Privacy Policy

This Privacy Policy explains how KiranaCart (“KiranaCart”, “we”, “our”, or “us”), a sole proprietorship operated by Abhishek Mishra based in Shahjahanpur, Uttar Pradesh, India, collects, uses, discloses and protects your information when you use our website, mobile application and grocery delivery services (collectively, the “Services”).

By using the Services you agree to this Policy. This Policy is designed to comply with the Google Play Developer Program Policies, Google Play's User Data policy, India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information we collect

We only collect data that is necessary to provide, secure and improve the Services. The categories are:

• Account information: name, phone number, email address, delivery address, and (optionally) date of birth. Provided by you at signup or checkout.
• Order & transaction data: items ordered, invoice amounts, payment method (Cash on Delivery / online), payment status, refund status. Payments are processed by third-party payment gateways; we do not store your full card number, CVV or UPI PIN.
• Location data: precise or approximate device location, only when you grant permission, used solely to confirm serviceable area, calculate delivery ETA, and route your order. You can revoke this at any time in your device settings.
• Device & usage data: device model, OS version, app version, unique device identifiers, IP address, crash logs, and interaction events (screens viewed, buttons tapped). Used for security, fraud prevention and improving the app.
• Communications: messages, calls or emails you send to our support team, and delivery-partner interactions related to your order.
• Cookies & similar technologies on the website, to keep you signed in and remember preferences.

We do not knowingly collect data from children under 18. If you believe a minor has provided us data, contact us and we will delete it.

2. How we use your information

• To create and manage your account.
• To fulfil, deliver, invoice and provide support for your orders.
• To process payments and refunds through payment partners.
• To send transactional messages (order confirmation, dispatch, delivery, refund) via SMS, WhatsApp, email or push notifications.
• To send optional promotional messages, only if you opt in. You can opt out anytime.
• To detect, prevent and investigate fraud, abuse, and violations of our Terms.
• To comply with applicable laws, tax rules and lawful requests from authorities.
• To analyse aggregated, non-identifying usage patterns to improve our Services.

3. Legal bases for processing

We process your personal data under one or more of these legal bases: (a) your consent; (b) performance of a contract with you (fulfilling your order); (c) compliance with a legal obligation; (d) our legitimate interests in operating a safe, reliable service.

4. Sharing of information

We never sell your personal data. We share only with:

• Delivery partners — your name, phone number and delivery address, strictly to hand over your order.
• Payment gateways — order amount and identifiers to process online payments and refunds.
• Service providers — hosting, SMS/email/push, analytics and crash-reporting vendors bound by confidentiality obligations.
• Government / law enforcement — when required by valid legal process, or to protect the rights, property or safety of KiranaCart, our users or the public.
• Business transfers — if the business is merged, acquired or reorganised, your data may transfer to the successor entity subject to this Policy.

5. Permissions we request (mobile app)

• Location — to detect serviceability and route orders. Optional.
• Notifications — to send order updates. Optional.
• Phone / SMS auto-read — only where technically required for OTP-based sign-in. We never read personal messages.
• Camera / Photos — only if you choose to upload a profile picture or a photo related to a support complaint.

Every permission is used only for the purpose stated above and can be revoked in device settings without disabling core functionality that does not require it.

6. Data retention

We retain personal data only for as long as needed to fulfil the purposes above or as required by law (e.g., tax invoices are kept for statutory periods). When no longer needed, data is deleted or anonymised.

7. Data security

We use industry-standard safeguards including HTTPS/TLS in transit, access controls, and least-privilege administration. No system is 100% secure; if we discover a personal data breach that is likely to result in significant harm, we will notify affected users and the appropriate authorities as required by law.

8. Your rights

Subject to applicable law, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data (from the app profile or by contacting us).
• Delete your account and associated data. We may retain limited transactional records where required by law.
• Withdraw consent for marketing at any time.
• Grievance redressal — contact our Grievance Officer below.

To exercise these rights, email us at abhiishekmishraa2025@gmail.com from your registered email or phone. We will respond within Within 24–48 business hours.

9. Third-party links & services

Our Services may link to third-party sites (e.g., payment gateways). Their privacy practices are governed by their own policies, which we encourage you to review.

10. International transfers

Your data is primarily processed in India. Some vendors (e.g., analytics or crash-reporting) may store data outside India under contractual safeguards.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified in-app or by email. The “Last updated” date above always reflects the current version.

12. Grievance Officer & contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are:

• Name: Abhishek Mishra (Proprietor)
• Business: KiranaCart (Sole Proprietorship)
• Address: Shahjahanpur, Uttar Pradesh, India
• Email: abhiishekmishraa2025@gmail.com (future: support@kiranacart.in)
• Phone: +91 8858344648
• Hours: Monday – Sunday, 7:00 AM – 10:00 PM IST