Privacy Policy

1. Introduction and Governance

Ra Knomi, a sole proprietorship registered as a micro enterprise under the MSMED Act, 2006 ("KNOMI", "we", "us", or "our"), provides a cloud-based restaurant guest intelligence, digital QR menu, and self-ordering platform engineered in Bengaluru, Karnataka, India. This Privacy Policy articulates our transparent commitments and operational protocols regarding the collection, storage, protection, and handling of digital data.

We are committed to full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act 2023), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This policy applies to restaurant owners and operators ("Subscribers"), restaurant staff users, website visitors, and dining guests ("Diners").

2. Diners: What We Collect When You Browse and Order

• Browsing the menu: You can open and browse a restaurant's KNOMI menu without an app, a sign-in or a phone number. While you browse, we record how the menu is used (see section 5).
• Placing an order: To place an order you enter your name and mobile number. We do not send a verification code (OTP). You sign in with your number at that restaurant; the sign-in works only at that restaurant, lasts up to 12 hours, and cannot be used to view or change a saved KNOMI profile.
• Order details: The items you order, notes and special instructions you type, and any dietary choices or allergies you select at checkout. Your name, mobile number and order are shown to the restaurant's staff so they can prepare and serve it.
• Payments and feedback: If the restaurant lets you pay from the menu, the payment is handled by its payment gateway and we receive only the amount and status. If you rate your visit or leave comments, we store them with your order and share them with that restaurant.
• On your device: The menu keeps your sign-in token and a few settings in your browser's local storage so that you stay signed in during your visit.

3. Your Guest Profile, Allergies and Dietary Needs

Because KNOMI does not verify mobile numbers with a code, a number on its own never unlocks a saved profile. What you share when you order (your name, the allergies and dietary preferences you select, special instructions, occasions such as a birthday) and your visit history are kept for the restaurant where you ordered, so its staff can serve you safely when you return, together with preferences inferred from your past orders there (such as spice level) and notes its staff add about your visits.

• Health-related information: allergies and dietary needs can reveal health conditions. We use them so that kitchens can serve you safely.
• Not shared across restaurants: allergies and dietary preferences you select are kept for that restaurant only. If you verified your number with a one-time code before KNOMI stopped using codes, allergies and dietary preferences saved to that earlier profile are shown to the staff of KNOMI restaurants where you order; you can ask us to delete them (see Your Rights).
• Staff notes are stored against the restaurant whose staff wrote them.
• Your choices: to see, correct or delete your profile, write to grievance@knomi.in (see section 12).

4. Restaurant Operator Data Collected

To provide restaurant intelligence and fulfill business contracts with dining establishments, we collect necessary business and operational data:

• Business Entity Information: Legal entity name, trade name, registered address, GSTIN (Goods and Services Tax Identification Number), and FSSAI food license number.
• Administrative Contact Information: Name, professional email address, mobile phone number, and role designation of restaurant owners, general managers, and authorized operators.
• Catalog and Operational Data: Menu items, ingredient tags, prices, tax classifications, table layouts, and kitchen display configurations.
• Billing Credentials: Invoicing address and transaction history. Credit card and banking details are processed directly by RBI-authorized payment aggregators and are never stored on KNOMI servers.

5. Technical Telemetry and Behavioral Analytics (Knomi Sense)

KNOMI processes technical interaction telemetry to power Knomi Sense and the features built on it: Knomi Host recommendations, Knomi Compass menu insights, and Knomi Dash, the live orders view and Kitchen Display System (KDS):

• Menu Engagement Telemetry: Time spent on each dish, scroll depth, pairing suggestions viewed or accepted, and items added to or removed from the basket.
• Operational Insights: Average order preparation pacing, ticket dispatch timing, and table turnover metrics.
• How Analytics Are Used: Menu insights shown to restaurants, including Knomi Compass, are presented in aggregate. The underlying interaction events are linked to the dining session (and, once a diner has placed an order, to their account). Telemetry is used exclusively to provide the KNOMI service to the specific restaurant where the visit occurred and to refine algorithm performance.

6. Cloud Data Residency and Information Security

How we host and protect the data we process:

7. Service Providers and Where Data Is Processed

We use the service providers below to run KNOMI and this website, and share with each only what it needs for its task. Our main servers and database are in India, but several of these providers are based outside India or may process data on servers outside India.

8. Payment Gateway Integration and PCI-DSS Standards

For SaaS platform subscription fees paid by restaurant operators, KNOMI uses Reserve Bank of India (RBI) regulated payment aggregators, such as Razorpay, Cashfree, or Stripe India.

All financial transactions are conducted directly through PCI-DSS Level 1 compliant secure payment gateways. KNOMI does not store, view, or process debit/credit card CVVs, net banking passwords, or UPI PINs. Dine-in guest bill settlements are settled directly into the merchant's own bank account or POS terminal.

9. Data Retention and Erasure

We retain personal and business information only for the duration necessary to satisfy commercial agreements, resolve disputes, and meet statutory tax obligations under Indian law (such as GST audit trail mandates requiring record retention for up to 6 years).

Transient diner ordering sessions are automatically flushed and purged from active cache memory within 24 hours of table closure. Orders placed during a session, including the name and phone number used to place them, are kept as business records as described above.

10. Rights under the DPDP Act 2023

Under the Digital Personal Data Protection Act, 2023, data principals are entitled to specific rights:

• Right to Access Information: Request a concise summary of personal data being processed by KNOMI along with identity of third parties with whom data is shared.
• Right to Correction and Erasure: Request the correction of misleading or inaccurate personal data, or the erasure of obsolete personal records where retention is not required by law.
• Right of Grievance Redressal: Avail of an accessible grievance redressal mechanism provided by the Data Fiduciary.
• Right to Nominate: Nominate an authorized representative to exercise data rights in the event of death or incapacity.

11. Website Visitors

• Demo form: the name, restaurant, email, phone number, city and message you enter are sent through Formspree (United States) to our team. We use them only to arrange your demo and follow up with you about KNOMI, and we delete them on request.
• Analytics cookies: Google Analytics 4 runs only if you click "Accept analytics" in the cookie banner. It then sets cookies (_ga) and sends Google the pages you visit, your device and browser type, and an approximate location derived from your IP address. You can change or withdraw your choice at any time with "Cookie settings" at the bottom of every page.
• Fonts and hosting: fonts are served from this website, not from Google Fonts. The site is hosted on Vercel, which processes your IP address and request logs to deliver pages.
• WhatsApp and phone: if you message us on WhatsApp, the chat is also handled by WhatsApp (Meta) under its own terms.

12. Grievance Redressal Officer

In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the DPDP Act 2023, the designated Grievance Officer for KNOMI is detailed below:

For general support inquiries or billing assistance, please contact support@knomi.in.