Privacy Policy

Account information: When you create an account, we collect your full name, email address, and password (stored securely via Supabase Auth).

Order information: When you place an order, we collect your name, phone number, delivery address, area/pincode, preferred start date, and any special instructions.

Payment information: Payments are processed by Cashfree Payments. We do not store your card or UPI details on our servers. Cashfree may collect and store payment information per their own privacy policy.

Usage data: We automatically collect information about how you interact with our website, including pages visited, browser type, device type, IP address, and session duration, via analytics tools.

Cookies: We use cookies and similar tracking technologies to maintain your session, remember preferences, and collect analytics data. You can disable cookies in your browser settings, though this may affect functionality.

We use your information to:

• Process and fulfil your breakfast subscription orders
• Contact you to confirm orders, share payment details, and coordinate delivery
• Send service-related communications (e.g. start date reminders, delivery updates)
• Respond to customer support queries
• Improve our website, menu, and service quality
• Comply with legal and regulatory obligations
• Detect and prevent fraud or unauthorised access

We do not use your information to send unsolicited marketing messages without your consent.

We do not sell or rent your personal information. We share your data only with:

• Supabase Inc. — our database and authentication provider. Your account and order data is stored on Supabase-managed infrastructure.
• Cashfree Payments India Pvt Ltd — our payment gateway. Order amount and customer details are shared to initiate payment.
• Google LLC — Google Analytics is used to understand site traffic and usage patterns. Data is anonymised.
• Meta Platforms Inc. — Meta Pixel is used to measure the effectiveness of advertising and understand user behaviour. Data is governed by Meta's data policy.
• Vercel Inc. — our website hosting and deployment provider. Vercel Analytics is used for performance monitoring.
• Legal authorities — if required by law, court order, or to protect the rights and safety of our users or the public.

We retain your account and order data for as long as your account is active or as required to provide our service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g. financial records).

Analytics data (Google Analytics, Meta Pixel, Vercel Analytics) is retained per the respective platform's default retention settings.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security on our database so users can only access their own data
• Secure authentication via Supabase Auth with hashed passwords
• Restricted access to production systems and API keys

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

Under applicable Indian law (Digital Personal Data Protection Act, 2023) and general data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your personal data (subject to legal requirements)
• Withdraw consent for data processing where consent is the basis
• Raise a grievance with our Data Protection Officer

To exercise any of these rights, email us at support@morningnutriz.com or WhatsApp us at +91-9113276708. We will respond within 30 days.

Our service is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

Our website may contain links to third-party websites (e.g. WhatsApp, social media). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Continued use of our service after changes constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: