Privacy notice

1. Who we are

ministryofoats.com is run by Outpost Kitchen Private Limited, Bengaluru, India (“Ministry of Oats”, “we”). For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules.

2. What we collect, and why

We collect only what each feature needs. Each purpose below is the reason we ask; we do not reuse data for an unrelated purpose without asking again.

• Your account. Your email address (or the name and email your Google account shares when you sign in with Google), and a record of when you signed in. Purpose: to create and secure your account and let you sign in.
• Your places. Delivery addresses you add, such as home or office. Purpose: to match you to the nearest kitchen and, once subscriptions open, to deliver.
• Plan registrations. The plan you register for and any preferences you choose. Purpose: to hold your place for the subscription launch and contact you when payments open.
• City votes. The city you vote for, tied to your account so each citizen counts once. Purpose: to decide where we open next. We publish totals, never who voted.
• Employer petitions.Your work email, your employer's name, and the email address of the HR or admin contact you ask us to write to. Purpose: to send that one request on your behalf. You must only give us a colleague's work email for this purpose. We do not add that person to any list.
• Recipe submissions. The recipe, any photo you attach, and the display name you choose. Private to your profile by default; published only if you submit it for review and it passes.
• Emails from us. Service emails about your account and anything you registered for. Marketing emails only if you opt in; every one has an unsubscribe link.
• Site usage. Pages visited, device and browser type, approximate location from your IP address, collected through cookies and analytics tools, only with your consent where the law requires it.

Orders on Swiggy or Zomato are placed with those platforms. They collect and process that data under their own privacy policies; we receive only what is needed to prepare and hand over your order.

3. Consent

Where we rely on your consent, we ask for it clearly and separately for each purpose, and you can withdraw it at any time from your account settings or by writing to us. Withdrawing is as easy as giving it. It does not affect anything we did lawfully before you withdrew, and some features may stop working without the data they need.

4. Who we share it with

We do not sell personal data. We share it only with service providers who process it for us under contract:

• Authentication and database hosting (our account provider)
• Content management and website hosting
• Email delivery
• Analytics, where you have consented

Some of these providers store data outside India. Where they do, we transfer it only as the DPDP Act and any Government notification under it permit. We may also disclose data where the law requires it.

5. How long we keep it

We keep personal data only as long as the purpose needs it, then erase it, unless a law requires us to keep it longer. If you delete your account, we erase your account data and everything tied to it, except records we must keep by law. Published recipes can be unpublished on request.

6. Your rights

Under the DPDP Act, you can ask us to:

• tell you what personal data we hold about you, how we use it, and who we have shared it with;
• correct, complete or update it;
• erase it, where we no longer need it or you withdraw consent;
• nominate another person to exercise these rights if you die or become incapable.

Write to hello@ministryofoats.com from the email on your account. We respond within the period the DPDP Rules set.

7. Children

Accounts are for people aged 18 and over. We do not knowingly collect a child's personal data without verifiable parental consent. If you believe a child has registered, tell us and we will erase the account.

8. Security

We use reasonable security safeguards, including encrypted connections, access controls and sign-in without passwords, to prevent personal data breaches. If a breach happens, we inform you and the Data Protection Board of India as the law requires.

9. Grievances

If you have a complaint about how we handle your data, write to our Grievance Officer, Rushil, at rushil@ministryofoats.com or +91 6354-142435. We acknowledge it and respond within the period the DPDP Rules set. If we do not resolve it, you may complain to the Data Protection Board of India.

10. Changes

If we change this notice in a way that matters, we tell signed-in citizens by email before it takes effect. The date at the top always shows the current version.