What they may do · DPDP §6(4)
What Swiggy does with your data
Swiggy uses what you order, search for and tap on to pick which ads and offers you see, and lets outside advertising companies recognise your device when you are on other apps and websites. Your details also travel to the restaurant, the delivery partner, and to other companies in the Swiggy group.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Swiggy’s own policy says “We may share your information with any present or future member of our Group (as defined below) including our affiliates for our internal business purposes.”
Our summary shares your information with any present or future member of its Group, including affiliates.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Swiggy’s own policy says “To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.”
Our summary measures advertising effectiveness and delivers relevant advertising to you.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Swiggy’s own policy says “These entities may use cookies, web beacons, SDKs and other technologies to identify your device when you visit the Swiggy Platform and use our Services, as well as when you visit other online sites and services.”
Our summary partners use cookies, web beacons and SDKs to identify your device on the Swiggy platform and on other online sites and services.
What the policy does not mention
These are uses Swiggy’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Keeps your records long-term
- Processes your face or other biometrics
- Trains AI models on your content
Who to write to at Swiggy
Swiggy publishes three addresses that do three different jobs, and sending to the wrong one is the usual reason a request stalls. grievances@swiggy.in is the one the privacy policy scopes to how your information is processed. support@swiggy.in is the general contact — but it is also the address the policy names for withdrawing consent and asking for deletion, with a five-business-day effect. Send to the first and copy the second.
- Grievance Officer
- Saurabh Deshpande Grievance Officer / Nodal Officer, Swiggy Limited. The name is published in the terms and conditions, clause 19 — not in the privacy policy.
- Data requests
- grievances@swiggy.in
- Consent withdrawal
and deletion - support@swiggy.in The policy says a request here takes effect no later than five business days.
- Post
- Swiggy Grievance Officer, Survey No. 14, No. 158, 3rd–6th Floor, Tower I, Sumadhura Capitol Towers, Pattanduru Agrahara Village, K. R. Puram Hobli, Bangalore East Taluk, Bengaluru, Karnataka – 560066
- Hours
- Monday to Friday, 9:00 to 18:00
- Phone / DPO
- Neither is published
Show me where they publish that
Swiggy’s privacy policy says“If you have any queries relating to the processing or usage of information provided by you in connection with this Policy, please email us at grievances@swiggy.in or write to our Grievance Officer at the following address”
Source swiggy.com/privacy-policy, read on 12 August 2026.
What you can withdraw, and what will outlive the request
Swiggy’s policy is more specific than most about timing, and blunter than most about one limit.
You can stop this now
- Marketing email and SMS, through the unsubscribe and the email-preference control.
- A general withdrawal of consent, or a deletion request, by writing to support@swiggy.in — the policy says it takes effect no later than five business days.
- Commercial calls and SMS from registered senders, via 1909 / DND under TRAI’s TCCCPR.
This will survive it
- Advertising on Swiggy itself. The policy states plainly that you cannot opt out of advertising on the Swiggy platform. Only third-party ad-network personalisation can be reduced, and that is done through those networks’ own opt-outs, not through Swiggy.
- Processing the policy carves out as required to comply with legal obligations — order, invoice and payment records for tax and GST.
- Data held for fraud and credit-risk purposes.
The legal position, stated straight. The DPDP Act’s consent-withdrawal right in section 6(4) is not in force today — sections 3 to 17 are on a staged commencement running to 14 May 2027. A request sent now asks for voluntary compliance and puts the date on record, which is what any later escalation rests on. There is no 90-day statutory erasure deadline, and the ₹250 crore figure is the penalty for failing to secure data against a breach — not for ignoring your request.
Swiggy is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Swiggy do with my personal data?
According to Swiggy's own privacy policy, read on 2026-08-12, it discloses 3 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps.
Can I withdraw my consent from Swiggy?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Swiggy track me for advertising?
Yes — Swiggy's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Who is Swiggy's grievance officer?
Saurabh Deshpande, Grievance Officer and Nodal Officer at Swiggy Limited, named in clause 19 of the terms and conditions rather than in the privacy policy. Use grievances@swiggy.in for data requests, and copy support@swiggy.in, which the privacy policy names for withdrawing consent and asking for deletion within five business days.
Every use above is one Swiggy declared in its own published privacy policy, which we
read on 2026-08-12. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy