Privacy policy
Effective 1 November 2026
This policy explains what personal data Khaali collects, why, and what choices you have. Khaali is run by Akhil Nair, a sole proprietor in Ahmedabad, Gujarat, India, who is responsible for your data under India's Digital Personal Data Protection Act, 2023.
- What we collect
- What stays on your device
- Why we use your data
- Consent
- How long we keep it
- Who processes data for us
- Cookies and tracking
- Your rights
- Security
- Children
- Contact and grievances
- Changes to this policy
What we collect
- Email address, so we can send your order receipts.
- Order history: what was in your cart, the price you paid, the money you saved and the estimated nutrition, so we can show your receipts and totals.
- Payment status: a payment reference and whether it succeeded, from our payment partner. We never receive your full card number, UPI PIN or bank login.
- Suggestions you choose to send us, such as a dish you'd like added.
What stays on your device
Your cart, saved delivery addresses, and any age, height and weight you enter for personal nutrition numbers are stored in your own browser. They are not sent to us. Clearing your browser data removes them.
Why we use your data
Only to run Khaali: to process orders, send receipts, handle refunds and complaints, keep the service secure, and meet legal and tax requirements. We do not sell your data, and we do not use it for advertising.
Consent
We ask for your consent before collecting your email address. You can withdraw consent at any time with the Clear my data link in any receipt or by emailing us. Withdrawing consent is as easy as giving it.
How long we keep it
We keep your email and order history until you clear your data. Basic payment and transaction records are kept for as long as Indian tax and accounting laws require, even after you clear your data.
Who processes data for us
- Cloudflare hosts the website and stores order data.
- Razorpay processes payments.
- Resend sends receipt emails.
- Hostinger runs our support mailbox.
They handle data only to provide their service to us. Some of them may process data outside India, with safeguards as permitted by Indian law.
Your rights
You can ask to see the personal data we hold about you, correct it, or erase it. You can also nominate someone to exercise these rights for you if you're unable to. To do any of this, use Clear my data or email us. If you're unhappy with our response, you can complain to the Data Protection Board of India.
Security
Data is encrypted in transit, payment checks happen on our server, secret keys are never placed in the website code, and only the owner can access customer data. If a breach ever affects your data, we will inform you and the authorities as the law requires.
Children
Khaali is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
Contact and grievances
Akhil Nair, Grievance Officer
Khaali, Ahmedabad, Gujarat, India
Email: hello@khaali.in
Changes to this policy
If we change how we use your data, we'll update this page and, for important changes, tell you by email.