1. About Bache Dabba
Bache Dabba, operated by Rteam Logistics, provides lunchbox subscription management, pickup, delivery and tracking services. This Privacy Policy describes how we handle personal information through our website, mobile applications and related services.
Our services are designed for parents and legal guardians. If you have questions about this policy, please contact us using the details at the end of this page.
2. Information We Collect
Depending on the features you use, we may collect and process:
- Account information: your mobile phone number and account identifier for registration and login.
- Subscription information: selected subscription, lunchbox identifiers, service preferences and relevant transaction records.
- Pickup and delivery information: necessary pickup address or location, school or delivery destination, assigned delivery information, status updates and timestamps.
- Child-related subscription labels: automatically generated labels such as
kid_1andkid_2. We do not ask for children's names or nicknames. - QR tag records: random, unpredictable QR tokens and their backend mappings to the relevant subscription records.
- Technical and security information: information reasonably necessary for service operation, security and troubleshooting, which may include IP addresses, device or application information and server logs.
- Support communications: information you choose to provide when contacting our support team.
We do not require an email address for registration or login. We do not ask for children's photographs, personal contact details or live location information as part of the standard lunchbox service.
3. How We Use Information
- To register and authenticate parent or guardian accounts.
- To create and manage lunchbox subscriptions.
- To identify lunchboxes through QR tags and backend subscription mappings.
- To coordinate pickup, transport, delivery and handover.
- To display lunchbox tracking events and send service-related updates.
- To manage customer support, security and service reliability.
- To handle payments and transaction records where applicable.
- To comply with applicable legal requirements.
4. Mobile Number Login and OTP Verification
We use mobile phone numbers for account registration and login. Bache Dabba uses MSG91 for one-time password (OTP) generation and validation. Your phone number and authentication-related information may be processed by MSG91 to provide verification and help protect account access.
We do not require email addresses for login.
5. Children's Privacy
Our service is intended to be managed by parents or legal guardians. We do not request children's names, nicknames, photographs or personal contact information. Instead, subscriptions are distinguished by automatically generated labels such as kid_1 and kid_2.
Even without a child's name, information linked to a parent account, school, subscription or lunchbox may relate to an identifiable child. We treat such information as personal data where applicable and follow relevant children's data protection requirements, including parental consent requirements when legally applicable.
We do not use child-related information for targeted advertising or behavioural profiling. We do not track children's physical locations.
6. QR Tags and Lunchbox Tracking
Each lunchbox tag displays only a QR code. The QR code contains an unpredictable identification token, not a child's name, parent's phone number, school information or other directly identifying details.
Our backend maps QR tokens to the corresponding subscription records so authorized personnel can perform lunchbox pickup, delivery and tracking operations. Access to associated account or subscription details requires authentication and appropriate authorization.
Tracking describes lunchbox delivery events, such as pickup, transit, delivery and handover timestamps. It is not intended to monitor a child's movements.
7. Where We Store Data
Bache Dabba operates its own backend application on Amazon Web Services (AWS) EC2 in the Hyderabad, India region. Our application uses a MongoDB database hosted in Mumbai, India for operational records such as accounts, subscriptions, QR mappings and delivery events.
These are the locations of our primary backend and database. Other service providers, including authentication providers, may process information in additional locations according to their service arrangements and applicable law.
8. Sharing with Service Providers and Authorized Parties
We may share only the information necessary for service operations with:
- AWS: application hosting infrastructure.
- MSG91: OTP generation and validation.
- MongoDB infrastructure or hosting providers: database operation and storage, as applicable to our deployment.
- Authorized delivery personnel: limited information needed to carry out assigned pickup and delivery responsibilities.
- Authorized school representatives: information needed to coordinate lunchbox handover, where necessary.
- Payment service providers: payment-related information, if payments are processed through them.
- Authorities: information when disclosure is required by applicable law.
We do not sell personal information to advertisers.
9. Access Controls and Security
We use authentication and role-based authorization to restrict access to account, subscription and delivery records. Delivery personnel are permitted to update only the delivery information required for their assigned responsibilities.
We take reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, alteration and disclosure. No internet-connected system can guarantee absolute security.
10. Service Messages and Notifications
We may send OTP verification messages, pickup or delivery status updates, subscription reminders and important operational communications through supported channels. Device-level push notification permissions can be managed in your device settings where available.
11. Payments and Subscriptions
Where payment functionality is offered, we may process subscription and transaction records. If a third-party payment service is used, that provider may separately process payment information according to its applicable privacy practices.
12. Data Retention
We retain personal information for as long as reasonably necessary to operate subscriptions and deliveries, support users, maintain security, resolve disputes and satisfy applicable legal obligations. We delete or anonymize information when it is no longer required, subject to legally permitted or required retention.
13. Account and Data Deletion
Parents and guardians can use the account deletion option available in the Bache Dabba application to request deletion of their account and associated records.
You may also contact support@bachedabba.com for assistance. We may verify account ownership before acting on a request. Some records may be retained where required by applicable law or necessary for permitted legal purposes.
14. Your Privacy Choices and Rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information; withdraw consent where relevant; or raise a privacy-related complaint. You can contact us at the email address below.
Withdrawal of consent or deletion of information essential to providing the service may affect your ability to use an active subscription.
15. Changes to This Policy
We may update this policy when our services, technology or legal obligations change. We will publish the updated version here with a revised effective date and provide additional notice or obtain consent when required by law.
16. Contact Us
Bache Dabba
Operated by Rteam Logistics
Hyderabad, Telangana, India
Website: https://bachedabba.com/
Privacy and support email: support@bachedabba.com