Privacy

How ProteinCart handles your data

Plain-English, India-first. We aim for full alignment with the Digital Personal Data Protection Act, 2023 (DPDP).

1. Who holds your data

Swiggy is the Data Fiduciaryfor everything you have in your Swiggy account — phone number, name, saved addresses, past orders, payment methods. ProteinCart only ever sees this data through Swiggy's Builders Club MCP server, scoped to actions you authorise via OAuth.

2. What ProteinCart stores

One encrypted session cookie on .proteincart.inholding the short-lived (5-day) Swiggy access token. That's it. We do not persist your name, phone, addresses, cart, or order history on any ProteinCart database. When you tap Disconnect or the token expires, the cookie is dropped and we have nothing left.

3. What we never do

  • No analytics on Swiggy-originated data.
  • No advertising / no model training on your basket.
  • No selling, sharing, or cross-product profiling.
  • No raw ids spoken or shown in screenshots — addressId, spinId, orderId stay server-side.

4. Where your data flows

Browser → ProteinCart backend (Fly.io, region bom, static egress IP) → Swiggy MCP server (Mumbai). Nothing leaves India. AI meal-planning prompts (DeepSeek) receive only your numerical targets and diet preference, never your phone, name, or addresses.

5. Your rights

DPDP-mandated access, correction, and erasure for Swiggy-originated data run through the Swiggy app directly — your account is theirs. Deleting your Swiggy account deletes all data ProteinCart could possibly see. To make ProteinCart drop its cookie, click Disconnect in the navigation bar.

6. Cookies & local storage

  • Session cookie (httpOnly, encrypted, 5-day lifetime) — required to call Swiggy on your behalf.
  • localStorage on your device only — your macro targets (pc_target), diet preference, diary entries (pc_diary), onboarding flag. Cleared if you wipe site data.

7. Contact

Security or privacy concerns: email builders@swiggy.in (Swiggy Builders team, fastest path) or open an issue on the project. Swiggy's own DPDP queries go via the Swiggy app.

Last updated: 2026-07-01. ← back to ProteinCart