Privacy Notice

Who we are

Digi Dukaan is a mobile app that lets people order from local shops, and lets shop owners run their shop online. It is operated by Digi-Dukaan, a private limited company, Hustlehub, 3rd Floor, 19th Main Road, HSR Layout, Bangalore, Karnataka 560068, India (“we”). We serve people in India only.

Questions about your personal data, and complaints, go to our Grievance Officer: Devendra Upadhyaya, [NOT YET PROVIDED: Grievance Officer designation], [NOT YET PROVIDED: Grievance Officer email], [NOT YET PROVIDED: Grievance Officer phone]. You can also raise a complaint in the app (Privacy & Legal → Complaints) and follow it by its reference number. See Grievance redressal.

What we collect, and why

Data	When	Why
Email address and password (stored only as a one-way hash)	Sign-up	To create and secure your account and send you sign-in codes.
Google or Facebook account id and email	If you sign in with Google or Facebook	To sign you in. We do not receive your contacts or posts.
Name, mobile number, profile photo	Profile (optional for buyers)	To show shops who is ordering and to contact you about an order.
Delivery addresses: address lines, landmark, city, state, PIN code, map pin, receiver name and mobile, delivery instructions	When you save an address or place a delivery order	To deliver your order. The shop you order from sees it.
Your location	Only when you allow location access on your phone, and only while the app is open	To show nearby shops and delivery options. We keep your most recent location, not a history. You can turn this off in your phone settings.
Orders, cart, saved products, favourite shops, product searches, bulk enquiries	As you use the app	To place and track orders, and to let you go back to what you were looking at.
Reviews, ratings and review photos	If you write a review	Shown publicly on the shop or product with your first name and last initial.
Udhaar (shop credit) records	If you use udhaar with a shop	To keep the shop's and your record of what is owed.
Push-notification token	When you allow notifications	To send order and account notifications.
Which documents you accepted, that you confirmed you are 18 or older, and your privacy choices — each with its version, date and time	When you accept or change them	To have a record of what you agreed to.
Complaints and requests you send us, and our replies	When you raise one	To answer it and to show that we did.
QR code scans: the shop, the code, the browser's user-agent and a one-way hash that cannot be turned back into your identity	When a printed shop QR code is opened	To count scans for the shop.

Optional: only if you switch it on

These are off until you say yes, and you can change your mind at any time in Privacy & Legal → Privacy choices. Saying no does not limit what you can do in the app.

Choice	What is sent	To whom
Crash reports	The error, the screen, the app request that failed, your device model and your account id. Never what you typed.	PostHog, which may store it outside India.
Usage statistics	Which review screens were opened and how a review was submitted — counts and codes only, never review text — with the order, product or shop it concerns. Not your name or account id.	Our own servers.

Shop owners additionally provide: owner name, mobile and an optional second mobile; shop name, address, map location, opening hours and photos; tax details (legal name, GSTIN and address) for invoices; and identity documents for verification — PAN (the number is stored encrypted, with a masked copy) and, if you choose to give it, Aadhaar (we keep only the last four digits of the number, plus the card images you upload). If you use the handwritten-list feature, the photo is sent to Google's Gemini service to read the product names. Pro plan payments are handled by Razorpay; we receive the payment status and reference, not your card or UPI details.

We do not use your data for advertising, we do not build advertising profiles, and we do not sell your data. We do not send marketing messages by SMS, WhatsApp or email.

Who we share it with

• The shop you order from — your name, mobile, delivery address and order, so it can fulfil it.
• Service providers who process data for us: Amazon Web Services (hosting, database, file storage and email, in the Mumbai region); Google (Firebase push notifications, Sign-In, Maps, and Gemini for handwritten lists); Meta (Facebook Login); Razorpay (Pro plan payments); and PostHog (crash reports, only if you switched them on). Google, Meta and PostHog may process data outside India.
• Authorities, when Indian law requires us to.

How long we keep it

• Account and profile data: until you delete your account.
• Sign-in codes and sign-in sessions: deleted 180 days after they expire.
• Reviews: kept after you delete your account, shown as “Digi-Dukaan user” and no longer linked to you. Delete a review in the app first if you want it gone.
• Orders, invoices and udhaar records: kept after you delete your account, without your account details, because the shop and we may be required by law to keep transaction records. Retention period: [NOT YET PROVIDED: retention period confirmed by counsel].
• Records of what you accepted, and of complaints and requests: kept after you delete your account, as evidence that we acted on them.
• Database backups: overwritten within the backup window our hosting provider is configured for.

Your choices and rights

In the app these are under Privacy & Legal — on your Profile, or under More if you run a shop.

• See and correct your profile, addresses and shop details in the app at any time.
• Get a copy of your data: Privacy & Legal → Download my data.
• Privacy choices: switch crash reports and usage statistics on or off at any time. Switching off stops the sending from then on.
• Notifications: switch categories off under Notification preferences, or in your phone settings. Notices about an order, a payment or your own content cannot be switched off.
• Location, camera, photos: the app asks first; you can refuse or turn access off in your phone settings. Features that need that access will ask again.
• Delete your account: Privacy & Legal → Delete account. Buyer accounts are deleted immediately. Shop-owner accounts are closed by our team after open orders and plans are settled. If you no longer have the app, write to the Grievance Officer from your registered email.
• Ask or complain: raise a complaint in the app or write to the Grievance Officer. You get a reference number and a copy of what you sent. If you are not satisfied with our answer you may approach the authority the law provides.

Security

The app connects to us over HTTPS, and our database and file storage are encrypted at rest. Identity numbers are stored encrypted, staff access to identity documents is limited by role and logged, and passwords are stored only as hashes. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

Children

Digi Dukaan is for people aged 18 or older, and we ask you to confirm that before you use it. We do not knowingly collect data from children. If you believe a child has an account, tell the Grievance Officer and we will close it.

Changes

When this notice changes in a way that matters, the app will show you the new version and ask you to accept it before you continue.