Privacy Policy

Kirana by Gopafy respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, process, and protect user data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable Indian IT Rules.

1. Information We Collect

Customer Information: Name, mobile number, address, location data (to map nearby stores), order history, and device information.

Store Owner Information: Store name, owner details, phone number, email address, PAN details, GSTIN, FSSAI details, and business verification documents.

2. Purpose of Data Collection
We collect and process your information based on your verifiable consent strictly to:

• Create user accounts
• Manage store onboarding
• Process orders
• Map locations accurately
• Improve platform experience
• Provide customer support
• Maintain platform security
• Comply with law enforcement or regulatory obligations

3. Data Sharing
Kirana may share limited information:

• Between customers and stores (such as name, phone number, and address) strictly for order fulfillment and operational purposes.
• With government authorities or regulatory bodies where legally required under applicable law, valid legal process, or court order.
• With trusted service providers including cloud hosting providers, OTP SMS gateways, analytics providers, and operational vendors bound by confidentiality obligations and non-disclosure agreements.

Kirana will never sell personal data to third-party data brokers or unauthorized advertisers.

4. Data Security
We implement reasonable technical and administrative safeguards including SSL encryption, access controls, authentication mechanisms, and restricted role-based permissions to protect user information from unauthorized access, misuse, alteration, or disclosure, as required under applicable Indian laws.

While Kirana implements reasonable security safeguards, no method of electronic storage, transmission, or internet-based system can be guaranteed to be completely secure or error-free.

5. User Responsibilities
Users are solely responsible for:

• Maintaining account confidentiality
• Protecting OTPs and passwords
• Providing true and accurate information during registration
• Preventing unauthorized access to their accounts or devices

6. Data Retention
Kirana may retain user information only for as long as necessary for operational, legal, security, fraud-prevention, compliance, and dispute-resolution purposes.

Financial, taxation, and merchant-related compliance records may be retained for up to 8 years or longer where required under applicable Indian laws.

Upon account deletion, eligible user data may be anonymized, archived, or securely purged subject to legal, security, regulatory, or fraud-prevention obligations.

7. Children's Privacy
The Kirana Store app may be used by users aged 13 years and above. Users below 18 years should use the platform under parental or guardian supervision.

We do not knowingly collect sensitive personal information from minors without appropriate consent.

8. Third-Party Services
Kirana may use third-party tools including analytics services, push notification services, cloud hosting providers, and related operational technologies.

These services may process limited user data strictly for platform functionality, operational support, security, communication, and performance optimization and are governed by their respective privacy policies.

Kirana may use cookies, device identifiers, analytics tools, and similar technologies to improve user experience, analyze platform usage, maintain security, optimize services, and enhance overall platform functionality.

Some user data may be processed or stored on secure cloud servers located outside India through trusted infrastructure providers while maintaining reasonable data protection safeguards.

9. User Rights
Under the DPDP Act, users have the right to request:

• Access to the personal data we hold about them
• Correction of inaccurate or incomplete information
• Account deletion and Right to Erasure, subject to applicable legal and fraud-prevention requirements
• Withdrawal of previously granted consent for data processing
• Grievance redressal regarding personal data handling

Users may withdraw previously granted consent for data processing by contacting Kirana or through available account settings, subject to legal, security, fraud-prevention, compliance, and operational requirements.

Users may request account deletion through available application settings or by contacting Kirana support. Certain information may be retained where required by law, fraud prevention, dispute resolution, taxation, or regulatory obligations.

10. Fraud Prevention & Legal Compliance
Kirana may preserve, monitor, or disclose information where reasonably necessary to:

• Comply with applicable laws or legal obligations
• Prevent fraud, abuse, or unauthorized activities
• Protect platform integrity and security
• Investigate unlawful or suspicious activities
• Enforce platform policies and user agreements

11. Policy Updates
Kirana reserves the right to update or modify this Privacy Policy periodically to reflect operational, technological, legal, or regulatory changes.

Continued use of the platform after updates constitutes acceptance of the revised Privacy Policy.

12. Grievance Officer
For privacy-related concerns, complaints, or requests to exercise your data rights, contact:

Grievance Officer
Kirana by Gopafy

Email: [email protected]