1. Scope
This Privacy Policy applies to the bimi website, mobile applications (including the Bimi Partners app for cooks), communications, and home-cook services (together, the “Platform”). The Platform is operated by GoodMatters Enterprises under the brand “bimi” (“bimi”, “we”, “us”, or “our”).
By using the Platform or giving us your information, you acknowledge this Policy. This Policy does not govern third-party websites, payment services, or applications that have their own privacy policies.
2. Information we collect
Information you provide
- Account and contact details: name, mobile number, email address, and login or verification information.
- Booking details: address, location, selected dishes, portions, time slots, ingredient preferences, special instructions, and booking history.
- Payment and transaction details: payment status, transaction references, refunds, bimi wallet balance and ledger activity, and billing information. Full card or bank credentials may be collected directly by the payment provider rather than by us.
- Communications and content: support messages, calls or chats where permitted, survey responses, ratings, reviews, photos, and feedback.
- Safety and service information: dietary restrictions, allergy information, access instructions, and incident reports you choose to share.
Information collected automatically
When you use the Platform, we may collect device type, operating system, app version, IP address, browser type, identifiers, pages or features used, timestamps, crash data, and diagnostic logs. With your device permission, we may collect precise or approximate location to check service availability, suggest an address, and support a booking.
Cart activity: while you are signed in, we collect the dishes, headcounts and add-ons in your cart, additions and removals, activity and receipt timestamps, app version, platform, and a randomly assigned cart identifier linked to your account. We associate reported cart revisions with checkout and booking outcomes to understand feature use, improve the booking experience and support operations. These reports are visible to authorised bimi operators. Cart reporting does not use advertising identifiers or track your activity across other companies’ apps or websites.
Guest browsing analytics: where you allow guest analytics in the iOS app, we record app opens, displayed Home, dish and cart views, and real dish additions, together with activity and receipt times, platform, app version, and available source tags. We use randomly assigned visitor and journey identifiers rather than an advertising identifier. If you later sign in on that device, eligible guest observations may be linked to your account and its checkout and booking history. Authorised bimi operators use these reports to understand and improve the booking experience. Guest analytics do not collect your contact details, address or free-text cooking instructions, and do not track your activity across other companies’ apps or websites. You can allow or turn off guest analytics in the app’s Privacy settings without losing access to the menu or booking service.
Information from others
We may receive information from Home Cooks, payment providers, analytics and communications providers, referral partners, or other users—for example, booking completion, payment status, service feedback, or a safety report.
When you choose to use a Bimi customer referral, we record the invitation code, the referring and joining accounts, the accepted offer terms, and progress towards the reward. We use your verified phone identity to prevent repeat new-user claims. Referrals do not require access to your contacts, and opening the share sheet does not send a message automatically.
3. How we use information
We use information where needed to provide the service, with your consent, to comply with law, and for legitimate business purposes such as safety, security, and service improvement. This includes:
- creating and securing your account;
- checking service availability and arranging, managing, or supporting bookings;
- sharing the booking address and instructions with the assigned Home Cook;
- processing payments, cancellations, refunds, and invoices;
- sending booking confirmations, arrival updates, service messages, and support replies;
- personalising menus or recommendations and remembering your preferences;
- monitoring quality, investigating incidents, preventing fraud, and protecting users, Home Cooks, and the Platform;
- analysing performance, fixing errors, and developing or improving features; and
- complying with legal obligations and enforcing our Terms & Conditions.
We may send promotional messages where permitted. You can opt out using the unsubscribe option in the message or by contacting us. You may still receive essential booking and account messages.
6. How long we keep information
Detailed browsing events are retained for up to 90 days from the time of the activity. Your device keeps a bounded queue for retrying unsent events; expired events are discarded when reporting resumes. Turning off guest analytics clears unsent guest events and stops new guest collection. Account-linked growth events are removed when account deletion is fulfilled. These limits do not alter the separate retention of required booking and accounting records.
We retain cart activity history for up to 90 days after receipt and remove inactive reported carts after 90 days without a report. Cart reports are removed when account deletion is fulfilled. Your device keeps a bounded queue of unsent cart changes. When reporting resumes, changes older than seven days are discarded; signing out clears that reporting queue. Cart analytics retention does not extend the separate retention of required booking or accounting records.
We keep personal information only as long as needed to provide the service, protect against fraud, and meet legal requirements. After a verified account-deletion request, we delete the account, saved addresses, preferences, unused quotes, private feedback, and nonessential contact copies within 30 days after the final upcoming booking finishes (or within 30 days of verification if there is no upcoming booking). Before deletion is completed, we return any unused refund credit to the original payment method. Any other unused wallet balance ends, and an accounting entry records that amount without keeping the account usable. We retain legally required GST invoice, payment, refund, and wallet transaction records for 72 months from the due date of the annual return for the relevant year. Records subject to legal proceedings or a legal hold may be kept longer where required by law. Access to retained records is limited to accounting and support needs.
For customer referrals, account deletion removes unused invitation codes and signup proofs. We retain de-identified referral and reward records, including a keyed reference derived from the verified phone number, to prevent a second new-user claim after an account is deleted and recreated. That reference is not the phone number itself. This limited record remains after account deletion for repeat-claim prevention and reward reconciliation; access is restricted to authorised operations and security purposes.
7. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system or method of transmission is completely secure, so we cannot guarantee absolute security. You can help by protecting your device and verification codes and notifying us if you believe your account or information has been compromised.
8. Your choices and rights
Depending on applicable law, you may ask to access, correct, update, or delete your personal information; withdraw consent; object to or restrict certain processing; or raise a grievance. You can also change location, notification, camera, and other app permissions in your device settings.
To make a request, email founders@trybimi.in. You can also use our account-deletion request page even if you no longer have the app or access to the email connected to your account. We may need to verify your identity before acting. Some requests may be limited where we must keep information for legal, security, fraud-prevention, or transaction-record purposes. Withdrawing consent may prevent us from providing features that need that information.
9. Children
The Platform is not intended for people under 18, and minors may not create an account or place a booking. We do not knowingly collect personal information directly from children. If you believe a child has provided information to us, contact us so we can review and take appropriate action.
10. Bimi Partners app for cooks
This section applies to cooks and applicants who use the Bimi Partners app. The rest of this Policy also applies.
What we collect
- Mobile number: used to sign you in with a one-time code sent by SMS. The app does not read your SMS messages or contacts.
- Your application: name, languages, the areas and dishes you cook, the days and times you usually work, an optional note, and an optional referral code.
- Work records: the offers you accept or decline, the steps of each visit (left, reached the gate, reached the home, started, finished), what you report (a stop, more time, cannot work, help, or a safety concern), your feedback about a household, your weekly hours, and your earnings and payouts.
- Duty location: only after you choose Go on duty, and only until the end time you choose (at most 12 hours), the app shares this phone’s location with bimi operations about every 30 seconds. A notice stays on your phone the whole time, and you can end duty at any time. The app does not collect location when you are off duty and does not use background location permission.
- App and device details: an installation identifier, the app version, and a push notification token if you allow notifications.
How we use it
To decide applications, offer and assign bookings, show you booking details, keep cooks and customers safe during a visit, support you, pay you, and meet legal obligations.
Who sees it
Authorised bimi operations staff. Customers do not see your location, your phone number, or your work records; they see the cook name bimi shares with a booking. We do not sell your data or show ads in the app.
How long we keep it
Duty location is kept for 48 hours, then deleted. Work and payment records are kept as long as needed for payments, disputes, tax, and other legal obligations.
Your choices
You can sign out on any phone, end duty at any time, and turn off notifications and location in your phone settings. To close your account and ask us to delete your data, choose Leave Bimi on Profile, or on Work status before your application is approved, or email founders@trybimi.in. See the account-deletion page for what is deleted and what is kept.
11. Changes to this Policy
We may update this Policy to reflect changes to the Platform, our practices, or applicable law. We will post the revised version here and update the effective date. If a change materially affects your rights, we may also provide notice through the Platform or by email, SMS, or another appropriate method.
12. Contact and privacy complaints
For privacy questions, requests, or complaints, email founders@trybimi.in. Please describe your request clearly and include the phone number connected to your account so we can verify and respond to it.
GoodMatters Enterprises
HSR Layout, Bengaluru, Karnataka, India