Privacy Policy

1Data We Collect and Why

We collect only the minimum personal information necessary to deliver fresh groceries safely to your doorstep and provide customer support:

• Account & Profile Information: When you register an account, we collect your full name, email address, mobile phone number, and password (securely hashed). If you sign in using Google OAuth, we receive your name, verified email, and profile avatar URL provided by Google Identity Services.
• Delivery Addresses: To fulfil orders, you provide house/flat numbers, apartment/street names, landmarks, city (Koraput), state (Odisha), and pincode (764020). If you pinpoint your location on our map picker, optional GPS coordinates are saved strictly for accurate doorstep dispatch.
• Order & Purchase History: Details of items added to your cart, orders placed, order status, chosen delivery slots (e.g. Morning 9:00 AM – 1:00 PM or Evening 5:00 PM – 9:00 PM), and delivery fulfillment receipts.
• Payment Information: KAPIT supports Cash on Delivery (COD) and doorstep UPI QR scan. We do not collect, process, or store credit card, debit card, or netbanking credentials on our servers.
• Technical Device & Log Data: Standard network access logs, IP addresses, browser types, and Capacitor mobile wrapper runtime state to diagnose connectivity issues and maintain platform stability.

2How We Use Your Data

We process your data strictly for legitimate operational purposes:

• Processing, packing, and dispatching grocery orders to your designated Koraput address.
• Communicating critical order status notifications, OTP confirmations, and driver arrival alerts.
• Providing customer support, resolving missing or damaged item claims, and processing refunds.
• Preventing fraudulent transactions and ensuring database security.
• Complying with statutory accounting, invoicing, and tax requirements in India.

3Third-Party Service Providers

We partner with trusted enterprise service providers strictly under data protection agreements:

We do not share your data with data brokers, telemarketers, or unauthorized third parties.

4Data Retention and Account Deletion

In compliance with Google Play Developer Policies and global privacy regulations, KAPIT provides seamless account and data deletion:

• In-App Deletion: Authenticated users can navigate to Profile → Account Preferences → Delete Account or click the dedicated account deletion option in their profile menu.
• Web Deletion Portal: Any registered customer can submit an account deletion request without logging in at https://kapit.shop/delete-account.
• Scope of Deletion: Upon confirming deletion, we immediately delete your login credentials from authentication servers, purge your customer profile, delete all saved delivery addresses, clear your saved wishlist, and revoke active sessions.
• Legal Transaction Retention: Financial transaction records, tax invoices, and statutory order receipts are anonymized and retained for the minimum period mandated by Indian commercial and tax laws (typically up to 7 years), after which they are permanently shredded.

5Android App Permissions

The KAPIT Android application (shop.kapit.app) requests minimal system permissions:

• android.permission.INTERNET: Required to communicate with our secure ordering servers and load catalog data.
• android.permission.ACCESS_NETWORK_STATE: Required to detect offline connectivity and prevent failed submissions.

We do not request background microphone, camera, contacts, SMS, or telephony permissions.

6Children’s Privacy

KAPIT is intended for general audiences aged 18 and older who can legally enter into commercial purchase agreements. We do not knowingly collect personal information from children under 13 years of age. If we learn that a minor under 13 has provided personal details, we will promptly delete that data.

7Contact Our Privacy Officer

If you have questions, feedback, or wish to exercise your privacy rights under applicable data protection laws, contact us at: