Last updated: 22 October 2026.
This policy covers the FreshTray parent app, parent web app, public website, and the related school meal service. FreshTray is a partnership firm at Bashbari Old Market, Goalpara District, Assam 783129, India. Write tohello@freshtray.in for privacy requests, corrections, or complaints.
Who the parent app is for
The parent app is for parents and legal guardians aged 18 or older. It is not a child account or a social app for children. An adult creates and manages the family account. Only provide a child's information if you are authorised to arrange that child's meals. Keep your sign-in codes and signed-in device secure. Do not give a child independent access to account or ordering controls.
Information we collect
- Parent account: your name, sign-in phone number, account identifier, language choice, and verification and session records.
- Child and school details: the child's name, selected school, class, section and roll number where supplied, registration status, and school-based Tray ID. A Tray ID is a number used for meal distribution.
- Optional photos: a child profile photo that you select or take. You can use the service without a photo. The app crops and reduces the selected photo before upload. It does not upload your full photo library.
- Meal service: saved food choices, quantities, orders, changes, skips, pauses, delivery and receipt records, and related updates.
- Billing: bills, recorded payments, credits, allocations, and account balances. The app does not ask for your bank login, card number, card security code, or UPI PIN.
- Support: information that you send by email or WhatsApp, including message text and attachments. These channels are separate from the app. Do not send sign-in codes, identity documents, or payment secrets in a support message.
- Technical and security records: request times, IP address, request and error details, app platform and build number, access checks, and records of important account or service changes. Our hosting and messaging providers also process technical records for their services.
Why we use this information
We use information to verify sign-in, review registrations, connect a child to the correct school, plan and distribute meals, calculate bills and credits, record payments, answer support requests, and protect the service from misuse. We use technical records to detect faults and correct service errors. We use your language choice to show relevant app text and updates. Photos help authorised staff identify a child during distribution.
FreshTray does not sell personal information. The parent app has no advertising or third-party analytics SDK. We do not use child photos for face recognition, advertising, or public profiles. The parent app does not request device location, contacts, or microphone access. It uses selected photos, not a full-library upload. Older Android versions can require a legacy storage permission for a photo feature. Newer Android versions use the system photo picker without broad photo or video permission.
Camera, photos, and device storage
The app requests camera access when you choose to take a profile photo. You can instead use the system photo picker. You can refuse camera access and continue without a photo. You can change permissions in Android settings. The app stores sign-in session information on the device so you can stay signed in. Signing out clears the app's saved session credentials.
Who receives information
- Authorised FreshTray staff and school personnel: they receive the information needed for their assigned work. For example, a school or distribution worker can need the child's name, class, Tray ID, photo, meal, and receipt status. Access depends on the person's role and assigned schools. School users do not receive the parent's full billing account or private support conversations through their school role.
- Cloudflare: hosts the web services and processes database records, private files, network requests, security records, and backups. FreshTray uses Cloudflare Workers, D1, R2, and Queues.
- Gupshup and WhatsApp/Meta: process the phone number, sign-in or service message, delivery/read events, and support messages or attachments when those channels are used. Their own terms and privacy policies also apply to their platforms.
- Google Play: distributes the Android app and can process installation, device, Google account, and diagnostic information under Google's own policies. FreshTray does not receive your Google password.
- Email providers and professional advisers: can process information needed to answer your request or meet accounting, legal, and security obligations. We disclose information to authorities where the law requires it, or where a lawful disclosure is needed to protect rights or investigate misuse.
Service providers can process information in India and other countries. Processing locations depend on the provider and service. We do not claim that all FreshTray information stays in India. We limit access and use service providers for the purposes described in this policy.
How we protect information
The app sends information to FreshTray over HTTPS. Access to private records requires authentication and account or staff-role checks. Child photos are not public gallery files. Sign-in codes expire and attempts are limited. We keep operational access and secrets separate. No internet service or device can be guaranteed secure. Contact us if you suspect unauthorised access.
How long we keep information
We keep account, child, photo, and meal information while it is needed to provide and support the service. When service ends or you request deletion, we review which information is still needed. We delete or anonymise data that is no longer needed. We aim to complete a verified deletion request within 30 days. We tell you if a lawful reason requires more time.
Some billing, payment, order, credit, audit, security, and support records can remain where they are needed for tax and accounting requirements, disputes, fraud prevention, or other legal obligations. A deletion request does not remove a valid debt or a record that the law requires us to keep. We explain the retained record types, reason, and applicable retention period when we process your request. We limit the personal information retained for those purposes. Backup copies can remain until the provider's recovery period ends. If a backup is restored, the deletion decision must be applied again before normal use.
Your choices and account deletion
You can change meal choices through the app within the applicable cutoff. You can change or remove an optional photo. Contact us to request access to your information, correct a profile, raise a privacy complaint, or withdraw a choice that is not needed to provide the service. Some requests can require a change to, or closure of, the meal service.
To request account deletion, use Account → Privacy and account → Request account deletion in the app, or visitfreshtray.in/delete-account/. You can also emailhello@freshtray.in with the subject “FreshTray account deletion request”. Include the sign-in phone number and an email address where we can reply. We verify account ownership before making changes. Do not send a sign-in code or identity document by email.
The request covers the parent account, linked child profiles, optional photos, and saved meal plans. It does not immediately stop an already scheduled meal. We review active service and retained records with you. You can request deletion without installing the app or signing in. An unpaid balance does not prevent you from submitting a request.
This website and external links
The public website has no advertising scripts, third-party analytics, contact forms, or non-essential tracking cookies. Its sample planner can store choices in the page URL. Do not put personal information in those sample choices. Hosting services process network and security information. External websites and email, phone, WhatsApp, or store links use their own privacy rules. The parent web app stores the session and preferences needed for account access.
Policy changes and contact
We update this page when our practices change. The date at the top identifies the latest version. We use an app update or other suitable notice for a material change. Send privacy questions or complaints tohello@freshtray.in. FreshTray will review the request and explain the next steps.