Privacy Policy

Tukkito is a local food-ordering platform operated by The Purble Bird Technology. This notice applies to the public website, including food discovery, customer accounts, cart and checkout, order history, and support or partnership enquiries.

Tukkito uses Google Firebase (Authentication, Firestore, Cloud Functions, and Cloud Storage) in project hungers-577f4 — the same project used by the Tukkito Customer, Restaurant, and Delivery applications. This policy describes website processing. App-specific screens may collect additional fields that are not submitted through this website.

India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 apply according to their commencement. This page is written as a plain-language notice of current processing. It is not a statement that Tukkito has completed every obligation under that framework.

The website collects the following personal data when you use the corresponding feature. If you only browse marketing pages, Tukkito does not create a customer account from that browsing alone.

• Mobile number, used to send a one-time password (OTP) through Firebase Phone Authentication.
• Firebase Authentication UID, created when you complete OTP sign-in.
• Account profile fields written after sign-in: UID, mobile number, and any name, email, or photo URL already present on the Firebase user record (phone sign-in typically has no email).
• Delivery address you enter at checkout: door number, street, area, address line, city, state, pincode, and optional map coordinates.
• Cart lines stored under your account: food ID, food name, restaurant ID and name, quantity, listed price or offer price, and availability flags.
• Order records created through the existing placeOrder function: restaurant, item quantities, delivery address, payment method shown on the website (pay on delivery), and order status returned by the Order System.
• Support and partnership enquiry fields: name, mobile number, email address, enquiry category, and message.
• Optional browser location (latitude and longitude) if you choose “Use browser location” at checkout. The Home page location field is not currently sent to the server.

Tukkito uses the data above for these purposes:

• To authenticate you and keep you signed in on this website.
• To show customer-visible food, category, and restaurant information after sign-in, subject to Firestore rules.
• To maintain your cart and place orders through the existing Tukkito Order System.
• To check whether a pincode is in a serviceable area and, if you share GPS, whether that point is inside an active serviceability zone.
• To show your orders and status on this website.
• To receive and route support, restaurant-partnership, and delivery-partner enquiries.
• To operate, secure, and debug Firebase Authentication, Firestore, Functions, and Storage as used by this website.

Customer sign-in uses Firebase Phone Authentication. You enter a 10-digit Indian mobile number. Firebase sends an OTP. Google reCAPTCHA (invisible) is used as part of that sign-in flow.

After a successful OTP, the website creates or updates a customer profile document for your UID. Signing out ends the Firebase Auth session on this browser. The website does not implement a separate password, social-login, or in-app rights portal.

Checkout sends the restaurant ID, food IDs and quantities, delivery address, and an idempotency key to the existing placeOrder Cloud Function. The website does not calculate the payable total; pricing is returned by that function.

The website checkout path is pay on delivery. This website does not collect card, UPI, or wallet credentials. If other payment methods exist in the Customer App or on the server, they are outside this website’s forms.

Order status and assignment of a delivery partner are handled by the existing Order System, not by a separate website order engine.

The Support page and Partner With Us form submit name, mobile number, email, category, and message through the submitSupportEnquiry Cloud Function. Categories include customer, restaurant partnership, delivery partnership, and related support types configured on the form.

The website does not let you read or edit submitted enquiries after send. Handling after submission is performed by Tukkito staff systems, not by a public self-service inbox.

Pincode is required at checkout and is checked for serviceability. Address fields and optional GPS coordinates are stored on your profile when you place an order or save location from checkout.

Browser geolocation is requested only if you tap “Use browser location”. You can refuse that permission and type an address instead. The website does not continuously track your device.

This website’s source does not install a separate analytics, advertising, or cookie-consent product.

Firebase Authentication and Google reCAPTCHA may store cookies or similar local data in your browser so that sign-in and bot protection can work. Those technologies are provided by Google, not configured as a Tukkito marketing pixel in this codebase.

If Tukkito later adds analytics or advertising cookies, this section must be updated before those tools are enabled.

Order information is processed so that the restaurant associated with your cart and Tukkito’s existing delivery operations can fulfil the order. Support enquiries are routed to Tukkito staff according to the category you select.

Tukkito does not sell personal data through this website. Sharing that is not described here should not be assumed. A complete list of commercial subprocessors is not published in the website source and must be confirmed by the business before launch.

The website uses Google Firebase for authentication, database, callable functions, and image storage. Hosting of this Next.js site may also process technical request logs (for example IP address and user agent) at the hosting layer. Those logs are not written by Tukkito application code in this repository.

Social profile links (Instagram, X/Twitter, Facebook) are outbound links only. Visiting those sites is governed by those services’ policies.

The website source does not define automatic deletion periods for accounts, carts, orders, or enquiries. Data remains in Firebase according to Tukkito’s operational need to authenticate you, fulfil and support orders, and handle enquiries, until a deletion or restriction request is actioned or a retention schedule is adopted.

Retention periods require confirmation by Tukkito’s legal/business team and must not be read as “immediate permanent deletion”.

Access to customer catalog, cart, and orders on this website depends on Firebase Authentication and Firestore security rules. Communications to Firebase use HTTPS.

No system is perfectly secure. Tukkito does not claim that data cannot be accessed, lost, or altered in every circumstance.

Depending on applicable law, you may have rights to access, correction, erasure, nomination, or withdrawal of consent, and to complain to the Data Protection Board of India once that mechanism applies.

This website does not currently provide a self-service dashboard to download, correct, or delete your account data. To make a request, contact Tukkito using the details in the Contact section. Tukkito will need enough information to verify that the request relates to your account (typically the mobile number used to sign in).

You can refuse optional browser location. You can sign out. You can decline to submit an enquiry. Withdrawing consent for OTP sign-in means you will not be able to use signed-in website features (cart, checkout, orders, and live catalog where rules require sign-in).

The website is intended for people who can lawfully place a food order and create an account. The source does not implement an age gate. Tukkito does not knowingly use this website to offer accounts to children. If you believe a child has provided personal data, contact Tukkito using the details below.

Tukkito may update this page when the website’s processing changes or when legal/business review revises the text. The “Last updated” date at the top will change when a reviewed version is published.

The Purble Bird Technology

No. 386, LIG Colony Road, Anna Nagar, Madurai – 625 020, Tamil Nadu, India

Official Email: contact@thepurblebird.com

Grievance & Support Contact: support@tukkito.com

Phone: +91 95666 14246

Phone: +91 70920 75030

You may also use the Support enquiry form on this website.