Privacy Policy
Last updated: 30 October 2026
This policy explains how Cakewala World, operated by Bhattas Foods Private Limited (“Cakewala”, “we”), collects, uses and protects personal data when our staff use the Cakewala World app at app.cakewalaworld.com and the Cakewala World WhatsApp number (“Cakie”), and when customers place cake orders with Cakewala. We follow India’s Digital Personal Data Protection Act, 2023 and other applicable law.
1. Who uses Cakewala World
Cakewala World is an internal app for Cakewala’s staff. Accounts are created by Cakewala; the public cannot sign up.
2. Data we collect
- Staff details: name, mobile number, email (optional), role, outlet and department.
- Work content: tasks, comments, notes, reminders, meetings, checklists, notices, training results, photos and voice notes that staff send or upload.
- Cake orders: the customer’s name, phone number, delivery details and order details written on the order slip, so our team can prepare and deliver the order.
- WhatsApp messages exchanged with the Cakewala World WhatsApp number, and their delivery and read status.
- Technical data: device notification tokens, login sessions and basic logs used to keep the app secure and working.
3. How we use it
- To run Cakewala’s work: logins, assigning and tracking tasks and orders, reminders, notifications and reports.
- To send work and order updates on WhatsApp and as app notifications.
- To transcribe voice notes and translate or transliterate messages when staff ask for it.
We do not sell personal data, and we do not use it for advertising.
4. Who we share it with
Only with service providers that help us run Cakewala World, under confidentiality and security obligations:
- Supabase — database and hosting (data stored in the Mumbai, India region)
- Meta (WhatsApp Business Platform) — sending and receiving WhatsApp messages
- Cloudflare — serving the website and app
- Google — app notifications and, if a staff member connects it, their Google Calendar
- AI and language service providers — voice transcription, translation and transliteration
We may also disclose data where required by law or to protect the rights and safety of people.
5. How long we keep it
- Work records and order history are kept while they are needed for Cakewala’s business and accounts.
- WhatsApp message logs are deleted after about 7 days; in-app notifications after about 90 days.
- When a staff member leaves, their login is switched off; their work history stays with Cakewala.
6. Security
Data is encrypted in transit (HTTPS) and passwords are stored only as one-way hashes. Only signed-in Cakewala staff can see work and order data.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, nominate someone to act for you, and raise a complaint with us (section 9) or with the Data Protection Board of India.
8. Deleting your data
To have your data deleted, email [email protected] with the subject “Delete my data” and the mobile number you used with Cakewala World. We delete it within 30 days, except records we must keep by law (such as tax invoices), and confirm by email.
9. Questions and complaints
Email [email protected] with the subject “Privacy”. We respond within 7 days.
No. 33, 36th Cross, 26th Main, 4th T Block, Jayanagar, Bengaluru 560041, Karnataka, India
Phone: +91 88843 66663 · Email: [email protected]
10. Changes
We may update this policy and will post the new version on this page with a new “Last updated” date.