Privacy Policy

1. About QuickKirana

QuickKirana operates a grocery storefront in Boisar, Palghar, Maharashtra. When you select a delivery location, we identify a nearby participating branch, show that branch’s catalogue, and let you place an order for delivery. Catalogue, prices, fees, and delivery times depend on the selected branch and whether your pin is serviceable.

For the purposes of this Policy, “we”, “us”, and “QuickKirana” mean the operator of the Service. “You” means the customer using the website or Android app.

2. Personal information we collect

We collect personal information that you provide, that your device shares with your permission, and that is generated when you use the Service.

2.1 Phone numbers (WhatsApp OTP authentication)

You sign in with an Indian mobile number. We send a six-digit one-time password (OTP) over WhatsApp to verify that number. First-time customers are asked for a display name. You may add or update an email address on your profile. Your verified mobile number is your login identity and is used only for authentication, order updates, and account support.

2.2 Delivery addresses

When you save an address we collect recipient name, phone number, house and street details, optional apartment or floor, landmark, PIN code, city, state, country, address type (Home, Work, or Other), whether it is your default address, and map coordinates (latitude and longitude). Map search may also store a place identifier and formatted address from Google.

2.3 Location data

With your permission, the website (browser geolocation) or Android app (device location permission) reads your current position so we can determine a serviceable store catalogue and help you set a delivery pin. Location is not required to use the Service: you may refuse GPS and search or place a pin on the map instead. If you are signed in with a saved default delivery address inside our service area, we may use that address when live GPS is unavailable or outside our delivery radius.

2.4 Cart, orders, and promotions

We process items in your cart, quantities, applied promo codes, the delivery address linked to checkout, payment method (online or cash on delivery), payment status, and order history needed to fulfil, track, and invoice the order.

2.5 Payments

For online payments we create a payment session with Cashfree and retain confirmation data required to complete fulfilment (including payment identifiers returned by the gateway). QuickKirana does not store your full card number, CVV, UPI PIN, or net-banking passwords. For cash on delivery, payment status is updated against the order when cash is collected at delivery.

2.6 Guest shopping

You may browse and add items before signing in. We assign a guest cart identifier (cookie and request header) so the cart persists across page loads and can be associated with your account after you verify your mobile number.

2.7 Technical and session data

When you use the Service, our systems receive standard technical data such as browser or application type, and the branch you selected. Sign-in tokens and a cached profile are stored on your device so that you remain logged in until the session expires or you log out. If you are signed in, order-status updates may be delivered over a realtime connection authenticated with your session token.

3. How we use personal information

We use personal information to operate the Service and to perform the contract you enter when you create an account or place an order, including to:

• Verify your mobile number via WhatsApp OTP and maintain your session.
• Determine serviceability, assign a branch, and display that branch’s catalogue, prices, and offers.
• Process checkout, including cash on delivery and online payment (UPI, cards, and net banking) through Cashfree.
• Communicate order status, including in-app updates on My Orders.
• Apply promo codes, issue tax invoices from order records, and allow retry of an unpaid online payment where the Service offers it.
• Protect the Service, including fraud prevention, OTP and checkout rate-limiting, and diagnosing failures.
• Comply with applicable law, tax, and accounting obligations.

4. Legal basis and consent

We process personal information to provide the Service you request (account, cart, checkout, delivery, and support), with your consent where required (including location permission and WhatsApp OTP), and where processing is necessary to comply with law. You may withdraw location permission at any time in your browser or Android settings. Withdrawing consent or denying location does not affect processing already completed, and you may continue to set a delivery pin on the map.

5. Cookies and on-device storage

We use cookies and on-device storage that are necessary for the Service to function. We do not use advertising pixels or third-party analytics SDKs in this storefront.

• Guest cart cookie (approximately 30 days), cleared when you log out.
• Access and refresh tokens, and a cached user profile, stored locally on your device.
• Selected branch and a record of a declined location prompt, so we do not request GPS on every visit.

6. Sharing of information

We do not sell your personal information. We share it only with parties who need it to provide the Service, or where disclosure is required by law:

• WhatsApp, to deliver the login OTP to your verified mobile number.
• Cashfree, to process online payments. Cashfree may receive name, email, and phone as checkout details, and processes payment credentials under its own terms and privacy policy.
• Google Maps and Places, when you search for or pin a delivery location.
• Hosting and API infrastructure that operates the Service.
• The fulfilling branch and delivery personnel, to the extent needed to pick, pack, and deliver your order.

Those providers process information according to their own policies and applicable law. We may also disclose information if required by a lawful request from a court, regulator, or other authority.

7. Retention

We retain account and profile data for as long as your account remains active. Guest cart identifiers are kept for the cookie lifetime described above, or until you log out. After you delete your account, we permanently delete or anonymise personal account data associated with your profile (including profile details, saved addresses, and active sessions), except anonymised records we must keep for legal, tax, accounting, or fraud-prevention purposes (including completed order invoices). Device-stored tokens and the guest cart cookie on that device are cleared when you log out or after a successful account deletion from the app.

8. Security

We transmit information to our servers over HTTPS. Online card and UPI credentials are handled by Cashfree, not stored on QuickKirana servers. Session tokens are stored on your device. You are responsible for keeping your device and OTP communications secure. No method of transmission or storage is completely secure; we take reasonable steps appropriate to the nature of the Service.

9. Your rights and choices

Subject to applicable law, you may access and update certain information, and request deletion of your account, as follows:

• Update name and email from My Account → Profile. Your verified mobile number cannot be changed from the profile form because it is used to sign in.
• Add, correct, or delete saved addresses, or change your default address, from My Account → Addresses.
• View order history from My Account → Orders.
• Log out to clear the local session, guest cart cookie, and stored branch on that device.
• Deny or revoke location permission in the browser or Android settings. Map search remains available without GPS.
• Delete your account as described in Section 10, or via Account & Data Deletion.

10. Account deletion

You may request permanent deletion of your QuickKirana account from My Account → Delete account inside the app, or follow the steps on our public Account & Data Deletion page. In-app deletion requires you to be signed in and confirm by typing DELETE. Deletion cannot be undone. We will delete or anonymise personal account data associated with your profile, except records retained as described in Section 7.

11. Children

The Service is a grocery ordering platform for customers who can enter into a purchase and take delivery. It is not directed at children. Do not create an account or place orders if you are under 18 years of age.

12. Governing law

This Policy is governed by the laws of India. The Service is intended for customers in India.

13. Changes to this Policy

We may update this Policy from time to time. The effective date at the top of this page will be revised when we do. Continued use of the Service after a change constitutes acceptance of the updated Policy. Material changes will be reflected on this page.

14. Contact

QuickKirana, Boisar, Palghar, Maharashtra – 401504. For privacy questions, access or correction requests, or account deletion, email support@quickkirana.in, use My Account, or the support details printed on your order receipt or invoice. This Policy is published at /privacy-policy.