← Back to OrderKart Home
Commitment to User Privacy: OrderKart values your trust. We collect only the essential personal information required to authenticate your identity, coordinate local fresh grocery deliveries, and provide real-time order tracking. We do not sell your personal data to third parties.
1. Overview & Scope
This Privacy Policy explains how OrderKart ("we", "our", or "us"), operated under ApliBhaji Fresh Foods, collects, stores, processes, and protects your personal data when you use the OrderKart mobile application (Package ID: com.orderkart.app) or our website.
2. Information We Collect & Why
To provide reliable hyper-local grocery delivery services, we collect the following categories of data:
A. Authentication & Contact Information
- Email Address: When you sign in using Google Sign-In (Google Identity Services), we obtain your verified email address and basic profile information to authenticate your session, protect your account from unauthorized access, and send digital order receipts and critical service alerts.
- Phone Number: When you use Mobile Phone OTP Authentication or complete your profile, we collect your 10-digit mobile number to verify your identity via SMS OTP, enable delivery drivers to call or message you upon arrival, and send order status updates.
- Full Name: Collected to personalize your account profile and identify recipient parcels at delivery.
B. Delivery & Location Data
- Physical Delivery Address: Flat/House Number, Building/Society Name, Road/Street Name, and Delivery Area/Neighborhood. This information is strictly used by our fulfillment team to route your orders.
- Precise / Approximate Location: If granted, location permissions are used solely to assist you in selecting your delivery area from our supported service zones.
C. Device & Technical Information
- Push Notification Tokens (FCM): Firebase Cloud Messaging device tokens are used to send instant push notifications when your order is placed, confirmed, dispatched for delivery, or delivered.
- Device Model & OS Version: Used for diagnostic purposes, crash reporting, and app performance optimization.
3. How We Use Your Data
We use your information exclusively for legitimate business and fulfillment purposes:
- Processing, packing, and delivering farm-fresh grocery orders to your specified address.
- Authenticating your account via Google OAuth 2.0 or Firebase Phone OTP.
- Sending real-time order tracking notifications and transactional invoices.
- Customer service inquiries, replacement requests, and grievance redressal.
- Preventing fraud, spam accounts, and ensuring platform integrity.
4. Third-Party Service Providers
We partner only with industry-leading, privacy-compliant service providers to support our operations:
- Google Identity Services & Firebase (Google LLC): Facilitates secure Google Sign-In, Firebase Phone OTP authentication, and Firebase Cloud Messaging (FCM) push notifications.
- Supabase (PostgreSQL Infrastructure): Encrypted cloud database hosting with strict Row-Level Security (RLS) ensuring your data is isolated and protected.
5. Data Storage, Security & Retention
All sensitive customer data is transmitted using encrypted connections (TLS 1.3/HTTPS) and stored in secure cloud databases protected by granular access controls. We retain your personal data for as long as your account remains active or as required by applicable laws for tax and accounting purposes.
6. Your Rights & Data Deletion
You have full control over your personal data:
- View & Update: You can review and update your name, address, and delivery area inside the app at any time.
- Account Deletion: You can delete your account and all associated personal data directly within the mobile app (via Profile → Delete Account) or via our public Account Deletion Request Portal. Upon deletion, your customer record, address, and contact details are permanently expunged.
7. Children's Privacy
OrderKart does not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately so we can remove it.
8. Payment Data Security
OrderKart partners with RBI-authorized payment aggregators (such as PayU Payments Private Limited). We do not collect, process, or store your debit/credit card numbers, CVV, or net banking passwords on our servers. All online transactions are handled through 256-bit SSL encrypted channels adhering to PCI-DSS Level 1 compliance standards.
9. Cookies & Tracking Technologies
OrderKart does not deploy tracking or advertising cookies. Our mobile application operates using secure local authentication tokens, and our website does not utilize third-party ad retargeting or profiling trackers.
10. Contact & Grievance Redressal Officer
If you have any questions, feedback, or grievances regarding this Privacy Policy or your personal data, please contact our designated Grievance Officer: