Privacy policy

Who we are

Odim is a grocery delivery service run as a sole proprietorship registered at 58/173B, Adarsh Nagar, Arjun Nagar, Agra, Uttar Pradesh - 282001. This policy explains what data we collect when you use the Odim app and website, why we collect it, and the choices you have.

What we collect

• Your phone number, verified by OTP through Google Firebase Authentication — this is how you sign in.
• Your name, if you choose to add it.
• Your delivery addresses, including the map location you pin so the rider can find you.
• Your orders — what you bought, when, and for how much.
• A device push token, so we can send order-status notifications.
• Emails you send and calls you make to support.
• A rider's location while your order is on its way — one current position for the rider carrying it, so we can show you where it is on the map.
• If you ask for a refund, the UPI ID you share with support, so we can pay it.
• How you use the app: the categories and products you open, what you search for, what you add to or remove from your cart, the payment method you pick, whether you place the order, and whether you open our notifications. The app records this with a random identifier for your installation of the app, created on your phone. While you are signed in, it is also linked to your account — and because the identifier stays the same when you sign in, everything the app recorded on that phone since it was last signed out, including before you signed in, becomes linked to you too. Signing out starts a new identifier.
• Your IP address, which our servers see on every request. We keep it for less than two hours, only to limit abuse of the app's activity reporting.

We never see your card or bank details. When you pay online, our payment gateway Cashfree takes the payment and passes us the result — not your card or bank number. When you pay cash on delivery, the rider collects the money at your door. This website sets no cookies and runs no analytics.

Why we collect it

To sign you in, deliver your orders, take payment for them and reconcile the cash our riders collect, help you when something goes wrong, send you order-status notifications, meet legal and tax obligations, and to understand how the app is used so we can improve it. We do not sell your data, and we show no third-party ads.

Who processes it for us

A few service providers process data on our behalf: Google Firebase (sign-in and notifications), Cashfree (online payments), Amazon Web Services in Mumbai (hosting), Cloudflare (product images), Mapbox (maps), and Sentry and Grafana (technical diagnostics — configured so they do not receive personal data).

How long we keep it

If you delete your account, we delete your profile: your name, your phone number, your saved addresses and your device notification registrations. Order records are different. Each order keeps a snapshot of the name, phone number and delivery address — including its map location — it was placed with, and we keep those for 8 years — to complete deliveries already under way, to reconcile payments including cash on delivery, and to meet tax and legal record-keeping rules. After your account is deleted those orders are no longer connected to an account. We also keep a cached road route between the store and each delivery address so we do not ask the map provider for it twice. It is not linked to your account or your name, and it is deleted within about 90 days. Our account deletion page sets all of this out in full.

App activity is deleted after about 180 days. If you delete your account, the activity recorded while you were signed in is deleted at once, and the app starts a new identifier; anything recorded on that phone while signed out is then no longer linked to anyone and ages out on the same schedule.

Rider location

While your order is out for delivery, the rider's phone sends us its current position — the latitude, longitude, how accurate the reading is, and when it was taken. We keep one position per order, overwritten as the rider moves; we do not keep a trail.

It exists for one reason: showing you where your delivery is. Only you — the customer on that order — can see it, and only while the order is out for delivery. Before pickup and after the rider hands it over, there is nothing to show.

It is erased up to about 48 hours after the delivery closes. The rider's app asks for location only while the app is open; it never tracks anyone in the background.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask to see the data we hold about you, correct it, or delete it (deletion is subject to the order-record retention described above). You can withdraw consent at any time by deleting your account from the app — how to delete your account explains what that removes. To raise a request, contact us using the details below. If you are not satisfied with our response, you can escalate to the Data Protection Board of India.

Grievance contact

Grievance officer: Chaitanya Yadav, chaitanya10yadav@gmail.com. You can also write to us at 58/173B, Adarsh Nagar, Arjun Nagar, Agra, Uttar Pradesh - 282001. We acknowledge grievances within 72 hours and aim to resolve them within 15 days.

Children

Odim is meant for people 18 and older.

Changes

If this policy changes, we will update it here and revise the date at the top.