Privacy Policy

1. Introduction

Rythuri ("we," "our," or "us") operates the Rythuri mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grocery delivery service.

By using the Service, you consent to the practices described in this Policy. We comply with the Google Play Developer Program Policies and applicable data protection laws, including the GDPR where applicable.

2. Information We Collect

Personal Information You Provide

• Account Information: Mobile phone number (required for OTP verification and account creation)
• Order Information: Name, delivery address, and contact details necessary for delivery
• Saved Addresses: Delivery addresses you choose to save for future orders
• Location Data: Approximate and precise location (with your explicit consent) for service area verification and accurate delivery
• Optional Information: Email address (only if voluntarily provided for communications)

Information for App Functionality

• Push Notification Tokens: Firebase tokens required for sending order updates and delivery notifications

Information We Do Not Collect

For complete transparency, we explicitly state what we do not collect:

• Device Information: We do not collect device type, operating system, unique device identifiers, or IP address
• App Activity Tracking: We do not track or collect app interaction data, feature usage, or search history
• Financial Information: We do not directly collect or store payment information. All payments are processed securely by our payment partners
• Performance Analytics: We do not collect crash logs, performance metrics, or error reports
• Background Location: We do not track your location when the app is closed or running in the background

Data Collection Summary (Google Play Compliance)

In compliance with Google Play requirements, here is our complete data collection disclosure:

• Collected - Personal Information: Name, phone number, email (optional), delivery addresses
• Collected - Location Information: Approximate and precise location only during active app use for service verification
• Collected - App Functionality: Push notification tokens for order updates
• Not Collected - Device Information: Device identifiers, hardware information, IP addresses
• Not Collected - App Activity: Interaction data, feature usage, search history
• Not Collected - Financial Information: Payment details, transaction history
• Not Collected - Performance Data: Crash logs, diagnostics, performance metrics

3. How We Use Your Information

• Service Delivery: To create and manage your account, process and deliver your grocery orders
• Address Management: To save and manage your preferred delivery addresses for convenient future orders
• Service Area Verification: To determine product availability and service eligibility in your location
• Communication: To communicate order status, delivery updates, and provide customer support
• Location Services: To enable accurate delivery services and product availability checking
• Account Management: To maintain your account preferences and delivery addresses
• Legal Compliance: To meet regulatory requirements and prevent fraud

4. Legal Basis for Processing (GDPR Compliance)

We process your personal data on the following legal bases:

• Performance of Contract: To fulfill our grocery delivery services that you request
• Explicit Consent: For location data access and push notifications, which you can withdraw anytime
• Legitimate Interests: To save your preferred addresses for improved user experience
• Legal Obligation: To maintain records as required by Indian business laws

5. Location Data & Address Management

We are committed to transparent and responsible location and address data practices:

Location Data Usage

• Approximate Location: Used for initial service area verification and product availability checking
• Precise Location: Used for exact delivery address selection and pin-point delivery coordination
• Optional Access: Both location types require your explicit consent and are completely optional
• Manual Alternative: You can manually enter your address without granting any location permissions

How Location Services Work

We provide multiple ways to set your delivery location:

In-App Disclosure

Before accessing your location, we display the following clear disclosure:

Address Storage & Management

• Saved Addresses: We store delivery addresses you choose to save for convenient future ordering
• Immediate Deletion: You can delete any saved address instantly through the app or website
• Manual Address Entry: Users can manually enter area/location without granting location permissions
• Location Independence: Core app functionality works without location access using manual address entry

Our Location Data Commitment

• No Background Tracking: We never track your location when the app is closed or running in the background
• One-Time Access: Location data is accessed only when you actively use location features
• Optional Feature: Location services are completely optional for enhanced delivery accuracy
• Pin-Based Delivery: Delivery partners navigate to the pin location you set, not your ongoing location
• Explicit Consent: Location access requires your clear permission each time
• Easy Withdrawal: You can disable location access anytime through your device settings

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data. We only share information when necessary for service delivery:

Essential Service Providers

• Delivery Partners: We share only necessary delivery information (name, delivery address, pin coordinates, and contact number) with delivery personnel. Partners are contractually required to use this data solely for delivery purposes and delete it after completion.
• Payment Processors: Razorpay processes payments securely. We do not receive, store, or have access to your payment information.

Legal Requirements

• Legal Compliance: When required by law, court order, or governmental regulations
• Protection of Rights: To protect our rights, property, or safety, or that of our users

Third-Party Services

Our app integrates with the following services for essential functionality:

Important: We configure all third-party services to collect only the minimum data necessary for app functionality. We do not enable any analytics, tracking, or data collection beyond what is required for core features.

7. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data transmissions use secure HTTPS encryption
• Access Controls: Strict role-based access to personal data on a need-to-know basis
• Secure Infrastructure: Protected server environments with firewalls and monitoring
• Authentication: OTP-based verification for account security
• Regular Audits: Ongoing security assessments and compliance checks
• Data Minimization: We collect only the essential data required for service delivery

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Policy:

• Active Account Data: Retained while your account is active
• Saved Addresses: Retained until you choose to delete them or close your account
• Order Records: Retained for 5 years as required by Indian business and tax laws
• Location Coordinates: Not stored long-term; used only for real-time service verification
• Communication Records: Retained for 2 years for service quality purposes
• Notification Tokens: Removed immediately upon account deletion
• Pin Location Data: Stored only until order delivery completion

Upon account deletion, we permanently remove all personal data including saved addresses, except anonymized order records required for legal compliance.

9. Your Rights and Choices

You have full control over your personal data:

• Access & Correction: View and update your personal information anytime
• Address Management: Add, edit, or delete saved delivery addresses instantly
• Data Deletion: Request complete deletion of your account and associated data
• Consent Withdrawal: Revoke location access or notification permissions through device settings
• Manual Entry Option: Use manual address entry instead of location services
• Service Opt-out: Stop using our services at any time
• Data Portability: Request a copy of your data in readable format
• Pin Location Control: Choose exact delivery point through interactive map pin

Exercising Your Rights

To exercise any of these rights, contact us at support@rythuri.com. We respond to all legitimate requests within 30 days.

10. Account Deletion

You can delete your Rythuri account through multiple convenient methods:

Deletion Methods

• In-App Deletion: Use the account deletion feature in app settings
• Web Portal: Visit https://rythuri.com/account-deletion
• Email Request: Contact support@rythuri.com

Deletion Process

When you delete your account, we:

• Permanently remove all personal information (name, phone number, email, addresses)
• Delete all saved delivery addresses and preferences
• Remove push notification tokens and device associations
• Delete all stored location data and pin coordinates
• Anonymize order history for legal record-keeping requirements
• Complete the process within 30 days of your request

11. International Data Transfers

Your data is processed and stored primarily in India. Some third-party services (Google Firebase, Google Maps) may process data in other jurisdictions with adequate data protection measures. We ensure all international data transfers comply with applicable laws through appropriate safeguards and data processing agreements.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at support@rythuri.com and we will promptly investigate and delete such information.

13. Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

• Posting the updated policy on this page with a new "Last Updated" date
• In-app notifications for material changes
• Push notifications for significant privacy updates
• Where required by law, obtaining your consent for substantial changes

We encourage you to review this policy periodically to stay informed about our privacy practices.

14. Contact Information

For privacy-related questions, data rights requests, or concerns about this Policy, please contact us: