Privacy Policy

1. Introduction

Welcome to Daily Groc. Daily Groc is operated by Daily Groc, Barpeta, Assam, India. We are committed to protecting and respecting your privacy in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"), website at dailygroc.com ("Website"), and related services (collectively, the "Services"). Please read this policy carefully. By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

If you do not agree with any part of this policy, you should discontinue use of our Services immediately.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

• Account Registration: Full name, email address, phone number, and password when you create an account.
• Profile Information: Profile photograph (optional), date of birth, and gender.
• Delivery Address: Your home address, landmark, pincode, city, and state for order fulfillment.
• Payment Information: UPI ID, payment transaction references. We do not store your full bank or card details — these are processed securely by our third-party payment processors.
• Order Details: Items you purchase, order history, preferred delivery time slots, and special instructions.
• Communications: Messages you send to our customer support team via WhatsApp, email, or in-app chat.
• Prescription Data: If you order Pharma & Wellness products that require a prescription, you may upload a prescription image. Prescription images or profile images may be uploaded from your device gallery or captured using your device camera with your permission.
• Referral Information: Referral codes used or shared with friends.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: Pages viewed, features used, time spent on the app, search queries, and interaction logs.
• Location Data: With your explicit permission, we may collect your approximate or precise GPS location to determine service availability, improve delivery accuracy, and provide location-based services. Location information is collected only while using the app unless otherwise enabled by the user. We do not collect background location data without your explicit consent.
• Log Data: IP address, browser type, access times, referring URL, and crash reports.
• Cookies and Similar Technologies: Session cookies, authentication tokens, and local storage data.

2.3 Information from Third Parties

• Social Login: If you sign in using Google, we receive your name, email address, and profile picture from Google.
• Delivery Partners: Our delivery riders may provide delivery confirmation data including delivery photos and timestamps.

2.4 Permissions We Request

Daily Groc requests certain device permissions only when necessary for specific features of the app. These permissions are requested with your consent and are used only for the purposes described below:

• Camera Permission
  • Used to allow users to capture images directly from the app, such as profile photos or prescription images.
  • Camera access is used only when you actively choose to capture an image.
  • Camera access is not used in the background.
• Location Permission
  • Used to determine whether our services are available in your area and to improve delivery accuracy.
  • Location data is collected only with your explicit permission.
  • Location access is used only while using the app unless otherwise specified and enabled by the user.
  • We do not continuously track your location in the background without your consent.
• Photos / Media Access Permission
  • Used to allow users to upload profile photos, prescription images, and other content selected by the user.
  • We only access files that you explicitly select.
  • We do not access, scan, or collect unrelated files stored on your device.
• Notification Permission
  • Used to send order updates, delivery notifications, OTP alerts, and service-related messages.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process and fulfill your grocery orders, manage your account, and provide customer support.
• Personalization: To personalize your shopping experience, recommend products, and display relevant offers.
• Communication: To send you order confirmations, delivery updates, OTP verification codes, and respond to your queries.
• Marketing: With your consent, to send promotional offers, new product announcements, and seasonal discounts via WhatsApp, SMS, email, or push notifications. You can opt out at any time.
• Analytics & Improvement: To analyze usage patterns, improve our app performance, fix bugs, and develop new features.
• Safety & Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
• Rewards Program: To manage your Daily Groc Points, wallet balance, and referral rewards.

4. Data Sharing & Disclosure

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Delivery Partners: Your name, phone number, and delivery address are shared with our delivery riders solely for the purpose of delivering your order.
• Payment Processors: Transaction data is shared with secure, PCI-compliant payment gateways (e.g., Razorpay, PhonePe) to process your payments.
• Service Providers: We may share data with trusted third-party vendors who assist us with hosting, analytics, customer support, and WhatsApp message delivery (e.g., cloud hosting providers).
• Legal Requirements: We may disclose your information if required by law, court order, or government authority under applicable Indian law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the business transaction. You will be notified of any such change.

5. Data Security

We implement industry-standard security measures to protect your personal data:

• Encryption: All data transmitted between your device and our servers uses SSL/TLS encryption (HTTPS).
• Password Hashing: Your passwords are stored using bcrypt one-way hashing — we never store plain-text passwords.
• Access Control: Only authorized personnel have access to personal data, on a need-to-know basis.
• Secure Hosting: Our servers are hosted on DigitalOcean with industry-grade firewall, DDoS protection, and regular backups.
• Regular Audits: We periodically review our security practices and update them as necessary.

While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Keep you signed in to your account (session cookies).
• Remember your preferences (e.g., dark mode, delivery address).
• Analyze traffic and usage patterns for performance improvement.
• Detect and prevent fraudulent activity.

You can manage cookie preferences through your browser settings. Disabling cookies may limit some features of our Services.

We do not use third-party advertising tracking cookies.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Data is retained as long as your account is active.
• Order History: Order records are retained for a minimum of 3 years for tax and legal compliance purposes.
• Deleted Accounts: Upon account deletion, your personal data is permanently erased within 14 days, except where retention is required by law.
• Analytics Data: Anonymized and aggregated data may be retained indefinitely for statistical purposes.

8. Your Rights & Choices

Under Indian data protection laws, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You can update or correct your profile information at any time from your Profile page.
• Right to Deletion: You can request permanent deletion of your account and all associated data (see Section 9 below).
• Right to Withdraw Consent: You may withdraw your consent for marketing communications at any time by adjusting your notification preferences or contacting us.
• Right to Data Portability: You may request your data in a machine-readable format.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at privacy@dailygroc.com.

9. Account & Data Deletion

You have the right to permanently delete your Daily Groc account and all associated personal data. Here's how:

• In-App: Go to Profile → Settings → Delete Account. Follow the on-screen confirmation steps. Your account and data will be permanently deleted within 14 days.
• Via Email: Send a deletion request from your registered email to privacy@dailygroc.com with the subject line "Delete My Account." We will verify your identity and process the deletion within 14 days.
• Via WhatsApp: Contact us at +91 93953 46870 with your registered phone number to request deletion.

What gets deleted: Your profile information, delivery addresses, order history, wallet balance, referral data, saved preferences, and all associated personal data.

What we may retain: Anonymized transaction records required for legal, tax, or audit purposes as mandated by Indian law. These records cannot be used to identify you.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided us with personal data, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@dailygroc.com.

11. Third-Party Services

Our app may contain links to or integrations with third-party websites and services. These include:

• Google Sign-In: For social authentication. Governed by Google's Privacy Policy.
• WhatsApp: For customer support and OTP verification. Governed by WhatsApp's Privacy Policy.
• Payment Gateways: For processing transactions. Governed by the respective gateway's privacy policies.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies independently.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will notify you via in-app notification or email. Continued use of the Services after any modifications constitutes your acceptance of the updated policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the details of the Grievance Officer are as follows:

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: