Privacy Policy
Effective September 17, 2026
Delete your HYLO account
In the HYLO app: open Profile, tap Delete account, and confirm. Your account is deleted straight away.
Without the app: email support@hylo.in from the email address on your account, or tell us the phone number you sign in with, and ask us to delete your HYLO account. We’ll confirm it’s you and delete it within 30 days.
What we delete: your profile (name, phone number, email, profile photo), saved addresses, notification history and device push tokens, and your sign-in.
What we keep: records of orders you placed, because they are financial and tax records we are required by law to retain (see Section 5). They are no longer linked to an account you can sign in to.
1. Who we are
HYLO is a food ordering and delivery platform operated by FLAVO Hospitality ("HYLO," "we," "us," or "our"), registered in India at No. 402, GR Parkview Apt, Serenity Layout, Sarjapur Road, Kaikondrahalli, Bengaluru, Karnataka – 560035. This policy explains what personal data we collect across the HYLO Customer, Merchant (Outlet Partner), and Delivery Partner apps, why we collect it, and what choices you have.
2. Information we collect
Account information. Your name, phone number, and/or email address (used to sign in via a one-time code — we never see or store a password). Outlet and Delivery Partner accounts additionally provide identity documents (PAN, Aadhaar, driving licence) and bank account details as part of onboarding.
Delivery addresses. The addresses you save, including the precise coordinates when you use "use my current location" or search for an address, so an order can actually be routed and delivered.
Order information. What you order, from which outlet, when, and its status — this is also a financial record we’re required to keep (see Section 5).
Payment information. Payments are processed by Razorpay, our payment gateway partner — HYLO does not receive or store your full card, UPI, or net-banking credentials. We do receive confirmation that a payment succeeded, a transaction reference, and the amount.
Location while a delivery is active. If you’re a Delivery Partner, your device’s location is shared with HYLO while you’re online, so nearby orders can reach you and a customer can see your live position during their delivery.
Communications. If you contact support or open a support ticket in the app, we keep a record of that conversation to help resolve it and to improve support quality.
Profile photo. If you choose to add one, the photo you upload for your profile.
Device and push notification tokens. A device identifier used solely to deliver push notifications about your own orders, deliveries, or account.
Crash reports. If the app crashes, it sends a crash report (technical details of the error, the app version, and your device model and OS version) through Firebase Crashlytics, so we can find and fix the problem.
Usage analytics. In the mobile apps we use Google Analytics for Firebase to understand how HYLO is used — which screens are opened, and when someone signs in or places an order — along with an app-instance identifier. We use this only to improve HYLO; we don’t use it for advertising, and we don’t use any advertising trackers.
3. How we use this information
To create and secure your account, and verify it’s really you via a one-time code.
To process and fulfil orders — sharing what’s necessary with the outlet preparing your order and the delivery partner bringing it to you (see Section 4).
To process payments and refunds through Razorpay.
To provide live order tracking and delivery coordination.
To send you order-status, referral, and account notifications. Promotional notifications, where sent, can be turned off in the app’s notification settings.
To provide customer support and investigate a reported issue or dispute.
To administer the referral program, including recognizing when a referred friend’s order qualifies a referrer for a reward.
To detect and prevent fraud, abuse, and violations of our Terms of Service.
To meet legal, tax, and regulatory record-keeping obligations.
4. Who we share information with
The outlet fulfilling your order receives your name, order contents, and delivery address so they can prepare and hand off your order.
The delivery partner assigned to your order receives your name, delivery address, and phone number so they can complete the delivery. Your live location is not shared with them — theirs is shared with you for the duration of that one delivery.
Razorpay processes your payment; their own privacy policy governs how they handle payment credentials.
Service providers who send SMS and email on our behalf (for one-time codes and account/order notifications) receive only the phone number or email address and the message content needed to deliver it.
Google Cloud Platform / Firebase hosts our infrastructure — our servers primarily run in and store data in India (Mumbai region), though the underlying cloud provider’s infrastructure may process data in other regions as part of how those services operate globally.
Legal authorities — we may disclose information if required by law, court order, or a valid legal process, or to protect the rights, property, or safety of HYLO, our users, or the public.
We do not sell your personal data to third parties, and we do not share it with advertisers.
5. How long we keep it
If you delete your account, we delete your profile (including your profile photo), saved addresses, and notification history. Past order records are kept even after account deletion — they’re financial and tax records we’re legally required to retain, the same way any retailer keeps a sales record after a customer relationship ends. Identity and bank documents provided by Outlet and Delivery Partners are retained for as long as the partnership is active, and for a period after as required by applicable financial and tax regulations.
6. Your rights and choices
Access and correction: you can view and edit your profile, saved addresses, and contact details directly in the app at any time.
Deletion: you can delete your account and associated personal data at any time from the app’s account settings (subject to the order-record retention described in Section 5).
A copy of your data: you may request a copy of the personal data we hold about you by writing to support@hylo.in; we’ll respond within a reasonable time as required by applicable law.
Notification preferences: promotional push notifications can be turned off in-app; transactional notifications about your own orders/deliveries can’t be turned off while you have an active order, for your own benefit.
7. Security
We use industry-standard safeguards — encrypted connections (HTTPS/TLS) for all data in transit, Google Cloud/Firebase’s access-control and authentication infrastructure, and role-based access limiting who on our team can see what. No system is perfectly secure, and we can’t guarantee absolute security, but we take reasonable, real steps to protect your information.
8. Children’s privacy
HYLO is not directed at children under 18. We don’t knowingly collect personal data from children. If you believe a child has provided us personal data, contact us at support@hylo.in and we’ll delete it.
9. Changes to this policy
We may update this policy as the product changes. We’ll update the effective date above, and for material changes, notify you in-app or by email before they take effect.
10. Grievance Officer & contact
For privacy questions, requests, or complaints:
Email: support@hylo.in
Address: No. 402, GR Parkview Apt, Serenity Layout, Sarjapur Road, Kaikondrahalli, Bengaluru, Karnataka – 560035
Questions? Contact HYLO support