Seva Kitchen — Privacy Policy
Last updated: 14 October 2026
Seva Kitchen is an order-management app for community kitchens. It contains no advertising, no analytics, and no third-party trackers. This page covers version 2.0 of the app and, where a phone can still be running it, version 1.0.
What the app stores
From version 2.0, orders including customer names and notes are stored on our server. Customer names and notes are deleted from the live system 30 days after their service day was opened, and from our recovery history within 30 more days. In version 1.0 they stay on the device. Version 2.0 deletes what version 1.0 stored on the device.
- On our server, in both versions: staff names, roles and PIN hashes (PINs are stored only as salted cryptographic hashes), sign-in sessions, and, if a staff member turns notifications on, that device's push subscription. Each kitchen's data is kept separately on Cloudflare's platform and is not shared between kitchens.
- On our server, from version 2.0: the kitchen's name and currency; each service day's menu with prices and stock counts; each order with its number, items and total, the customer name and note if a staff member typed them, which staff member placed it and who marked it picked up, and the reason typed if it was cancelled; and a log of what each staff member did and when. No phone number and no email address of a customer is collected.
- On the device, in version 2.0: the kitchen id and the server's address, the signed-in staff member's name, role and session, the theme choice, and an order that is being typed and has not been placed yet, which may hold a customer name and a note. An unplaced order left over when the day changes is never shown or sent again; it stays in the device's storage until that staff member next opens the order screen on that device. The day's orders are held in memory while the app is open and are not saved on the device, with one exception: an administrator can save or print one day's report from the web app. The saved file holds that day's orders, with the customer names and notes that have not been deleted yet, and stays on that administrator's device until they delete it. The deletion after 30 days and a deletion request do not reach a saved file or a printout.
Customer names and notes are shown to the signed-in staff of that kitchen for the current day and to its administrators for past days. They are never put in a notification, on a customer's order link or in the log of staff actions.
What the app never does
- No selling or sharing of data with third parties.
- No advertising or marketing use of any data.
- No location tracking, contact access or background collection. No camera access without an explicit action, and from version 2.0 the app does not use the camera at all.
Customer order links
A customer may be given a private link (QR code) showing only their own order's number, items, and status. The link contains an unguessable secret and reveals nothing about any other order. It does not show the customer's name or note.
Notifications
Staff notifications are opt-in per device and can be turned off in Settings at any time. Notification content is limited to order numbers and item names. A notification reaches the device through the push service of that device's browser.
Data retention and deletion
Customer names and notes are deleted from the live system 30 days after their service day was opened, whether or not the day was closed. Our recovery history, which exists so that a kitchen can be put back after a mistake, reaches back 30 days, so a deleted name or note is gone from it within 30 more days. Only the operator can use the recovery history, and no screen of the app reads it.
The rest of an order (its number, items, total, the staff names on it and a cancellation reason) and the kitchen's menu, totals and log of staff actions are kept as the kitchen's history. Organization administrators can disable staff accounts immediately. To request deletion of an organization's data on our server, contact the operator below.
In version 1.0 the backend keeps a kitchen's order events only until its next day is opened.
Version 2.0 deletes what version 1.0 stored on the device. It does this by itself when it starts, in the browser and in the installed app. Nothing is uploaded first, and nobody has to clear or reinstall anything.
Request data deletion
To request deletion of a customer name or note attached to an order, email vinitmakwana69@gmail.com with the kitchen name, the date of the order and the name to remove. Requests are honoured within 30 days. A customer name or note is in any case deleted from the live system 30 days after its service day was opened, and from our recovery history within 30 more days.
A staff account is not deleted by itself. The kitchen's administrator disables it on the spot (Settings → Manage kitchen), and from then on it cannot sign in. The staff member's name stays on the orders they placed or handed over and in the log of staff actions, as the kitchen's record, until the kitchen's whole data is deleted. A kitchen can request that at the same address.
Get the app
Download on the App Store Request the Android app
iPhone & iPad now. The Android app is in testing — email the address above to request access.
Contact
Vinit Makwana — vinitmakwana69@gmail.com