Privacy Policy

Last updated: 31 October 2026

Kinniyan ("we", "us") runs an online marketplace at www.kinniyan.com where you can order food from local restaurants and have it delivered. This policy explains what personal information we collect, why we collect it, who sees it and the choices you have. By using Kinniyan you agree to this policy.

1. Information we collect

Account details: your name, mobile number, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.
Order details: the items you order, the restaurant, delivery notes, the price paid, order status and history.
Delivery details: your delivery address, landmark notes and map pin. If you order for someone else, we also collect that person's name and phone number so the rider can reach them.
Location: with your permission, your device's location, used to find your service area and to pin your delivery spot. You can refuse the permission and choose your area or drop a pin by hand instead.
Payment information: card payments are handled by our payment provider. We do not store full card numbers. We keep the payment reference and status.
Browsing information: your IP address, browser type, device information, language and pages viewed, collected automatically using cookies and similar technologies, including those needed to keep you signed in and keep your basket.
Riders, restaurants and area managers: business and contact details, bank or payout details, vehicle details for riders, and a rider's live location while on an active delivery.

2. How we use your information

To take, prepare, deliver and track your orders, and to contact you about them.
To show restaurants that deliver to your area.
To process payments, refunds and restaurant payouts.
To personalise your experience and show relevant restaurants and offers.
To improve our website, menus and services using your feedback and browsing patterns.
To detect and prevent fraud, unauthorised activity and abuse of the platform.
To send service messages such as order updates. We send offers by SMS, WhatsApp or email only if you agree, and you can opt out at any time.
To meet legal and tax obligations.

3. Who we share it with

The restaurant you order from receives your name, phone number, order and delivery address so it can prepare and deliver your food.
Delivery riders, whether the restaurant's own or Kinniyan's common fleet, receive the delivery address, pin, your phone number and order details for that delivery only.
Area managers see orders in their service area so they can dispatch riders and resolve issues.
Service providers that help us run the platform: hosting, payment processing, SMS and email delivery, Google sign-in, and map and address-search services (such as OpenStreetMap and map tile providers). They receive only what they need to do their job.
Authorities where the law requires it.

We do not sell, trade or otherwise transfer your personal information to third parties without your consent, except as described above. Our service providers are required to handle your data securely and confidentially, and to use it only for the service they provide to us.

4. Location and maps

When you search an address or drop a pin, the coordinates or the text you type may be sent to a mapping service to show the map and look up the street address. Your precise location is used only to find your service area and deliver your order. It is saved with your order and, if you choose, with your saved addresses.

5. Cookies

We use essential cookies and similar storage to keep you signed in, remember your basket and chosen delivery area, protect forms from forgery and remember your language. We do not use cookies to sell advertising. You can disable cookies in your browser settings, but parts of the site, such as signing in and the basket, may then stop working.

6. How long we keep it

We keep account and order records for as long as your account is active and for the period needed for accounting, tax, dispute and legal purposes. Delivery location data tied to old orders is kept only as long as needed for those purposes. You can ask us to delete your account at any time.

7. Your choices and rights

See or correct the details in your account.
Ask for a copy of your data or ask us to delete it, subject to records we must legally keep.
Withdraw consent for location access in your browser settings, and for marketing messages by replying STOP or using the opt-out link.
Remove your saved addresses from your account at any time.

To use any of these rights, email info@kinniyan.com.

8. Security

We use industry-standard security measures to protect your information from unauthorised access, alteration, disclosure or destruction. These include encrypted connections, hashed passwords and access limited to the people who need it. Card details are handled by our payment processor and are not stored on our servers. No online service is completely secure, so please use a strong password and keep it private.

9. Children

Kinniyan is not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, please contact us and we will delete it.

10. Changes to this policy

We may update or modify this policy at any time. Changes are posted on this page with a revised "last updated" date, and we encourage you to review it from time to time. If we make a significant change, we will tell you on the site or by email.

11. Contact us

Kinniyan
www.kinniyan.com
94 Urban Council Road, Kinniya 04, Sri Lanka
info@kinniyan.com