PRIVACY
What we hold, and why.
Tiffinware is software a tiffin kitchen uses to run its own business. Most of the personal information in the system belongs to that kitchen's customers and staff, and the kitchen decides what goes in and what comes out. We store and process it on the kitchen's behalf. This page covers tiffinware.com, the kitchen dashboard, the customer portal, and the Tiffinware Driver app for iPhone and Android.
LAST UPDATED AUGUST 31, 2026
If you are a meal-plan customer
Your kitchen enters most of this when it sets up your plan; you can enter and change it yourself in the portal your kitchen links you to.
| Name, phone, email | So the kitchen knows whose meals these are, and so we can send you a receipt, a renewal reminder, or a note that today's delivery is running late. |
|---|---|
| Delivery address, unit, buzzer and drop instructions | So the driver reaches your door. The address is also sent to a geocoding service (below) to place it on the kitchen's route map. |
| Your plan: meals, delivery days, skips, credits, pauses | To cook and deliver the right number of meals on the right days. |
| Payments recorded against your plan | Card charges run through Stripe, who hold the card number — we never see or store it. Cash and Interac payments are recorded as an amount and a date by the kitchen. |
| Delivery photos | Your driver photographs the drop-off. The photo is visible to your kitchen as proof the meal arrived. |
| Notes your kitchen writes about you | Allergies, preferences, and anything else the kitchen needs to remember. The kitchen writes these; we do not read them. |
We do not sell any of it, we do not use it to advertise to you, and we do not combine it with data from anywhere else.
If you drive or cook for a kitchen
Kitchen staff and drivers sign in with an email address and password. On top of that, a driver's record holds:
| Display name and phone | So the kitchen and the customer can reach you on the road. |
|---|---|
| Vehicle and plate | So the kitchen knows which van is out, and a customer expecting a delivery can recognise it. |
| A photo of your driver's licence | Your kitchen asks for this to satisfy itself you are licensed to drive. It is stored privately and is visible to the owner of your kitchen — not to customers, and not to other kitchens. |
| Your pay terms and delivery history | So your pay for a completed run can be worked out. |
You can see and change your own phone, vehicle, plate and licence photo from the Me tab in the driver app, or ask your kitchen to. Your pay terms are set by your kitchen and are not editable from the app.
The driver app asks for your camera to take drop-off photos and licence photos, and for your photo library if you would rather pick an existing image. It does not track your location — not in the background and not while you are using it. When you tap Navigate it hands the address to Google Maps, which then follows Google's own privacy policy, not this one.
If you are just visiting tiffinware.com
The marketing site counts page views without cookies and without storing your IP address. Each visit is reduced to a random-looking value that is regenerated every day, so we can tell one visit from two but cannot follow anyone from one day to the next. Alongside it we keep the page, the referring site, your browser, your device type, any campaign tag in the link, and an approximate country, region and city. There is no advertising network, no third-party analytics script, and no tracking pixel anywhere on the site.
Who else touches it
Only these, and only to do the job named:
| Supabase | Hosts the database, the sign-in system and the stored photos. All of the above lives there. |
|---|---|
| Vercel | Serves the website and the dashboards. |
| Stripe | Takes card payments. Stripe holds the card details; we receive only the amount, the status and a reference. |
| Resend | Sends the transactional email — receipts, invites, renewal reminders. It sees the address the message goes to. |
| Google Maps and OpenStreetMap | Turn a delivery address into map coordinates so a route can be drawn, and provide the map tiles. |
We do not share personal information with anyone else, and we never sell it. We will hand something over if a court or the law requires it, and we will tell the kitchen concerned unless we are forbidden from doing so.
How long we keep it
For as long as your kitchen keeps its account, because the kitchen needs its own history. A kitchen can delete a customer, a driver, or a delivery photo at any time from its dashboard. If a kitchen closes its account, we delete its data within 30 days, apart from payment records we are required to keep for tax.
Asking for a copy, or a deletion
If you are a customer or a driver, your kitchen is the fastest route — it can show you everything it holds and delete it on the spot. If you would rather come to us, or the kitchen is no longer trading, email hello@tiffinware.com and we will answer within 30 days. Under British Columbia's Personal Information Protection Act and Canada's PIPEDA you may ask what we hold about you, have it corrected, and complain to the Office of the Privacy Commissioner if you are unsatisfied with our answer.
Children
Tiffinware is a tool for running a food business. It is not directed at children, and we do not knowingly collect anything from anyone under 13.
Changes
If we start collecting something new, this page changes on the same day and the date above moves. Material changes are emailed to kitchen owners.
Questions: hello@tiffinware.com · contact form