top of page

Privacy Policy

 

Effective Date: 12 May 2026

Last updated: 12 May 2026 — added Microsoft Clarity session recording and expanded Firebase Analytics disclosure.

 

Thank you for choosing to use our app, a product of Hodish Technologies Private Limited (“we”, “us”, or “our”). Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal and device information.

 

 

1. Information We Collect

 

We may collect the following types of information:

 

- Personal Information (such as name, email address, mobile number) provided voluntarily during registration or usage.

- Device Information, including operating system, device model, and unique device identifiers.

- Usage Data, such as app interactions, crash logs, and performance metrics.

- Approximate Location, derived from your IP address (country and city level only — never precise GPS).

- Session Recordings, anonymized visual replays of how you navigate the app. Sensitive information including customer phone numbers, names, order details, payment information, and restaurant business data are automatically masked from these recordings.

 

 

2. How We Use Your Information

 

We use the collected information to:

 

- Provide and improve app functionality.

- Communicate with you, such as sending updates or support messages.

- Ensure app security and prevent fraud.

- Analyze user behavior to enhance user experience.

 

 

3. Data Sharing

 

We do not sell or rent your personal data. We may share your information:

 

- With third-party service providers that help us operate the app, including Google (Firebase, Analytics, Sign-In, Gmail API, Gemini AI) and Microsoft (Clarity session recording). These providers process data on our behalf under their respective data processing agreements.

- When required by law or to protect rights and safety.

 

 

3.1 Google Services Integration

 

a) Google Sign-In:

We use Google Sign-In for secure authentication. We access your name, email, and profile picture for account identification only.

 

b) Gmail API:

With your permission, we use Gmail API to send emails on your behalf (such as order reports or invoices). We only send emails when you explicitly request it. We do not read, store, or access any other email data.

 

c) Gemini API (Google AI):

We use Google's Gemini API for AI-powered features like menu recognition and content suggestions. Data you submit for AI processing is sent to Google's servers. We do not permanently store AI responses.

 

d) Firebase (Google):

We use Firebase for:

  - Secure data storage (Firestore) — your restaurant data, menu, orders, and customer records.

  - User authentication (Firebase Auth) — secure login via email and Google Sign-In.

  - App analytics (Google Analytics for Firebase) — anonymized usage data including screens viewed, features used, orders placed, and crash reports. We do not send your customers' personal data, order contents, or payment details to Google Analytics.

 

Firebase data handling is governed by Google's Privacy Policy (https://policies.google.com/privacy) and the Firebase Terms (https://firebase.google.com/terms).

 

You can revoke Google permissions at any time:

https://myaccount.google.com/permissions

​

e) YouTube API:

With your permission, KHIDE uploads marketing videos you create to your own YouTube channel and reads your channel name and ID to confirm and display the connected channel. We do not read your watch history, comments, subscriptions or analytics. OAuth tokens are stored encrypted (AES-256) on our servers and are deleted when you disconnect the channel in the app.

f) Google Business Profile API:

With your permission, KHIDE publishes marketing posts you create to your own Google Business Profile locations, and reads your business account and location names so you can choose where to post. OAuth tokens are stored encrypted (AES-256) and are deleted when you disconnect. KHIDE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

 

 

3.2 Microsoft Clarity

 

We use Microsoft Clarity to record anonymized session replays — visual reconstructions of how you interact with the app. This helps us identify usability issues and improve the ordering experience for restaurants.

 

What Clarity records:

App navigation patterns, button taps, screen flow, time spent on each screen, device type, and approximate location (from IP address).

 

What Clarity does NOT record (automatically masked):

  - Your customers' phone numbers, names, and email addresses

  - Order items, prices, and payment details

  - Customer feedback and contact information

  - Restaurant business information, employee details, and chain settings

  - Order history and individual customer order details

  - Split payment editor and order edit dialogs

 

Recordings are retained by Microsoft for up to 30 days. Clarity does not link recordings to your customers' personal information.

 

Microsoft's data handling is governed by the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement) and the Clarity Terms of Use (https://clarity.microsoft.com/terms).

 

Opt-out: If you prefer not to be included in session recordings, please email us at contact@khide.app and we will exclude your account.

​

3.3  Social Media Integrations (Facebook and Instagram)

​

When a business owner connects a Facebook Page or Instagram business account to KHIDE Marketing, we collect and store: the Page/account name and ID, and the access token that Meta provides. We use this data only to (1) show the owner their own Pages and accounts during setup and (2) publish the posts they create to the account they selected. Access tokens are stored encrypted (AES-256) on our servers and are never shared with third parties, never used for advertising, and never sold. This data is deleted automatically when the owner disconnects the account in the app, and can also be deleted via our Data Delete Request page. Our use of Meta Platform Data complies with the Meta Platform Terms and Developer Policies.

 

3.4 Requests from Public Authorities

​

If a public authority requests user personal data, we review the request for legality, challenge it if we consider it unlawful, disclose only the minimum information necessary, and document the request and our response, in accordance with our internal Government Data Request Policy. We have not received any national security requests to date.

 

4. Data Security

 

We implement appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction.

 

 

5. Your Rights

 

You have the right to:

 

- Access, update, or delete your personal information.

- Withdraw consent at any time (subject to legal or contractual restrictions).

 

To exercise your rights, contact us at: contact@khide.app

Or submit your data deletion request here: https://www.khide.in/data-delete-request

 

 

6. Children's Privacy

 

Our app is not intended for use by children under the age of 13. We do not knowingly collect personal data from children.

 

 

7. Changes to This Policy

 

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app or on this page.

 

 

8. Contact Us

 

If you have any questions or concerns about this policy, please contact us at:

 

Team Khide

Email: contact@khide.app

bottom of page