Privacy Policy

Rydo Grocery ("we", "our", or "us"), operated by InfoSkills Technology Pvt Ltd (CIN: U72900UP2020PTC130521), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website (grocery.rydoapp.in), and related services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account, place orders, or interact with our Service, we may collect:

• Identity Information: Full name, date of birth, profile photo
• Contact Information: Email address, phone number, delivery address(es)
• Account Credentials: Password (stored in encrypted/hashed form), Google Sign-In OAuth tokens
• Payment Information: UPI ID, saved card details (last 4 digits only — full card data is handled by our payment processors Razorpay and PayU), billing address
• Order Information: Products ordered, order history, delivery preferences, scheduled deliveries
• Communication Data: In-app chat messages, customer support inquiries, feedback and reviews

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: Device model, operating system version, unique device identifiers, app version
• Location Data: Precise GPS location (with your permission) to show nearby stores, estimate delivery times, and enable real-time delivery tracking. Approximate location via IP address
• Usage Analytics: Pages/screens viewed, features used, search queries, time spent on sections, crash reports
• Network Information: IP address, browser type, language preferences, referring URLs
• Cookies & Local Storage: Session tokens, authentication state, user preferences

1.3 Information from Third Parties

• Google Sign-In: Name, email, and profile picture from your Google account when you choose social login
• Payment Processors: Transaction status, payment confirmation, and fraud screening results from Razorpay and PayU
• Analytics Providers: Aggregated usage statistics from Firebase Analytics and Google Analytics

2. How We Use Your Information

We use the information we collect to:

• Provide & Operate the Service: Create and manage your account, process and fulfil orders, enable real-time delivery tracking, and facilitate payments
• Communicate with You: Send order confirmations, delivery updates, OTP verifications via SMS and WhatsApp, promotional offers (with your consent), and customer support responses
• Personalize Your Experience: Show relevant products and stores based on your location, display personalized recommendations based on order history, and remember your preferences
• Improve Our Services: Analyse usage patterns to enhance app performance, identify and fix bugs and technical issues, develop new features based on user behaviour
• Ensure Safety & Security: Detect and prevent fraud, verify user identity, monitor for unauthorized access, and comply with legal obligations
• Process Payments: Facilitate transactions through Razorpay and PayU, manage refunds and cancellations, and maintain payment records for accounting purposes
• FSSAI Compliance: Maintain food safety records, vendor traceability, and transaction logs as required under the Food Safety and Standards Act, 2006

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Delivery Partners: We share your name, delivery address, and phone number with delivery personnel to fulfil your orders
• Store Partners: We share order details with local stores to prepare and pack your groceries
• Payment Processors: Razorpay and PayU process your payment information under their respective privacy policies
• Cloud Service Providers: Firebase (Google) for authentication, database, and cloud functions; Amazon Web Services for infrastructure
• Communication Services: Twilio for SMS/WhatsApp notifications; Firebase Cloud Messaging for push notifications
• Analytics Providers: Google Analytics and Firebase Analytics for aggregated usage data
• Regulatory Authorities: FSSAI officials, Food Safety Officers, and Designated Officers when required during inspections, audits, or investigations as per Food Safety and Standards Act, 2006
• Legal Compliance: When required by law, court order, or government request, or to protect our rights, property, or safety

4. Data Storage & Security

• Your data is stored on secure servers operated by Google Cloud Platform (Firebase) and Amazon Web Services, with data centres primarily located in India
• We implement industry-standard security measures including SSL/TLS encryption for data in transit, encrypted storage for sensitive data at rest, role-based access controls, and regular security audits
• Passwords are stored using industry-standard hashing algorithms (bcrypt/scrypt) and are never stored in plaintext
• Payment card data is never stored on our servers — it is handled entirely by Razorpay and PayU, both of which are PCI-DSS compliant
• All vendor documents, transaction records, and compliance data are stored securely with encryption at rest and in transit
• Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security

5. FSSAI & Food Safety Compliance

As an E-Commerce Food Business Operator (FBO) under the Food Safety and Standards Act, 2006, we maintain the following data practices for food safety compliance:

• Vendor FSSAI Verification: Every vendor/seller on the platform is required to provide a valid FSSAI license or registration number. We verify these credentials before permitting food product listings.
• Traceability Records: We maintain complete traceability records linking every food product sold to the specific vendor, including order details, delivery records, and transaction history.
• Consumer Grievance Redressal: We provide a robust complaint mechanism for food quality and safety concerns. Complaints are investigated and corrective action is taken within prescribed FSSAI timelines.
• Record Retention: All food transaction records, vendor registrations, and customer complaints related to food safety are retained for a minimum of two (2) years as required by FSSAI regulations.
• Data Sharing with FSSAI: We may share information, data, or records with FSSAI or its authorised officers for the purpose of food safety administration and enforcement.

InfoSkills Technology Pvt Ltd operates Rydo Grocery as a technology marketplace platform. The platform does not manufacture, process, store, or handle any food products. All food products are sourced, stored, and delivered by registered third-party vendors.

6. Data Retention

• Account Information: Retained as long as your account is active, plus 90 days after deletion for backup and legal purposes
• Order History: Retained for 3 years for legal, accounting, and dispute resolution purposes
• Food Safety Records: Transaction records, vendor details, and food safety complaints are retained for a minimum of 2 years as mandated by FSSAI regulations
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for business intelligence
• Communication Logs: Customer support conversations are retained for 1 year
• Payment Records: Retained as required by Indian tax and financial regulations (minimum 8 years)

7. Your Rights & Choices

As a user, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal information through your profile settings
• Deletion: Request deletion of your account and associated data by contacting us at info@rydoapp.in
• Opt-Out of Marketing: Unsubscribe from promotional communications at any time via notification settings or email links
• Location Access: Revoke location permissions through your device settings (this may limit store discovery and delivery features)
• Data Portability: Request your data in a structured, machine-readable format

To exercise any of these rights, contact us at info@rydoapp.in or call +91 99105 25949.

8. Cookies & Tracking Technologies

We use the following technologies:

• Essential Cookies: Required for authentication, session management, and security
• Analytics Cookies: Google Analytics and Firebase Analytics to understand usage patterns
• Local Storage: To store user preferences and cart state for a seamless experience

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

9. Children's Privacy

Our Service is not intended for users under the age of 18 years. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at info@rydoapp.in, and we will take steps to delete such information.

10. Third-Party Links & Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Effective Date" at the top. Continued use of the Service after changes constitutes your acceptance of the revised policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: