Select a delivery location to check availability.
Select a delivery location to check availability.
Last updated: August 3, 2026
Fin n Fillet is the developer and operator of this service. This policy describes how Fin n Fillet handles information collected through our website and Android app.
We collect your name, email address, account user ID, phone number, delivery address, saved-address details, and order/contact details. We also keep purchase and order history, including ordered items, delivery and payment/refund status, and provider transaction IDs. If you use cashback, we process its balance and ledger entries. We may process product-review text, ratings, and the name and delivery-area label shown with an approved review. Contact submissions include the name, phone number, and message you send.
Search terms are processed ephemerally to return product results; we do not store a searchable history of those terms. For account security, we retain login outcome events and may initially record the account email, user ID, IP address, and browser user-agent. Notification read state is also associated with your account while the account remains active.
If you opt in to promotional notifications in the Android app, we process an Android push-notification token associated with your account. We use it to send offers and product updates through Firebase Cloud Messaging, a Google service. You can decline or disable notifications at any time in Android settings; declining does not affect browsing or ordering.
You can choose to enter a PIN/address manually or use location features. Approximate location may be used to check delivery availability. When you choose GPS or confirm a map location, we may process precise latitude/longitude, accuracy, capture time, place ID, and formatted address. Confirmed order-location fields can be stored with that order to coordinate delivery and resolve delivery issues.
We use this information to create and manage accounts, authenticate users, process orders, payments and refunds, provide cashback, coordinate delivery, respond to support requests, send transactional emails, show in-app notifications, prevent fraud, and meet legal, tax, accounting, payment, and dispute-resolution obligations. We do not sell personal information.
We use Supabase for account authentication and database services; Razorpay to process online payments; Resend to deliver verification, order, and support-related emails; and Google Maps Platform for address, place, map, and geocoding functions. Razorpay checkout may receive your name, email address, and phone number as prefilled payment details. Google Maps may receive selected coordinates or a place ID to resolve an address and delivery availability. These providers process data only as needed to provide their services.
Fin n Fillet does not store raw card numbers, CVV values, UPI credentials, bank-account credentials, or payment passwords. Google Analytics 4 and Google Ads conversion tracking may be enabled when configured. Google Ads receives a completed purchase's order number, total value, and INR currency; it does not receive delivery or payment details from this conversion event. Sentry and Fast2SMS are not enabled in the current production configuration.
We use HTTPS and encryption in transit for communications between the app or browser and our services. Access to administrative functions is restricted, and we use account, payment, and login security controls designed to protect customer information. No security method can guarantee absolute security.
We keep account data while your account is active. If you request deletion, we delete saved addresses and location data, wishlist items, reviews, cashback balance and ledger, notification read state, email-verification records, newsletter subscription records, and account-linked login-security identifiers. We delete the Supabase account and associated Android push-token registrations.
We may retain de-identified order, order-item, payment/refund, and delivery records for tax, accounting, payment/refund, fraud-prevention, and legal-dispute purposes. We remove the account link, name, email, phone number, address, and precise location from those records. We may also retain de-identified account-deletion, security, and administrative-audit evidence for security, fraud-prevention, and legal/audit purposes. We do not state a fixed retention period here because it depends on applicable obligations.
You may choose not to grant optional device-location permission and can still place an order by entering your address manually. You can submit an account-deletion request through our account-deletion page. Requests are processed after identity verification; deletion is not represented as immediate. The retention and de-identification described above may apply where necessary.
For privacy questions, requests, or concerns, use our Contact Us form or the support phone/email published there. You do not need the Android app installed to use the website contact and deletion pages.