Privacy Policy

How JFIT collects, uses and protects your data.

Last updated: July 2026.

What we collect

Account: phone number, name, optional email, optional password (for restaurant/admin).
Order data: passenger name, phone, PNR, train number, coach, berth, delivery station, delivery time, special instructions, items ordered, payment method.
Journey data: PNR lookups (we cache them in our database for 24 h so we don't re-hit the PNR provider on every page load).
Device & usage: IP, browser, pages visited, timestamps (server logs, retained 30 days).

To place your order with the chosen restaurant and assign a delivery executive.
To validate your PNR with our PNR provider (RailKit) and to call/SMS you about the order.
To prevent fraud and abuse.
To improve the service (aggregate, anonymous analytics).

The restaurant preparing your order — gets your name, phone, PNR, train, coach/berth, delivery station, delivery time, special instructions.
The delivery executive — gets your name, phone, train, coach, berth, delivery station.
PNR provider (RailKit) — receives your PNR to look up journey details. They have their own privacy policy.
Payment gateway — receives only the amount and order reference; we do not share card details.

We do not sell your data to third parties. We do not show you third-party ads.

JFIT uses a session cookie to keep you signed in and a CSRF token cookie to protect forms. We do not use third-party advertising cookies.

Order data: kept as long as your account exists; deleted within 30 days of account deletion.
PNR cache: 24 hours.
Server logs: 30 days.

You can request a copy of your data, ask for correction, or request deletion by emailing privacy@jfit.test. We respond within 7 business days.

JFIT is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be announced on the homepage.

Data Protection Officer · privacy@jfit.test · B-12, Railway Food Park, JP Nagar, Jaipur 302017.