Privacy Policy

1 Who we are

Kinematic Foodtech Pvt. Ltd. ("Sprink", "we", "us", "our") is a food technology company incorporated under the laws of India, with its registered office at #201/1A, Kudlu Main Road, Opposite Bren Palms Apartment, Bangalore – 560068.

We operate multiple services including the Epicenter cafeteria management SaaS platform, a managed cafeteria service for corporates and institutions, a direct meal subscription for individuals (via sprink.online), and campus and hostel food management solutions.

This Privacy Policy applies to all data we collect through our websites, platforms, mobile experiences, and commercial relationships - regardless of which Sprink service you use.

2 What we collect

The data we collect depends on how you interact with Sprink. Below is a breakdown by category:

Sharing of personal data is voluntary. However, certain data (such as your name, contact details, and delivery address for meal subscriptions) is required to deliver our services - without it, we may not be able to provide some or all of our offering.

3 How we use your data

We use your personal data only for the following purposes:

Service delivery

Fulfilling orders and subscriptions; managing cafeteria platform accounts; deploying managed service operations; processing payments; sending order confirmations and delivery notifications.

Account management

Creating and managing your Sprink account or client profile; authenticating logins; managing your preferences and subscription settings.

Communication

Responding to enquiries and support requests; sending service-related updates (e.g. delivery windows, platform maintenance); notifying you of changes to our terms or policies.

Platform improvement

Analysing aggregated usage patterns to improve the Epicenter platform; understanding menu preferences to improve offerings; improving vendor management processes based on feedback data.

Marketing (with consent)

By subscribing to a Sprink service or providing your contact details, you consent to Sprink contacting you about relevant services - via email, SMS, or phone. You may opt out of marketing communications at any time. Transactional messages related to your active subscription or account will continue regardless.

Legal and compliance

Meeting our obligations under Indian law; responding to legal requests; enforcing our Terms & Conditions; preventing fraud and misuse.

4 Who we share data with

We do not sell your personal data. We share it only with the following categories of parties, and only to the extent necessary:

Payment processors

Razorpay and Sodexo process payments on our behalf. Card details are entered directly into their secure environments - Sprink never sees or stores your full card number. Their use of your data is governed by their own privacy policies.

Cloud and infrastructure providers

We use cloud hosting and infrastructure services to run the Epicenter platform and our website. These providers process data strictly as data processors under our instruction.

Vendor partners (B2B only)

In the context of managed cafeteria services, employee order data (first name, order, token number) is shared with the relevant food vendor to fulfil that order. Vendors do not receive payment details or personal contact information.

Auditors and legal advisors

Where required for compliance, financial audit, or legal proceedings, we may share data with professional advisors under appropriate confidentiality obligations.

Regulatory authorities

If required by law, court order, or regulatory authority, we will disclose personal data as legally obligated.

5 Cookies & tracking

Our website and platform use cookies and similar technologies to:

• Keep you logged into your account (session cookies)
• Remember your preferences (functional cookies)
• Understand how visitors use our website (analytics cookies - aggregated and anonymised)

We do not use advertising or tracking cookies for ad-targeting purposes. You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain parts of our platform (such as staying logged in).

6 Data retention

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active accounts: Data is retained for the duration of your account or subscription.
• Closed accounts: Personal data is deleted or anonymised within 90 days of account closure, except where retention is required for legal, tax, or audit purposes.
• Transaction records: Payment and order records are retained for 7 years as required under Indian tax law.
• Support communications: Retained for 2 years to provide context for future interactions.

You may request deletion of your personal data at any time. Where we are legally required to retain certain data, we will inform you.

7 Your rights

You have the following rights regarding your personal data. To exercise any of these, email contact@sprink.online - we will respond within 10 business days.

8 Minors

Our services are not directed at individuals under the age of 18 (the age of majority in India). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor and you are their legal guardian, please contact us immediately at contact@sprink.online and we will delete the data promptly.

Exception - campus solutions: Where Sprink provides services to educational institutions, student data may be processed for meal tracking and billing. In these cases, the institution is responsible for ensuring appropriate consent has been obtained from students and/or their guardians in accordance with applicable law.

9 Third-party links

Our websites and platform may contain links to third-party websites or services - such as payment gateways, social media platforms, or partner tools. This Privacy Policy applies only to Sprink's own services. We are not responsible for the privacy practices of third-party websites and recommend you read their privacy policies before providing any personal data.

10 Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Role-based access controls limiting who can access personal data
• Regular security reviews of our platform and infrastructure
• Payment data handled exclusively by PCI-DSS compliant processors

No system is completely secure. If you suspect your account has been compromised, contact us immediately at contact@sprink.online.

11 Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify users via email and/or a notice on our website at least 14 days before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

12 Contact us

For any questions, requests, or concerns about this Privacy Policy or your personal data:

• Email: contact@sprink.online
• Address: Kinematic Foodtech Pvt. Ltd., #201/1A, Kudlu Main Road, Opposite Bren Palms Apartment, Bangalore – 560068
• WhatsApp: +91 96114 81517 (10 AM – 10 PM, Mon–Sat)

We aim to respond to all privacy-related requests within 10 business days.