Privacy Policy
This privacy policy applies to the Grocery Ghar app for Android and iOS mobile devices, together with any related services operated by Grocery Ghar (collectively, the "Application"). Grocery Ghar is hereby referred to as the "Service Provider".
Last updated: 5 November 2030
Information You Provide
When you create an account, use the Application or place an order, the Service Provider collects:
- Your name, phone number and email address
- Your sign-in details if you use Sign in with Apple or Google Sign-In (your name, email address and an account identifier provided by Apple or Google)
- Delivery addresses you save, including their map coordinates
- Photos you take with your camera or choose from your photo library, such as a photo of your grocery list, which are uploaded so your order can be prepared
- Your order history, cart contents, and messages or requests related to your orders
Payments are processed by our payment partners, PayFast and Faysal Bank. You enter your card details on their secure payment page. The Service Provider does not receive or store your full card details.
Information Collected Automatically
When you use the Application, it automatically collects:
- Your device's Internet Protocol (IP) address
- Device information, such as device model, operating system and version, and app version
- On Android, your device's advertising ID (see "Cookies and Tracking Technologies" below)
- The pages of the Application that you visit, the time and date of your visit, and the time spent on those pages and in the Application
- App usage events, such as products viewed or searched for, items added to your cart, and purchases
- A push notification token, used to send you order updates and other notifications
- Your device's location (see "Location Information" below)
Cookies and Tracking Technologies
The Application uses cookies to keep you signed in securely. The Application also uses analytics SDKs (Google Firebase and Meta App Events) to understand how the Application is used, for example which screens are visited and which products are searched for, viewed or purchased. This information is used to improve the Application.
On Android, the Application and the Meta SDK collect your device's advertising ID. It is used for analytics and to measure where app installs and purchases come from. The Application does not show ads. You can reset or delete your advertising ID at any time in your device settings (Settings > Google > Ads, or Settings > Privacy > Ads, depending on your device).
On iOS, the Application does not collect your device's advertising identifier (IDFA) and does not track you across apps or websites owned by other companies.
Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Location Information
With your permission, the Application collects your device's precise and approximate location only while you are using it. The Application does not collect your location in the background.
- Delivery and Store Services: The Service Provider uses your location to show nearby stores, find your address on the map, and deliver your order to the right place.
- Analytics and Improvements: Aggregated location data may help the Service Provider understand usage patterns and improve performance.
- Third-Party Services: Location data is shared with Google Maps Platform to show maps and convert locations into addresses, and with the delivery rider assigned to your order.
You can turn off location access at any time in your device settings. You can still enter your delivery address by hand.
Device Permissions
The Application may ask for the following permissions. You can allow or deny each one, and change your choice at any time in your device settings:
- Location: to show nearby stores and set your delivery address
- Camera and Photos: to take or choose a photo of your grocery list
- Notifications: to send you order updates and other notifications
If you deny a permission, the related feature will not work, but you can still use the rest of the Application.
How Your Information Is Used
The Service Provider uses your information to:
- Create and manage your account
- Process, prepare and deliver your orders, and process payments
- Send order updates, important information and required notices
- Provide customer support
- Prevent fraud and keep the Application secure
- Analyse usage and improve the Application
- Send marketing communications, where permitted by law. You can opt out at any time.
Third Party Access
The Service Provider shares your information only as needed to operate the Application, with:
- Google Firebase: analytics and push notifications
- Meta (Facebook App Events): app usage analytics and measuring where installs and purchases come from. On Android this includes your advertising ID.
- Google Maps Platform: maps, location search and address lookup
- Apple and Google: when you choose to sign in with them
- PayFast and Faysal Bank: payment processing
- Stores and delivery riders: they receive your name, phone number, delivery address and order details so they can fulfil your order
The Service Provider does not sell your personal information.
Please note that these third-party services have their own privacy policies about handling data. Below are links to the privacy policies of the third-party service providers used by the Application:
- Google Analytics for Firebase and Firebase Cloud Messaging: https://firebase.google.com/support/privacy
- Google Maps Platform and Google Sign-In: https://policies.google.com/privacy
- Meta: https://www.facebook.com/privacy/policy
- Apple: https://www.apple.com/legal/privacy/
- PayFast: [add PayFast privacy policy link]
The Service Provider may also disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted service providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or other legally recognized transfer mechanisms
- Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at groceryghar.official@gmail.com.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at groceryghar.official@gmail.com.
Account Deletion
You can delete your account at any time from within the Application: open Profile, then tap Delete Account.
If you no longer have the Application installed, you can request deletion of your account and data at [account deletion page URL], or by emailing groceryghar.official@gmail.com from the email address or phone number linked to your account.
When your account is deleted, your profile, saved addresses, sign-in details and push notification tokens are deleted within 30 days. Order and payment records may be kept for as long as tax, accounting or other laws require, and are then deleted.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling stops the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties. To delete that information, follow the steps under "Account Deletion".
You can also turn off location access, camera and photo access, and notifications at any time in your device settings. On Android, you can reset or delete your advertising ID in your device settings.
Data Retention Policy
The Service Provider retains personal data based on its necessity for the stated purposes:
- User Provided Data: Retained for as long as your account is active plus 12 months thereafter, unless you delete your account sooner or longer retention is required by law
- Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
- Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
- Data required for legal compliance: Retained as long as required by applicable law
Please note that some User Provided Data is required for the Application to function properly.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete it from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider at groceryghar.official@gmail.com so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic and procedural safeguards to protect the information it processes and maintains, including encrypted (HTTPS) connections between the Application and its servers.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at groceryghar.official@gmail.com.
This privacy policy is effective as of 5 November 2030.
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider:
Grocery Ghar
Kohinor Legacy Tower Faisalabad
Email: groceryghar.official@gmail.com