurant order and transaction-related records, including:

Order identification numbers.
Items ordered.
Item quantities.
Item prices.
Discounts and promotional offers.
Delivery charges.
Order totals.
Order creation and completion timestamps.
Payment method and payment status.
Order fulfilment and delivery information.
Cancellation and adjustment records, where applicable.

This information is used for order management, restaurant operations, accounting, reporting, customer support and business analysis.

The Application is an operational management tool. It is not intended to collect or store customers' complete debit card numbers, credit card numbers, UPI PINs, banking passwords or other confidential payment authentication credentials.

3.4 Menu and Product Information

The Application may access and process:

Menu item names.
Product descriptions.
Product categories.
Selling prices.
Product availability.
Product configurations.
Menu changes and updates.

This information is used to maintain accurate restaurant menus and product availability.

3.5 Inventory and Stock Information

The Application may process business inventory information, including:

Inventory item names.
Stock quantities.
Opening and closing stock.
Stock purchases.
Purchase dates.
Purchase quantities.
Purchase costs.
Per-unit purchase prices.
Stock movements.
Inventory adjustments.
Historical inventory records.

This information is used for stock management, purchase tracking, cost calculation, inventory reconciliation and operational reporting.

3.6 Logistics and Delivery Information

For delivery management and operational coordination, the Application may process:

Customer delivery addresses.
Delivery-related order information.
Delivery status.
Delivery charges.
Delivery-related timestamps.
Customer and order information required for delivery fulfilment.
Operational notes and instructions.

Certain delivery-related information is shared with authorised delivery personnel through a separate delivery application operated for restaurant delivery operations.

The information is shared only to the extent required to coordinate and fulfil customer orders.

3.7 Business Reports and Analytics

The Application may process business and operational information to generate reports, including:

Sales information.
Order statistics.
Revenue summaries.
Product performance.
Inventory consumption.
Purchase summaries.
Operational performance.
Business trends and reports.

These records are primarily used for internal business management, decision-making and performance monitoring.

4. Device Information and Technical Data

When an authorised user accesses the Application, certain technical information may be processed automatically to maintain functionality, security and reliability.

Depending on the Application's configuration and integrated services, this may include:

Device model and manufacturer.
Operating system and version.
Application version.
Device-related technical identifiers.
IP address and network information, where available to the relevant services.
Crash reports and diagnostic information.
Application performance information.
Authentication and access logs, where maintained.

This information may be used to:

Identify and troubleshoot application errors.
Improve application performance.
Maintain application security.
Diagnose compatibility issues.
Investigate technical problems.
Prevent misuse and unauthorised access.

5. Device Permissions

The Application may request the following device permissions depending on the features being used.

5.1 Internet Access

Internet access is required for communication with the backend infrastructure, authentication, retrieval of business information and synchronisation of application data.

5.2 Push Notifications

The Application may use push notifications to deliver operational alerts, order-related updates and other relevant business notifications.

Firebase Cloud Messaging is used to support push notification functionality.

5.3 Photos and Files

The Application may request access to photos or files where necessary to allow authorised users to select, upload or interact with files required by supported application features.

5.4 Storage and File Downloads

Storage or file-related access may be required to download, save or export business records and reports, including Excel and PDF files.

We do not intentionally access personal files or media unrelated to the features being used.

The Application does not require access to a user's contacts, SMS messages, call history or microphone for its intended administrative functions.

6. How We Use the Information

Information processed through Crust N Chill Admin is used for legitimate restaurant management and operational purposes.

6.1 Authentication and Access Management

Verifying authorised users.
Managing login sessions.
Enforcing applicable access permissions.
Preventing unauthorised account access.

6.2 Restaurant Operations

Receiving and managing orders.
Monitoring order fulfilment.
Managing menu information.
Coordinating delivery operations.
Handling customer service requests.

6.3 Inventory Management

Recording stock purchases.
Monitoring stock availability.
Calculating inventory costs.
Maintaining stock movement history.
Generating inventory reports.

6.4 Customer Support

Reviewing customer order history.
Responding to customer complaints.
Resolving order-related issues.
Coordinating delivery and fulfilment.
Providing customer assistance.

6.5 Business Management

Monitoring restaurant performance.
Reviewing sales and revenue.
Managing promotions.
Analysing operational performance.
Improving internal business processes.

6.6 Security and Troubleshooting

Identifying technical errors.
Maintaining system reliability.
Investigating unauthorised access.
Monitoring application crashes.
Protecting business and customer information.

We do not use information obtained through the Application for purposes unrelated to its business and operational functions.

7. Data Storage and Backend Infrastructure

Crust N Chill Admin uses Supabase as its backend database and infrastructure provider.

Information submitted through or accessed by the Application may be transmitted to and stored on infrastructure operated by Supabase, depending on the relevant application functionality and configuration.

This information may include:

Authorised user information.
Customer and order records.
Menu information.
Inventory records.
Logistics information.
Business reports and operational records.

Supabase is used to support authentication, database operations, information retrieval and synchronisation between authorised users and the backend.

We use appropriate access-control mechanisms and security measures intended to restrict access to authorised personnel.

8. Third-Party Services and Information Sharing

Crust N Chill may use third-party technology providers to operate, maintain and improve the Application.

These services may process certain technical or operational information as required for their functionality.

8.1 Supabase

Supabase is used for backend infrastructure, database management and related application functionality.

Information stored or processed through Supabase may include staff account information, customer records, orders, inventory information and other operational business records.

8.2 Firebase Cloud Messaging

Firebase Cloud Messaging is used to support push notifications.

It may process technical information, including device-related registration tokens and information required to deliver notifications to authorised devices.

8.3 Firebase Crashlytics

Firebase Crashlytics is used to identify, monitor and investigate application crashes and technical errors.

It may automatically collect diagnostic information, including:

Crash reports.
Application state information relevant to an error.
Device model and operating system information.
Application version.
Technical identifiers and diagnostic information, depending on SDK configuration.

This information helps us identify errors, investigate crashes and improve application stability.

Firebase services are provided by Google. Their processing of information is also subject to applicable Google privacy terms and policies.

8.4 WhatsApp Sharing

Crust N Chill staff may share certain customer and order information through WhatsApp for legitimate restaurant operations and customer communication.

Information shared through WhatsApp may include:

Customer name.
Customer phone number.
Order details.

This information is shared to facilitate order communication, delivery coordination and customer service.

When information is shared through WhatsApp, it may be processed by WhatsApp and its related service providers in accordance with their own privacy policies and terms.

Crust N Chill does not control the independent data-processing practices of WhatsApp.

8.5 Delivery Personnel and Separate Delivery Application

Certain customer and order information is shared with authorised delivery personnel through a separate delivery application.

This information may include customer names, delivery-related information and order details necessary to complete deliveries.

Delivery personnel access this information to identify customers, coordinate deliveries and fulfil assigned orders.

Access to such information should be limited to the information necessary for the assigned delivery.

8.6 Excel and PDF Exports

The Application allows authorised personnel to export certain business records and reports into Excel or PDF formats.

These exports may contain business information and, depending on the report, customer or order-related information.

Exported files may be saved to the authorised user's device or another selected storage location.

Once exported, the files may be accessible outside the Application and are subject to the security of the device and storage location where they are saved.

Users are responsible for handling exported information confidentially and must not distribute it to unauthorised individuals.

8.7 Internal Business Personnel

Information may be accessible to authorised owners, administrators, managers, employees and delivery personnel based on their assigned operational responsibilities.

Access is intended to be limited to information necessary for their duties.

8.8 Legal and Regulatory Requirements

We may disclose information when reasonably necessary to:

Comply with applicable laws and regulations.
Respond to lawful requests from government authorities.
Protect the rights, property and safety of Crust N Chill, employees or customers.
Investigate fraud, security incidents or unlawful activities.
Enforce applicable legal agreements.

9. Data Security

We recognise that the Application handles business information and provides access to customer records, including phone numbers, delivery addresses, order history and payment status.

We take reasonable technical and organisational measures to protect information against unauthorised access, misuse, loss, alteration and disclosure.

These measures may include:

Authenticated access to the Application.
Restricted access for authorised personnel.
Password-protected accounts.
Backend access controls.
Secure communication between the Application and backend services.
Restricted administrative privileges.
Maintenance and updates to address security vulnerabilities.
Technical monitoring and crash diagnostics.

Access to customer and business information is intended to be limited to personnel who need it for their assigned responsibilities.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

We cannot guarantee absolute security but make reasonable efforts to maintain appropriate safeguards.

10. Data Retention

We retain information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes and maintain legitimate business records.

Different categories of information may have different retention periods.

For example:

Staff accounts: Retained while the account remains authorised and active.
Login and authentication records: Retained for security monitoring and investigation for a reasonable period.
Customer and order information: Retained according to operational, customer service, accounting and applicable legal requirements.
Inventory and purchase records: Retained for business management, reconciliation and applicable record-keeping requirements.
Technical and diagnostic information: Retained for troubleshooting, security and system maintenance for a reasonable period.
Exported reports: Retained on devices or storage locations selected by the authorised user until deleted by the user or otherwise removed.

When information is no longer required, we will take reasonable steps to delete it or anonymise it, subject to applicable legal and business record-retention obligations.

11. Staff Account Management and Deletion

Crust N Chill Admin is an internal business application. Staff accounts are created and managed by authorised business administrators.

Public self-registration is not available.

When an employee or staff member leaves Crust N Chill or no longer requires access to the Application, the owner or an authorised administrator can manually delete or deactivate the relevant account.

Staff members may request account deletion or removal of their personal information by contacting us through the official email address or grievance contact details provided in this policy.

Upon receiving a valid request:

We may verify the identity of the requester.
The request will be reviewed by the authorised business administrator.
The relevant staff account may be deleted or deactivated.
Access permissions and authentication credentials will be revoked as appropriate.
Personal information that is no longer required will be deleted or anonymised, subject to applicable retention obligations.

Deleting a staff account does not necessarily result in the deletion of associated customer records, orders, inventory information, financial records or other business records.

Such records may be retained where necessary for legitimate operational, accounting, legal or regulatory purposes.

12. Customer Data and Employee Responsibilities

Because the Application provides authorised staff with access to customer information, users are expected to handle such information responsibly.

Authorised users must:

Use customer information only for legitimate restaurant operations.
Not disclose customer information to unauthorised individuals.
Not copy or distribute customer records for personal purposes.
Not misuse customer phone numbers or delivery addresses.
Not use customer information for personal marketing or unrelated communication.
Maintain the confidentiality of their login credentials.
Report suspected unauthorised access or security incidents.
Secure their devices when not in use.
Handle exported Excel and PDF files responsibly.
Follow internal business access and security procedures.

Any misuse of customer or business information may result in suspension or termination of Application access and other appropriate action.

13. Children's Privacy

Crust N Chill Admin is an internal business application intended for authorised adult personnel.

It is not designed or intended for use by children.

We do not knowingly create administrator accounts for children or intentionally collect children's personal information through the Application for its internal administrative purposes.

Customer information accessed through the Application may relate to customers of different ages. Such information is processed only for legitimate restaurant operations and applicable legal purposes.

14. Third-Party Websites and Services

The Application may interact with or rely on third-party services and infrastructure, including Supabase, Firebase and WhatsApp.

Such services may operate under their own privacy policies and terms of service.

Crust N Chill does not control the independent privacy practices of third-party providers.

Users are encouraged to review the privacy policies of relevant third-party services where applicable.

Our use of third-party providers is intended to support the functionality and operation of the Application and associated business services.

15. International Data Processing

Some third-party technology providers may operate infrastructure or process information in locations outside India.

Where personal information is processed or stored outside India, we will take reasonable steps to ensure that such processing is undertaken in accordance with applicable Indian laws and any relevant restrictions on cross-border data transfers.

16. Privacy Rights and Requests

Subject to applicable laws, individuals whose personal information is processed by Crust N Chill may request:

Information about personal data being processed.
Correction of inaccurate personal information.
Erasure of personal information where legally permissible.
Withdrawal of consent where processing is based on consent.
Assistance regarding the handling of personal information.
Submission of a privacy-related complaint or grievance.

Requests may be submitted through the contact details provided in this policy.

We may request reasonable information to verify the identity of the person making a request before processing it.

Certain requests may be limited where information must be retained to comply with applicable legal obligations or to protect legitimate business interests.

We will handle requests in accordance with applicable laws and prescribed timelines.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes in Application functionality.
Changes in the information we process.
Changes in third-party service providers.
Changes in applicable laws and regulations.
Changes in our security and data-management practices.

Any updated version will be published at the official Privacy Policy URL.

The revised policy will mention the updated effective or last-updated date.

Users are encouraged to review this policy periodically.

If a material change affects how personal information is collected or processed, we will provide appropriate notice where required by applicable law.

18. Legal Compliance

Crust N Chill aims to handle personal information in accordance with applicable data protection and privacy laws in India.

These include, where applicable:

The Information Technology Act, 2000.
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
The Digital Personal Data Protection Act, 2023.
The Digital Personal Data Protection Rules, 2025.
Applicable rules, notifications, amendments and directions issued by the Government of India.

We will review and update our information-handling practices as applicable legal requirements come into effect.

19. Contact Information and Grievance Redressal

If you have questions, concerns, requests or complaints regarding this Privacy Policy or the handling of personal information through Crust N Chill Admin, you may contact us using the following details.

Business Name: Crust N Chill

Application: Crust N Chill Admin

Privacy and Grievance Contact: Atul Singh

Official Business Email: crustnchill.care@gmail.com

Grievance Email: atulbola8@gmail.com

Contact Number: +91-9649051211

Business Address:

1st Floor, Near Telephone Exchange,
Azad Market, Mandrella,
Jhunjhunu, Rajasthan, India - 333025.

Website: https://crustnchill.com

Please include the following information when submitting a privacy-related request:

Your name.
Your association with Crust N Chill, if applicable.
Your registered username or account identifier, where relevant.
A clear description of your request or complaint.

We will review and respond to privacy-related requests in accordance with applicable legal requirements.

20. Final Statement

Crust N Chill is committed to maintaining the confidentiality, integrity and security of information handled through the Crust N Chill Admin Application.

We use information available through the Application for authorised restaurant management, order processing, inventory management, logistics coordination, customer support and other legitimate business purposes.

We do not sell personal information. However, certain information may be shared with authorised delivery personnel, WhatsApp and technology service providers as described in this Privacy Policy.

We aim to restrict access to customer and business information to authorised personnel and trusted service providers where necessary for operating the Application.

By using Crust N Chill Admin, authorised users are expected to handle information responsibly and in accordance with their assigned permissions and applicable privacy requirements.

End of Privacy Policy