BUVVA

# Privacy Policy for buvva

**Effective Date:** August 29, 2026  

**Last Updated:** August 29, 2026  

**Application Name:** buvva (com.krtech.buvva)  

**Developer / Publisher:** KR Tech 

**Contact Email:**help@krtech.online**

---

## 1. Introduction

Welcome to **buvva** (the "App"), a food ordering, pre-ordering, and canteen queue management platform developed by **KR Tech**. We value your privacy and are committed to protecting your personal data in accordance with applicable data protection laws and Google Play Developer Program Policies.

This Privacy Policy explains what information we collect when you use our mobile application and related backend services, how we use and protect that information, and your rights regarding your personal data.

By downloading, installing, accessing, or using buvva, you agree to the collection and use of information in accordance with this Privacy Policy.

---

## 2. Information We Collect

We collect information to provide, improve, and secure our services. The types of information we collect include:

### A. Personal Information You Provide Directly

* **Account & Registration Data:** When you create an account, we may collect your **Name**, **Email address**, **Phone number**, and chosen password (stored as a secure salted hash).

* **Campus / Institution Data:** Selected **College/University** and preferred **Canteen/Food Outlet** to display relevant menus and route orders.

* **Order & Transaction Data:**"Food orders are paid via third-party payment gateways or counter cash. The app does not provide banking, lending, wallet, or financial services, and never accesses or stores banking credentials." 

* **Support & Communications:** Messages and feedback you submit through our Help Center or Support Chat.

### B. Automatically Collected Data & Technical Information

* **Device & Usage Information:** Device model, operating system version, app version, unique device identifiers, and network connection type.

* **Log Data:** Server logs including IP address, access timestamps, and API call logs to detect security threats and prevent fraudulent orders.

* **Crash Reports & Diagnostics:** Anonymous crash logs and diagnostic info collected via **Firebase Crashlytics** to identify bugs and improve app stability.

---

## 3. Device Permissions and Why We Need Them

buvva requests only the permissions necessary to deliver essential app features:

| Permission | Purpose |

| :--- | :--- |

| **`INTERNET` & `ACCESS_NETWORK_STATE`** | Required to communicate with our secure backend API, fetch menus, place orders, and verify real-time status. |

| **`POST_NOTIFICATIONS`** | Used to deliver critical real-time alerts regarding order status updates (e.g., *Order Accepted*, *Preparing*, *Ready for Pickup*), security codes, and important announcements. |

| **`FOREGROUND_SERVICE` & `FOREGROUND_SERVICE_DATA_SYNC`** | Used by our background tracking service to maintain live order updates and queue synchronization while your order is active. |

> **Note:** buvva **does NOT** access your precise GPS location in the background, camera, microphone, or contacts without your explicit consent.

---

## 4. How We Use Your Information

We process your information for the following legitimate purposes:

1. **Order Processing & Fulfillment:** To send your order details to the selected canteen kitchen and manage your pickup queue.

2. **Account Management & Authentication:** To authenticate your identity, prevent unauthorized access, and manage your account credentials.

3. **Live Status Tracking & Notifications:** To keep you informed on food preparation and pickup availability in real time.

4. **Loyalty & Rewards Management:** To calculate, track, and credit reward points earned from your orders.

5. **App Stability & Performance:** To monitor application health, analyze crash reports, and troubleshoot errors.

6. **Security & Fraud Prevention:** To protect against abuse, malicious activity, and unauthorized API requests.

7. **Customer Support:** To resolve queries, handle cancellation requests, or provide technical assistance.

---

## 5. Sharing and Disclosure of Information

We do **not** sell, rent, or trade your personal data to third parties for marketing purposes. We share your information only under the following circumstances:

1. **Canteen Partners:** Order details (ordered items, pickup number, notes, customer name) are shared with the participating canteen staff strictly to prepare and fulfill your food order.

2. **Third-Party Service Providers:** We work with trusted third-party services that assist in operating our platform under strict confidentiality agreements:

   * **Firebase Crashlytics (Google LLC):** For crash reporting and app performance analytics. ([Google Privacy Policy](https://policies.google.com/privacy))

   * **Cloud Infrastructure & Hosting Providers:** For secure cloud hosting, API endpoints, and database management.

3. **Legal Compliance & Safety:** We may disclose your information if required by law, regulation, subpoena, or legal process, or to protect the safety, rights, or property of KR Tech, our users, or the public.

---

## 6. Data Security and Storage

We implement industry-standard administrative, technical, and physical security measures to safeguard your personal data:

* **Encryption in Transit:** All communication between the buvva app and our backend servers is encrypted using Transport Layer Security (**TLS/HTTPS**).

* **Encryption at Rest:** Sensitive authentication tokens and user preferences are stored locally on your device using Android Keystore-backed **EncryptedSharedPreferences** (AES-256-GCM scheme).

* **Restricted Access:** Access to personal user data is strictly limited to authorized personnel who require it to perform their operational roles.

---

## 7. Data Retention and Account Deletion

### Retention Policy

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide our services, resolve disputes, and comply with legal obligations.

### User Rights & Data Deletion

In accordance with Google Play Developer Policy, you have the right to request access to, correction of, or permanent deletion of your personal data and account at any time.

* **How to Request Account Deletion:**

  1. Open the **buvva** app > Go to **Profile / Settings** > Select **Delete Account / Data Deletion Request**, or

  2. Send an email to **help@krtech.online** (or your designated support email) with the subject line *"Account & Data Deletion Request"* along with your registered email/phone number.

* **Deletion Processing:** Upon receiving your verified request, we will permanently delete or anonymize your personal account data, order history, and profile records from our active databases within **30 days**, retaining only minimal records required for legal, tax, or fraud-prevention compliance.

---

## 8. Children's Privacy (COPPA / GDPR-K Compliance)

Our service is designed for college students, university staff, and general consumers capable of entering into binding contracts. buvva is **not directed to children under the age of 13** (or under 16 in certain jurisdictions), and we do not knowingly collect personal data from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at **help@krtech.online**, and we will promptly delete such information.

---

## 9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, app features, or legal requirements. We will notify you of any material changes by updating the "Effective Date" at the top of this policy or via an in-app notice. We encourage you to review this Privacy Policy periodically.

---

## 10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Company / Developer Name:** KR Tech

App Name:** buvva (`com.krtech.buvva`)

Email:help@krtech.online

Address:(plot no:-151, Hyderabad, Telangana,500070)