Legal

Privacy Policy

Effective 28 July 2026 · Last updated 28 July 2026

The short version. remark verifies that reviews come from people who actually visited a restaurant. To do that we need your location at the moment you check in — and that is the most sensitive thing we collect. We never show your coordinates to restaurants or to other users.

We do not run analytics, advertising, or tracking software of any kind. We have never sold personal data and never will. You can delete your account and everything in it from inside the app at any time.

This policy explains what remark collects, why, who it is shared with, and what control you have. It covers all three parts of remark: the remark mobile app for diners, the restaurant dashboard at restaurant.remarks.co.in, and our internal admin tools.

1Who we are

remark is operated as a sole proprietorship based in Kerala, India. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary for the personal data described here, and you are the Data Principal.

You can reach us any time at hello@remarks.co.in.

2What we collect

Account information

Your email address, a securely hashed password, your username, display name, and optionally an avatar photo and a short bio. Restaurant owners also provide their full name and phone number.

Location — the most important section

remark records your device's GPS coordinates at three specific moments, and only these three:

We collect location only while the app is open and in the foreground. remark does not use background location, does not track your movements between visits, and does not build a location history beyond those individual verification events. We do not request the "Always allow" location permission.

Your coordinates are private. They are never shown to restaurants, never shown to other users, and never displayed anywhere in the app. A restaurant only learns that a verified visit happened — never where you were standing, and never anything about where you go otherwise.

Reviews and photos

Your star rating, review text, any dishes you tag, and up to five photos per review. Reviews and their photos are public — that is the point of the product.

Delivery order proof

If you review a delivery order, we collect the platform (Swiggy, Zomato, or other), the order ID, the order date, optionally the order amount, and a screenshot of your order confirmation. We use these solely to verify the order was real and to prevent the same order being reviewed twice.

Please crop your screenshots. Order confirmations often contain your home address and phone number. Only upload the portion showing the restaurant, order ID, and date. Uploaded images are stored at web addresses that are not listed or searchable but are not individually access-controlled, so treat anything you upload as potentially viewable by someone with the link.

We also do not currently strip camera metadata (EXIF) from uploaded images, which can include the location where a photo was taken. If that concerns you, disable location tagging in your camera app.

Restaurant owner information

For owners: your business details, your FSSAI licence number and a copy of the licence document, and your restaurant's address and location. FSSAI documents are stored privately and are visible only to you and to our review team.

Activity data

Your points balance and points history, reward redemptions, complaints you raise, and reports you file about other reviews.

Technical data

On the web dashboards, we set strictly necessary session cookies to keep you signed in. There are no advertising or analytics cookies. On mobile, your session is stored securely on your device (iOS Keychain / Android Keystore) and no cookies are used.

3What we deliberately do not collect

We think this matters as much as what we do collect. remark contains:

4Why we use your data

We process this data on the basis of the consent you give when you create an account and when you grant location permission, as required by the DPDP Act. You can withdraw consent at any time by deleting your account.

5What is public and what is private

remark is a public review platform, so some information is visible to everyone. This table is the complete picture.

DataVisibility
Username, display name, avatar, bioPUBLIC
Your tier, review count, upvotes receivedPUBLIC
Your reviews, ratings and review photosPUBLIC
Your GPS coordinates and check-insPRIVATE
Your email addressPRIVATE
Points balance and points historyPRIVATE
Reward redemptionsPRIVATE
Delivery order proof and screenshotsPRIVATE
Complaints you raisePRIVATE — shared with that restaurant
Reports you file about reviewsPRIVATE — visible only to our team
Owner contact details and FSSAI documentsPRIVATE

When you redeem a reward, the restaurant validating your code sees your username, display name, and avatar so they can confirm it is you. They see nothing else.

6Who we share data with

We share personal data with exactly three service providers, each of which processes it only to run remark:

We may also disclose data where legally required, for example in response to a valid order from an Indian court or law-enforcement authority.

We do not sell personal data, and we do not share it with advertisers or data brokers. There is no third-party advertising on remark.

Some of these providers process and store data on servers outside India. The DPDP Act permits such transfers except to countries specifically restricted by the Government of India.

7How long we keep data, and how to delete it

We keep your data for as long as your account exists.

You can delete your account at any time from Profile → Delete account in the mobile app. Deletion is immediate and permanent. It removes:

There is no recovery period — once deleted, your data cannot be restored, and any unused points are forfeited. Affected restaurant scores are recalculated so your removed reviews no longer count.

Two things survive deletion. Internal records of moderation actions (for example, if a review was removed for abuse) are retained so we can enforce our rules consistently. Restaurant scores are aggregate numbers that no longer reference you in any way.

If your account is linked to a restaurant listing, email us instead so we can transfer the listing before deleting your account.

8Your rights

Under the DPDP Act you have the right to:

To exercise any of these, email hello@remarks.co.in. We respond within 30 days.

9Grievance Officer

In line with the DPDP Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following person handles privacy grievances:

Grievance Officer — remark

Email: hello@remarks.co.in

Kerala, India

We acknowledge grievances within 48 hours and resolve them within 30 days.

10How we protect your data

No system is perfectly secure. If a data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.

11Children

remark is for adults. You must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete the account and its data promptly. If you believe a minor is using remark, please tell us at hello@remarks.co.in.

12Changes to this policy

If we change this policy in a way that materially affects you, we will notify you in the app or by email before the change takes effect. The "last updated" date at the top always reflects the current version.

13Contact

Questions about this policy, or about your data:

remark

Email: hello@remarks.co.in

Operated from Kerala, India