Privacy Policy

DFW Curry (dfwcurry.com) is a community-driven restaurant directory and food guide serving the Indian community across Dallas–Fort Worth, Texas. It is operated by an individual developer as a hobby project based in Plano, Texas. DFW Curry is not a corporation, LLC, or registered business entity. It is a personal project built to help the DFW Indian community discover Indian restaurants, temples, grocery stores, and community resources. We are not affiliated with, endorsed by, or partnered with any restaurant, temple, government agency, health department, Google, Yelp, or any other third-party service mentioned on this site. Nothing on this page is legal advice. If you need legal guidance, consult a qualified attorney.

We collect the minimum information necessary to provide our service. WHEN YOU SIGN IN WITH GOOGLE: We use Google Sign-In through NextAuth.js. Google may show you its own consent screen. We receive from Google: your name, email address, and profile photo URL. We store your name and email in our database to identify your account. We do not receive or store your Google password. WHEN YOU SIGN IN WITH EMAIL AND PASSWORD (IF OFFERED): If you create an account with email and password, we store your email and name (if you provide it). Your password is hashed with bcrypt on our servers — we never store your password in plain text. WHEN YOU USE THE SITE (WITHOUT SIGNING IN): You can browse restaurants, temples, and listings without creating an account. We do not require personal information just to browse. WHEN YOU USE FEATURES (SIGNED IN): • Favourite restaurants: we store the restaurant IDs you save • Reviews: we store the text, rating, and timestamp you submit • City or preferences: if you choose to share a city or similar preference, we store it • Alerts / newsletter: if you opt in, we store what is needed to deliver those messages AUTOMATICALLY COLLECTED INFORMATION: Our servers and hosting may log technical data such as IP address, browser type, request path, and timestamps. We use this for security, debugging, and reliability — not for sale to data brokers and not for targeted ads on our behalf. WHAT WE DO NOT COLLECT (TODAY): • We do not process payments on the site — no card or bank data • We do not require your phone number or home address to use the service • We do not run GPS or precise location tracking through the site for profiling • We do not access your Google contacts, Gmail, or Drive • We do not read your emails

Listings (restaurants, temples, grocery, etc.) are built from publicly available information and licensed APIs. GOOGLE PLACES / PUBLIC BUSINESS DATA: Names, addresses, phone numbers, hours, ratings, photos, and coordinates may come from Google Places API and similar public business datasets, subject to Google's terms and policies. That data originated from businesses and the public. HEALTH INSPECTION DATA: Where shown, health inspection scores and grades come from public government records (for example county health departments in the DFW area). Authoritative records remain with the official agency. DESISCORE™: DesiScore™ is a calculated score derived from data we process (for example Google ratings and, over time, other public signals). It is our editorial-style indicator for discovery — not an official government or third-party certification. ACCURACY: Hours, menus, ownership, and contact details change often. We try to keep listings useful, but we cannot guarantee everything is current. Always confirm critical details (hours, allergens, closures) directly with the venue. LIMITATION: We are not responsible for losses from relying on listings, scores, or third-party data. Report corrections via "Is this info correct?" where available or email dfwcurry@gmail.com.

DesiScore™ is DFW Curry's proprietary rating-style metric for informational purposes only. PHASE 1 (CURRENT): DesiScore™ is calculated using publicly available inputs such as Google ratings and related signals. Methodology may evolve (for example Phase 2 may add more sources). IMPORTANT: • DesiScore™ is not an endorsement, guarantee, or official safety certification • A higher or lower score does not mean food is safe or unsafe • Government health inspections are the authoritative source for regulatory food safety questions • Use your own judgment; if you have medical dietary needs, consult professionals We may change or discontinue DesiScore™ or its formula with reasonable updates to this policy when appropriate.

We use personal information to run the site and support features you choose. USES: • Create and secure your account • Show your favourites, reviews, and preferences • Send transactional or service emails (for example alerts or newsletter if you subscribed) • Respond when you contact us • Protect against abuse, spam, and security issues WE DO NOT SELL YOUR PERSONAL INFORMATION: We do not sell your personal information for money. We do not share it with data brokers for their marketing lists. REVIEWS: Reviews you submit are intended to be visible to other visitors. Do not post others' private information. We may moderate or remove content that violates guidelines or law. NEWSLETTER: You can unsubscribe using the link in marketing emails (when we use one) or by emailing dfwcurry@gmail.com.

We rely on vendors to host and operate the service. Their policies also apply. GOOGLE (Sign-In & Places): • Sign-In: policies.google.com/privacy • Google Maps / Places: policies.google.com/privacy HOSTING (e.g. Vercel or similar): Our frontend may be hosted on a cloud platform that processes HTTP logs. See that provider's privacy policy for details. BACKEND & DATABASE: Account and application data are stored in a PostgreSQL database used by our API, typically in the United States. The exact host depends on our deployment configuration. ANALYTICS: If we add analytics (for example Google Analytics), we will update this policy and, where required, provide choices or notices. We do not use Facebook Pixel, TikTok Pixel, or similar ad networks on the site today.

SESSION / AUTH: When you sign in, NextAuth.js sets cookies (or similar tokens) so your session works. These are needed for logged-in features. Signing out or clearing cookies will end your session. LOCAL STORAGE: We may store small preferences in your browser (for example banner dismissals). That data stays on your device unless we explicitly sync it. NO AD-TRACKING COOKIES (TODAY): We are not running cross-site ad tracking cookies for DFW Curry. You can control cookies through your browser settings; blocking essential cookies may break sign-in.

ACCESS & CORRECTION: Signed-in users can review much of their activity (favourites, reviews) in the app. For a full export or corrections, email dfwcurry@gmail.com. DELETION: Email dfwcurry@gmail.com with subject line [DELETE MY ACCOUNT] to request account deletion. We will complete verifiable requests within a reasonable time (often within 30 days). Some content may be retained in backups briefly or anonymized where needed for integrity or legal reasons. CALIFORNIA (CCPA / CPRA): California residents can request to know, delete, and correct personal information we hold, and to opt out of "sale" or certain "sharing" for cross-context behavioral advertising. We do not sell personal information in the traditional sense. To exercise rights, email dfwcurry@gmail.com. We will not discriminate for exercising these rights. COLORADO, VIRGINIA, CONNECTICUT, UTAH, AND OTHER U.S. STATE LAWS: Depending on where you live, you may have similar rights (access, deletion, correction, opt-out of targeted advertising, appeal). Contact us at dfwcurry@gmail.com. TEXAS (TDPSA): Texas residents may have privacy rights under the Texas Data Privacy and Security Act, including access, correction, deletion, and opting out of certain processing where applicable. Contact dfwcurry@gmail.com to submit a request. EU / UK / EEA (GDPR): If you are in the European Economic Area or UK, you may have rights to access, rectify, erase, restrict processing, portability, and objection, and to lodge a complaint with a supervisory authority. Our service is US-focused; if you use it from the EU, contact dfwcurry@gmail.com for requests. GOOGLE OAUTH: You can revoke DFW Curry's access from your Google Account security settings at any time.

We use HTTPS, hashed passwords (bcrypt) for email accounts, secured credentials for APIs, and reasonable access controls. LIMITATIONS: This is a small hobby project — not a Fortune 500 security program. We do not promise zero risk. No online service can guarantee perfect security. BREACH NOTIFICATION: If we become aware of a breach that likely affects your personal data, we will notify affected users when and as required by applicable law, typically by email. SECURITY REPORTS: Email dfwcurry@gmail.com with subject [BUG REPORT - SECURITY] for suspected vulnerabilities.

By posting reviews or other content, you grant DFW Curry a non-exclusive license to host and display that content on the service. GUIDELINES: Be honest, avoid doxxing, no illegal or harassing content, no spam. We may remove content that violates guidelines or law. BUSINESS OWNERS: If you believe listing or review information is wrong or harmful, contact dfwcurry@gmail.com with specifics.

DFW Curry is not a medical, legal, or financial advisor. We are a directory and community resource. THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, TO THE MAXIMUM EXTENT PERMITTED BY LAW. WE ARE NOT LIABLE FOR: • Food safety, allergies, illness, or restaurant conduct • Incorrect hours, closures, or bad experiences • Actions of third parties (restaurants, Google, hosting providers) • INDIRECT OR CONSEQUENTIAL DAMAGES WHERE ALLOWED BY LAW SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS; THOSE LIMITS APPLY ONLY TO THE EXTENT ALLOWED. INDEMNITY: To the extent permitted by law, you agree to indemnify and hold harmless the operator of DFW Curry from claims arising from your misuse of the site or your content, except where prohibited by law.

DFW Curry is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided us personal data, email dfwcurry@gmail.com and we will take appropriate steps to delete it. Teens should use the service with a parent or guardian where appropriate.

We may update this Privacy Policy as the product changes. We will post the new date at the top and, for material changes, try to give additional notice (for example a banner or email to registered users) when practical. Continued use after updates means you accept the revised policy, except where your consent is required by law.

Questions about privacy or your data: Email: dfwcurry@gmail.com Suggested subjects: • General privacy question → [INFO] Privacy: your question • Account deletion → [DELETE MY ACCOUNT] • Security issue → [BUG REPORT - SECURITY] We are a solo developer project and aim to respond within a few days. Physical mailing address: Plano, Texas — street address coming soon.