Draft status
These policies are drafts pending legal review. The summary below describes how the platform is designed to handle data. It will be finalised after legal review.
What we collect
Account data: your email address and a display name, and your password in hashed form (we never store your password in readable form).
Reports you submit: the details you enter about a food issue, such as product, establishment, location, dates, and any health information you choose to include, plus the status history of the report.
Evidence you upload: images (JPEG, PNG, WebP) and PDFs. Image metadata such as EXIF and GPS location data is stripped before storage.
Security data: a hashed form of your IP address and your browser's user-agent, stored with your login session, plus a record of key moderation and administrative actions (an audit log).
We do not use the platform to publish your identity. Public report pages show 'Submitted by a registered user'.
Why we use it
To run your account and let you submit, edit, withdraw and track reports.
To review reports and evidence, and to publish moderated reports and statistics without revealing who submitted them.
To protect the platform: preventing abuse, spam and unauthorised access, and keeping an audit trail of moderation decisions.
To send you service messages, such as email verification, password reset, and notifications about your reports.
What becomes public
Only reports that a moderator has chosen to publish are public. Business or brand names appear publicly only after moderation. Your account email and identity are never shown on public pages. Uploaded images become public only if a moderator approves them as public.
How long we keep data
Login sessions are stored as a secure hash and expire after a period of inactivity (currently 30 days, extended while you remain active).
Other retention periods, such as for account data, reports, evidence files and security logs, are still to be finalised in this draft and will be stated here once confirmed. We will not keep personal data longer than needed for the purposes above.
Your rights
India's Digital Personal Data Protection Act, 2023 gives individuals (called Data Principals) rights that include obtaining information about their personal data, requesting correction and erasure, grievance redressal, and nominating another person to exercise rights in certain circumstances. The Act is being brought into effect through rules and notifications by the Government of India; how and when each provision applies is set by those instruments.
You can contact us at contact@foodquality.in to ask about your data, request correction, or ask for deletion of your account and personal data. Some information may need to be retained where required by law or for legitimate security and audit purposes.
Sharing
We do not sell your personal data. We may disclose information where required by law or valid legal process. If we use service providers to run the platform (for example hosting), they process data on our behalf.
Contact
Questions about this policy: contact@foodquality.in.