Effective October 15, 2026 · Updated October 23, 2026
This policy explains how Nannu's Kitchen LLC ("we") handles your information. We collect only what we need to take your order, deliver your food and improve our service. We do not sell your information, and we do not show advertising on our site.
What we collect when you order
- Contact and delivery details: your name, phone number, email address and delivery address.
- Order details: your meals, add-ons, delivery day, spice level, delivery instructions and any notes you type. We do not ask for allergy information.
- Payment: payments are taken on a secure page run by Square. We never see or store your full card number. We receive confirmation that you paid and your order total.
How we use it
To prepare and deliver your order, contact you about it (for example, if the driver cannot find you), handle refunds and support, keep business, tax and accounting records, and follow the law. We use spice and delivery information only to prepare and deliver your food correctly. We do not send marketing messages unless you separately ask us to.
Who sees it
- Square (payments and order records).
- Cloudflare (our website host) and Google (the order sheet and email we use to receive orders).
- U.S. Census Bureau address lookup (when you are signed in, we send your saved delivery addresses to this free government service to place them on our delivery map; we do not send your name, phone or email).
- Address suggestions: the letters you type in an address box are sent from our server (not your browser) to an address lookup service, Geoapify, or Photon (OpenStreetMap data) as a backup, to suggest matching streets. Nothing else about you is sent.
- OpenFreeMap / OpenStreetMap (the map pictures on our delivery page; your browser loads them directly).
- Our chat assistant: messages you type to Choco are processed by an automated chat service (Anthropic) to write replies, and are saved by us. If you are signed in, Choco can look up your own orders and send a cancel or refund request to us on your behalf; it never sees your card details. Choco may remember a few short food preferences (like spice level) on your own device to help you faster. Please do not type card numbers, health details or other sensitive information into the chat.
- Twilio (sends our order text messages).
- Website statistics: page visits, clicks and zip codes checked are counted without cookies and saved in a Google Sheet that only we can open.
- Our owner, kitchen team and delivery drivers see what they need to cook and deliver your order.
- Authorities or others when the law requires it.
These providers have their own privacy policies. We do not sell or rent your personal information.
Cookies and your browser
We keep this simple and we do not sell your information.
- One sign-in cookie, only after you sign in (with Google or an email code). It keeps you signed in (for up to 30 days) and is removed when you sign out. The website cannot work for signed-in customers without it.
- Kitchen team cookie, only for our own kitchen workers who sign in with their PIN on the kitchen screen. It lasts 12 hours.
- Your own browser's storage remembers things on your device only: your in-progress order, your Choco chat during a visit, and small display settings. You can clear it any time in your browser settings.
- Google Ads measurement: we advertise on Google. If you arrive from one of our Google ads, a Google Ads tag on our pages stores the ad click in a cookie so we can see when an ad led to a paid order (only the order number and amount are sent to Google, never your name, address or card). If your browser sends a Global Privacy Control signal, the tag is not loaded. See how Google uses this information.
- Google sign-in and Square payment pages and buttons come from Google and Square. They may use their own cookies when you use them, under their own privacy policies.
We count visits, clicks and the zip codes people check without cookies and without storing your IP address, to improve the website. If your browser sends "Do Not Track", we do not count your visit at all.
Reviews and food photos
After a delivery we may email you once (and once more only if you tap "Remind me later") to rate your dishes. If you leave a review, we keep your star ratings, your comment, the photos you add, which dish you liked most, and the order it belongs to. On the website we show your stars, and after a quick check your comment and photos, with your first name and last initial (or "Verified customer" if you untick that box). Photos are made smaller on your phone before they are sent, which also removes hidden location details. Please do not include people's faces or personal details in photos. You can ask us to remove your review or photos at any time: call or text 412-660-9474 or email choco@nannuskitchen.com.
How long we keep it
We keep order records as long as needed for tax, accounting, safety and legal purposes, and then delete or anonymize them. Chat messages and text/message logs are kept for 12 months, then deleted. Website statistics are kept for 24 months. Order and payment records are kept as long as required for tax and accounting. Reviews stay until you or we remove them.
Your choices
You may ask us to see, correct or delete the personal information we hold about you, or to stop contacting you. Call or text 412-660-9474 or email choco@nannuskitchen.com. We answer within 30 days and will not treat you differently for asking. We may need to keep some records (such as payment records) where the law requires it.
Security
We use reputable, secure services and limit who can see order information. No system is perfectly secure, so please use caution when sharing information online.
Children
Our website is for adults placing food orders; you must be 18 or older to order or create an account. Children under 13 should not use the chat or send us information. We do not knowingly collect information from children under 13, and if we learn we have, we delete it. Parents can contact us at choco@nannuskitchen.com.
Changes
If we change this policy, the new version will be posted here with a new date.
Unfinished orders, chat memory and chat apps
Unfinished orders: if you start checkout and do not pay, we may send you up to two reminder emails, one a day (to the address you gave) with a link to finish. We use the details you entered only for that. Reply STOP, or turn off order emails in your account, and we will not send it. Your half-built order is also saved in your own browser for a short time so you can continue it; you can clear it with "Start over".
Chat with Choco: while you browse, your conversation with Choco is kept in your browser tab only (it is cleared when you close the tab) so the chat does not restart when you open a link. Chats are also saved on our side to help us improve, as described above.
Chat apps: if you order through a chat app such as Claude or ChatGPT, the assistant sends us the details needed for the order (name, phone, email, address and meals). We mark the order as "booked by a chat app". The assistant never receives your card details: you pay on Square. Please also read the privacy policy of the assistant you use.
Order updates and family tastes
We email you about your own order (confirmation, when it is cooking, when it is on the way, and one review request). These are service messages, not marketing. If you add family members to your account, we save only the name or nickname you type and their taste choices (spice level, meat or not, likes and dislikes) so the kitchen can cook each meal right. You can remove them any time in My account.
Text messages (SMS)
If you tick "Text me order updates" when you order, we may text you about that order only: when it is confirmed, when it is cooking, and when it is on the way (about 3 texts per order). We never send marketing texts. Message and data rates may apply. Reply STOP to stop texts at any time, or HELP for help, or call 412-660-9474. Texts are sent through our texting provider, Twilio. We do not sell, rent or share your mobile number or text opt-in with anyone for their marketing.
Texting us with a question: you can text our number (888) 601-2359. Choco Nani, our computer helper (not a real person), answers from our menu and delivery facts and, if you ask, helps with orders placed with your phone number (status, cancels and refunds, by the same rules as our website). It sends only replies to your messages, never marketing. We keep the conversation for 24 hours so the answers make sense, and save your questions and our answers in our private records to improve our help. Please never text card numbers. For food allergies, call 412-660-9474. Reply STOP to stop texts.
Accounts and rewards
If you create an account, you sign in with Google or with a one-time code we email you. With Google we receive your name and email address (never your password). With an email code we receive only your email address; we keep only a scrambled copy of the code, for 10 minutes. We save your account in our payment system (Square) along with your order history, reward points, delivery preferences (spice level, address, phone) and any feedback you send, so we can fill in your details, track your orders and give you rewards. You can ask us to delete your account at any time by emailing choco@nannuskitchen.com. If you save an address for someone else (for example a gift), we store that person's name, phone number and address only to deliver your order. Preventing abuse: to keep offers fair, we compare the phone number and delivery address on an order (in a standardized form) with earlier orders from any account. We use this only to decide whether a first-order code, welcome or referral points, or an instant refund applies, and to protect against fraud. It can show that two accounts share a phone or address, but we do not share that with anyone. When you delete your account in My account, we erase your saved addresses, preferences, messages and feedback; we keep order and payment records as the law requires, plus a minimal marker (join date and points) so a welcome bonus can't be claimed twice. We use order and feedback information in combined form to improve our menu and service.
Nannu Wallet, Meal Pass and gift cards
If you buy a Meal Pass or use the Nannu Wallet, we keep your wallet balance and its history (money in, meals paid, refunds) with your account, so you can see it and spend it. Payments are made on Square's secure pages; we never see your card or bank details. When you buy a gift card we save your name and email, the card's code, amount and design, and the name, email address (if you give one), message and send day for the person you are giving it to. We use the recipient's email only to send them that gift card, never for marketing. If you switch on Weekly Tiffin, we save your delivery days, address, number of meals and tastes so we can pick your dishes.
Nannu's Kitchen LLC, Pittsburgh, Pennsylvania. Phone or text 412-660-9474. Email choco@nannuskitchen.com.
Terms · Privacy · Cookies · Food safety · Dish ingredients · Home page