AnnSetu connects people who want to share surplus food or request meals with AnnSetu centers and delivery riders. This policy explains what personal data the App collects, why, who it is shared with, and the choices you have. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India).
1. Data we collect
| Category | Details | Purpose |
|---|---|---|
| Identity & contact | Name, mobile number (verified via SMS OTP), optional email | Account creation, login, communication about your requests |
| Addresses & location | Saved addresses, landmark, pincode; precise device location (GPS) when you choose it for a pickup or delivery; location accuracy | Matching you to a serving center, routing the rider to you, serviceability checks |
| Request details | Meal counts, meal type, notes, recipient name/phone (if you order for someone else), food photos you upload | Fulfilling pickup and meal requests; quality and safety review |
| Payment data | Payment and order identifiers, amount, plan and payment status. Card/UPI credentials are handled by the payment provider and are not stored by AnnSetu | Processing physical-service memberships, AnnSetu Moments and other permitted payments; Apple processes iOS advertising purchases |
| Device & usage | Push notification token, app version, ad banner impressions | Order status notifications, showing and measuring sponsored banners |
| Rewards & impact | Reward points, redemptions, meals shared/received history | Operating the rewards program and your impact summary |
2. How your data is shared
- Riders: when a rider is assigned to your request, they see the details needed to complete it — your name, contact phone, address, location, and meal details. Riders do not see your payment or rewards data.
- Service providers (data processors): Google Firebase and Google Cloud (authentication, database, storage, notifications and hosting), Google Maps/Places (address search, mapping and routing), Razorpay (permitted physical-service payments), Apple (iOS advertising purchases), Cashfree (payout or refund processing where used), and our registered SMS gateway (OTP delivery). Each receives only the data required for its function.
- We do not sell your personal data and we do not share it with advertisers. Sponsored banners in the App are served by us; advertisers receive aggregate impression counts only.
- Legal: we may disclose data where required by law or to protect the safety of users, riders, or the public.
3. Rider location shown to you
While your request is active you can see the assigned rider's live location and ETA. This is provided for delivery transparency and stops when the request completes.
4. Data retention
We keep account data while your account is active. Request, payment and reward records are retained only as needed for operations, dispute handling, audit and legal obligations. OTP challenges are short-lived and automatically expire. A recipient-reference photo is available only for completing the relevant delivery and is deleted after the delivery is completed, except where temporary preservation is required to investigate a reported safety or fraud incident.
5. Security
Data is encrypted in transit. Database access follows a deny-by-default rule set: your data is readable only by your authenticated account, and all sensitive writes (payments, rewards, request status) happen on our servers, not from devices. Photos you upload are private to your account and our operations team.
6. Your rights and choices
- Access and correction: view and edit your profile and addresses in the App, or write to us.
- Account deletion: delete your account from Profile → Delete Account in the App, or email info@annsetu.org. Deletion removes your profile, addresses, and device tokens; records we must retain by law (e.g. payment records) are kept only as required.
- Notifications: disable push notifications in your device settings.
- Location: the App works with a manually entered address if you decline location permission.
- Grievances: contact the AnnSetu Grievance Officer at info@annsetu.org or +91 81530 04888. We will acknowledge and handle the request under applicable law. If unresolved, you may use the remedies available under applicable Indian law.
7. Children
AnnSetu is designed to be family-friendly. A parent or legal guardian must supervise a child's account use and provide any consent required by applicable law. We do not knowingly ask children to create independent accounts or provide personal data without appropriate guardian involvement. A parent or guardian may contact us to review or request deletion of a child's personal data.
8. Changes to this policy
We will post updates on this page and update the effective date. Material changes will be notified in the App.