Privacy Policy

1. What we collect

Account: mobile number, name, optional email, gender and date of birth. Usage: searches, which results were shown to you and which ones you opened, items viewed, reservations. We use that last part only to improve the order of search results, it is deleted after 90 days, and it is not shared with shops except as local demand: a search term that at least three different people in a market searched, with nothing that links it to any of them. The one exception: if an account is blocked or under investigation for fraud or abuse, a senior member of our team may look at the words that account searched in the last 30 days, purely to investigate that case. Every such look is recorded with the staff member’s name and reason. Location: only if you allow it, to show nearby shops; it is stored in your browser for 7 days and not shared with shops. Item requests: if you ask shops for an item we could not find, we keep your description, your budget and the photo you attach (the photo is re-encoded on your phone, which removes its hidden data such as location). Shop QR codes: if you scan the QR code on a shop’s standee, we record the time, which shop and roughly what kind of device it was, for 90 days, so we can tell which shops bring customers to us. We do not store your address on the internet (your IP address) with it. Delivery addresses: the addresses you save for delivery, with the point on the map you choose, kept until you delete them; an order keeps a copy of the address it was delivered to. Device identifier: a random number stored in a cookie on your browser for a year, used to keep search results consistent and to stop abuse; it is not linked to your name until you sign in. Notifications: if you turn on phone notifications, the address your browser gives us for them and the browser's name. Support: the contact details you give when you write to us. Photo search: the photo stays on your phone; only a list of numbers describing it is sent to our server, used for that search and not kept. Riders and field agents: identity documents, vehicle details and, while on duty, location. Shopkeepers our field agents speak to: the name, phone number and notes the agent records, deleted 180 days after the last contact, or 30 days after the shop joins or declines, or sooner on request.

Also, only when you use the feature: your location, rounded to about 10 metres and kept in a cookie on your device, to show distances and pick your city (a saved delivery address keeps its location); a photo you attach to an item request; for photo search, the picture is analysed on your phone and only a numeric description of it is sent to us, never the photo; the push subscription your browser gives us if you turn notifications on; a random, signed device identifier used for rate limits and to count views fairly. If you sign in with Google we receive your name and email address from Google. If you join as a delivery partner, we also keep the identity documents you upload for verification.

2. Why we use it

To run reservations and orders, show relevant shops, keep the service safe (rate limits, abuse prevention), and send you updates you asked for. Marketing messages are sent only with your consent, which you can withdraw any time.

3. Who we share it with

The shop handling your active reservation sees your first name and mobile number; the number is hidden again 7 days after the reservation ends. Delivery partners (when available) see your delivery address for that order. An item request you make is shown to shops in your city with your first name, your city and market, your description, your budget and your photo; never your mobile number, full name or address. Shops reply inside the app only. Service providers that host our systems process data on our behalf.

4. Your rights (DPDP Act 2023)

You can download your data and delete your account from Profile → Privacy & data. Deletion happens after a 14-day grace period, and waits while you have an active reservation or an order that has not been delivered yet. Records we must keep by law (e.g. invoices) are kept without your personal details.

5. Security and retention

Data is protected with access controls on every table, encrypted connections and limited staff access with two-factor authentication. Search history, the record of which results you were shown, and QR scans are deleted automatically after 90 days. Item requests are anonymised 90 days after you make them: the description and photo are deleted and the request is no longer linked to you; you can also delete a request yourself at any time. [Other retention periods to be confirmed by a lawyer/CA.]

6. Contact

Grievance officer: [Grievance officer name — to be provided by owner]. Email: support@example.com.