Effective 3 October 2026. LastBite is run from Dindigul, Tamil Nadu, India. Questions or requests: sharuksha1020@gmail.com.
LastBite lets local food shops post their unsold food at a discount, and lets customers reserve it, pay the shop directly by UPI and pick it up. This page explains what personal data we collect, why, who sees it, and what you can ask us to do with it.
What we collect
- Your account: your name and email address. If you sign in with Google, we receive your name and email address from Google (the basic “openid, email, profile” permission) and nothing else from your Google account. If you use email and password, your password is stored only in hashed form.
- If you run a shop: owner name, shop name, area and address, mobile number, FSSAI licence or registration number, your shop’s UPI ID, an optional photo of your FSSAI certificate, the deals you post (item, prices, quantity, pickup time, photo) and your shop’s orders.
- If you order food: your reservations and orders (item, quantity, amount, 4-digit pickup code, status) and a count of orders you reserved but did not collect.
- Technical data: the sign-in session and your language choice are kept in your browser’s storage so you stay signed in. Our hosting and database providers keep standard server logs (such as IP address and time of a request) for security. We do not use advertising or tracking cookies.
Money
LastBite does not handle payments. You pay the shop directly from your own UPI app. We never see or store your bank, card or UPI PIN details. We only show the shop’s UPI ID and the amount.
Why we use it
- To run the service: show deals, take reservations, show pickup codes and let shops verify them.
- To check that every shop is a licensed food business (we check FSSAI numbers on the government’s FoSCoS portal) before its deals go live.
- To keep LastBite fair and safe: limits on open reservations, handling no-shows, and suspending shops or accounts that break the rules.
- To contact you about your account, a shop review or an order.
Who can see what
- Customers see a shop’s name, area, deals and UPI ID. They never see the shop’s phone number or the owner’s email address.
- Shops see the orders for their own deals: item, quantity, amount, pickup code and status. They do not see customers’ email addresses.
- LastBite’s administrator reviews shop registrations (including the FSSAI certificate photo) and can see orders to resolve problems.
- Service providers who run parts of LastBite for us: Supabase (database, sign-in and file storage, hosted in Mumbai, India), Cloudflare (website hosting) and Google (only if you choose “Continue with Google”). They process data on our behalf.
We do not sell your personal data, and we do not share it for advertising.
How long we keep it
We keep your data while your account is open. If you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law or to resolve an open dispute. Deal photos of ended deals and order records may be kept in anonymised form for statistics.
Your choices and rights
Under India’s Digital Personal Data Protection Act, 2023 you can ask us to see, correct or erase your personal data, withdraw your consent, and raise a complaint. Shops can correct most of their details in the app while their registration is under review. For anything else, email sharuksha1020@gmail.com; we reply within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Age
LastBite is for people aged 18 or over.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.