Start typing and hit Enter

Shopping Cart

0

Your shopping bag is empty

Go to the shop
logo
image/svg+xml image/svg+xml 0
Close
Home Privacy Policy

Privacy Policy

Privacy Policy

Last updated: 20 May 2026 

Tribal Spoon (“we”, “us”, “our”) operates the website https://www.tribalspoon.com (the “Website”) and the Tribal Spoon mobile application on Android (the “App”). Together, these are our “Services”. 

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and what rights you have. By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. 

1. Who we are 

Business name: Tribal Spoon 

Registered / business address: 277 Imkonglenden Colony, Dimapur, Nagaland, India 

Delivery / contact address: Padum Pukhuri, 2½ Mile, Dimapur, Nagaland 797112, India 

FSSAI Registration No.: 21925023000320 

Privacy contact: 

  • Phone / WhatsApp: +91 93665 73196 

For privacy requests (access, correction, deletion), contact us using the details above with the subject line “Privacy request”. 

2. Scope of this policy 

This policy applies to: 

  • Visitors and customers who use our Website (including online shop, account, and checkout where available). 

  • Users who install and use our Android App (customer ordering, phone login, addresses, order history, delivery tracking). 

  • Staff and delivery personnel who use staff features inside the App (separate login; see Section 8). 

Our Website may contain links to other sites (e.g. social media, payment apps). We are not responsible for the privacy practices of those third-party sites. 

3. Information we collect 

We may collect the following categories of information, depending on how you use our Services: 

3.1 Information you provide 

  • Identity and contact: name, mobile phone number, delivery address, PIN code, area/city, special delivery notes. 

  • Account: phone number used for one-time password (OTP) login in the App; profile details you choose to save. 

  • Orders: products ordered, quantities, prices, delivery date and slot, order status, payment method selected (e.g. UPI, cash on delivery), order identifiers. 

  • Addresses: saved delivery addresses and map pin coordinates you set for delivery. 

  • Communications: messages you send us (email, phone, WhatsApp, contact forms), and our replies. 

  • Website account: if you register on the Website, information you submit during registration or checkout (as applicable). 

We do not require gender, age, or interests to use the App. If the Website asks for optional profile fields, providing them is voluntary. 

3.2 Information collected automatically 

Website 

  • Cookies and similar technologies: to operate the shop, remember preferences, and (where enabled) for analytics and advertising. See Section 9. 

  • Device and usage data: IP address, browser type, pages viewed, referring URLs, and similar technical logs. 

Android App 

  • Device and app data: device model, operating system version, app version, language, and diagnostic logs needed to run and secure the App. 

  • Identifiers: Firebase authentication user ID; push notification tokens (Firebase Cloud Messaging). 

  • Location (customers): if you allow it, precise location only while you use the App to help place or adjust your delivery address on a map. We do not ask customers for “all the time” (background) location. 

  • Location (delivery staff / managers only): if you log in as authorised staff with a delivery or manager role, we may collect location while you are on duty and within our tracking window, including in the background where permitted by your device settings, to support delivery operations and live tracking. This does not apply to ordinary customer accounts. 

3.3 Payment information 

  • App: Payments are typically completed through third-party UPI apps (e.g. Google Pay, PhonePe, Paytm) or other methods we offer. We do not store your full UPI PIN or complete card credentials in the App. We may store payment status (e.g. paid, pending, cash on delivery) and references needed for order fulfilment. 

  • Website: If you pay on the Website, payment may be processed by payment gateways or banks. Card or bank details are handled by those providers under their own privacy policies. We receive only the information needed to confirm and fulfil your order. 

3.4 Information from third parties 

  • Firebase / Google: authentication (including phone verification), cloud database, and push notifications (see Section 7). 

  • Google Maps / location services: when you use map features to set a delivery pin. 

  • Fraud, delivery, and operations: we may receive information from delivery partners or payment providers where needed to complete your order. 

4. How we use your information 

We use personal information to: 

  1. Create and manage your account and authenticate you (including OTP login). 

  1. Process, fulfil, and deliver orders; assign delivery; provide order status and tracking. 

  1. Communicate with you about orders, support, and service updates (including push notifications if enabled). 

  1. Improve our products, menus, delivery areas, and customer experience. 

  1. Prevent fraud, abuse, and security incidents; enforce our terms. 

  1. Comply with law, tax, and regulatory requirements (including food safety and business records). 

  1. Send marketing about Tribal Spoon only where permitted by law and, where required, with your consent (you can opt out at any time). 

We may use aggregated or de-identified data that cannot reasonably identify you for analytics and reporting. 

5. Legal bases (where applicable) 

Depending on your location and applicable law (including India’s Digital Personal Data Protection Act, 2023, where it applies), we process personal data based on one or more of: performance of a contract (fulfilling your order), legitimate interests (operating and improving our business, security), legal obligation, and consent (e.g. optional marketing, certain cookies, or location where consent is required). 


6. How we share your information 

We do not sell your personal information. 

We may share information with: 

Recipient 

Purpose 

Service providers (e.g. Google Firebase for auth, database, messaging; hosting; SMS/OTP providers) 

To run the App and Website securely 

Delivery personnel and partners 

To deliver your order to your address 

Payment processors / UPI apps 

To complete payment you initiate 

Professional advisers (lawyers, accountants) 

Where necessary and subject to confidentiality 

Authorities 

When required by law, court order, or to protect rights and safety 


We require service providers to use data only to provide services to us and to protect it appropriately. Firebase/Google may process data on servers outside India; see their privacy policies: Google Privacy Policy. 

If we merge, sell, or reorganise our business, your information may transfer to the successor entity, subject to this policy. 

7. Cloud services (Firebase) 

Our App uses Google Firebase services, including: 

  • Firebase Authentication (phone number verification via OTP) 

  • Cloud Firestore (storing orders, addresses, and customer account data) 

  • Firebase Cloud Messaging (order-related push notifications) 

Google’s processing is governed by Google’s Privacy Policy and Firebase terms. We configure access controls so customer data in our database is protected by authentication and security rules. 

8. Staff and delivery users 

Authorised staff (admin, manager, support, delivery, etc.) use restricted features to manage orders, customers, and operations. Staff accounts: 

  • Are created and managed by Tribal Spoon administrators. 

  • May access order and customer information only as needed for their role. 

  • Delivery and manager roles: may be subject to live location collection as described in Section 3.2 for operational and safety purposes during active delivery windows. 

Staff must not share login credentials. Staff privacy is also protected; work-related location and activity data are used only for Tribal Spoon operations. 

9. Cookies and similar technologies (Website) 

Our Website may use: 

  • Essential cookies — required for shopping cart, login, and checkout. 

  • Analytics cookies (e.g. Google Analytics, if enabled) — to understand how visitors use the site. 

  • Advertising cookies (if enabled) — to measure and deliver relevant ads. 

You can control cookies through your browser settings. Blocking essential cookies may affect Website functionality. Where required by law, we will ask for consent before non-essential cookies. 

The App does not use website cookies; it uses the technologies described in Section 3.2. 


10. Push notifications (App) 

If you allow notifications, we may send messages about order status, delivery, and important service updates. You can turn off notifications in your device settings at any time. Disabling notifications does not delete your account or order history. 

11. Data retention 

We keep personal information only as long as needed for the purposes above, including: 

  • Active accounts and recent orders: for the period you use our Services and as needed to support you. 

  • Order and transaction records: typically up to 7 years (or longer if required for tax, legal, or accounting obligations in India). 

  • Support communications: as long as needed to resolve issues and for a reasonable period thereafter. 

  • Staff operational data (e.g. delivery location logs): for a limited period needed for operations, dispute resolution, and safety, then deleted or anonymised where possible. 

When data is no longer required, we delete or anonymise it, subject to legal retention requirements. 

12. Security 

We use reasonable technical and organisational measures to protect personal information, including HTTPS encryption in transit, access controls on our cloud database, and restricting staff access by role. No method of transmission or storage is 100% secure; please use a strong device lock and do not share your OTP or account with others. 

13. Children 

Our Services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly. 

14. Your rights and choices 

Subject to applicable law (including rights under India’s DPDP Act where applicable), you may have the right to: 

  • Access a copy of personal information we hold about you. 

  • Correct inaccurate or incomplete information. 

  • Delete your account and associated personal data (see Section 15). 

  • Withdraw consent where processing is based on consent (without affecting prior lawful processing). 

  • Object or restrict certain processing where the law allows. 

  • Complain to a relevant data protection authority in your jurisdiction. 

To exercise these rights, contact us at support@tribalspoon.in or +91 93665 73196, with the phone number or email linked to your account. We may need to verify your identity before responding. We aim to respond within 30 days. 

15. Account and data deletion (App and Website) 

You may stop using our Services at any time. To request deletion of your account and personal data: 

  1. Email support@tribalspoon.in or WhatsApp +91 93665 73196 from your registered contact, or 

  1. Use Delete account in the App (Profile menu), when available. 

Include your registered mobile number and, if possible, your name. We will: 

  • Delete or anonymise your Firebase/App account data (profile, saved addresses in our App systems) within 30 days, and 

  • Retain only information we must keep for legal, tax, or completed order records (e.g. past invoices/orders), as explained in Section 11. 

Signing out of the App does not delete your account. Deletion is irreversible for data we are not legally required to retain. 

Play Store users: The same deletion process applies to accounts created through the Tribal Spoon Android app listed on Google Play. 

16. International transfers 

Our service providers (including Google/Firebase) may store or process data in India and other countries. Where data is transferred outside India, we take steps consistent with applicable law to ensure appropriate safeguards. 

17. Changes to this policy 

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be posted on this page; for the App, we may also notify you in-app or by other reasonable means. Continued use after changes means you accept the updated policy. 

18. Contact us 

For privacy questions, requests, or complaints: 

Tribal Spoon 
Padum Pukhuri, 2½ Mile, Dimapur, Nagaland 797112, India 

  • Phone / WhatsApp: +91 93665 73196