This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the Aaradhy Milk mobile application (the “App”) on Android and iOS, and related services (ordering milk, subscriptions, wallet, delivery, and admin tools).
By creating an account or using the App, you agree to this Policy.
Support email: support@aaradhymilk.com
Support phone: +91-XXXXXXXXXX
1. Who this Policy covers
- Customers — order / subscribe to milk products
- Delivery partners (suppliers) — deliver orders
- Admins — manage users, products, wallets, societies
2. Information we collect
2.1 Information you provide
| Data | Purpose |
|---|---|
| Full name | Account identity, delivery labels |
| Email address | Login, password reset, account notices |
| Phone number | Contact / delivery coordination |
| Password | Authentication (stored hashed on our servers) |
| Society, building, flat number | Delivery address |
| Order / subscription choices | Fulfil orders and standing plans |
| Optional notes (e.g. wallet recharge notes entered by admin) | Business records |
2.2 Information collected automatically
| Data | Purpose |
|---|---|
| Device push token (FCM) | Delivery / order / account notifications |
| App authentication token | Keep you signed in securely |
| Local cart contents (on device) | Remember cart between sessions |
| Basic technical logs (server) | Security, debugging, abuse prevention |
| Approximate network info (IP) via our hosting/API | Security and service operation |
2.3 Information we do not collect
The App does not currently collect:
- Precise GPS / continuous location
- Camera, microphone, contacts, photo library
- Advertising IDs for ads
- Payment card / UPI details inside the App (wallet top-ups are handled as cash/admin recharge in the current product)
- Biometric templates (Face ID / fingerprint stay on device if the OS uses them for unlock)
3. How we use your information
We use personal data to:
- Create and manage accounts (customer / delivery partner / admin)
- Process orders, subscriptions, skips, pauses, and cancellations
- Schedule and complete deliveries to your society / building / flat
- Manage wallet balance, recharges, refunds, and order deductions
- Send push notifications (e.g. order delivered, delivery failed, building delivery complete)
- Send password-reset and account-related emails
- Prevent fraud, secure accounts, and improve reliability
- Comply with legal obligations
We do not sell your personal data.
4. Legal bases (where applicable)
Depending on your region, we process data based on:
- Contract — to provide the milk ordering / delivery service
- Consent — e.g. push notification permission
- Legitimate interests — security, service improvement, operations
- Legal obligation — where required by law
5. Sharing of information
We may share data only as needed with:
| Recipient | Why |
|---|---|
| Our hosting / backend providers | Run the API and database |
| Google Firebase Cloud Messaging | Deliver push notifications |
| Email delivery provider (if used for reset emails) | Password reset / transactional mail |
| Delivery partners assigned to your society | Complete delivery (address / order details only as needed) |
| Admins / authorised staff | Support, wallet, approvals, operations |
| Authorities | If required by law or to protect rights / safety |
We do not share data with advertisers for third-party advertising.
6. Push notifications
With your permission, we send push notifications such as:
- Order delivered / delivery failed
- Admin alerts when a society–building delivery route is complete
- Other service alerts related to your account
You can disable notifications in device Settings. Some account/security messages may still be sent by email.
7. Data storage and security
- Account and order data are stored on our servers (Laravel backend / database).
- Passwords are stored using industry-standard hashing (not plain text).
- Login tokens are stored in secure on-device storage.
- Cart data may be stored locally on your device.
- We use reasonable technical and organisational measures to protect data.
- No method of transmission or storage is 100% secure.
Retention:
- Account data: while the account is active + up to 24 months after closure (or longer if required for disputes/law)
- Orders / wallet ledger: typically 3–7 years for accounting / consumer records
- FCM tokens: until logout, token refresh, or account deletion
- Server logs: typically 30–90 days
8. Your rights
Subject to applicable law (including India’s IT / DPDP rules where applicable), you may request to:
- Access your personal data
- Correct inaccurate data
- Delete your account / data (subject to legal retention)
- Withdraw push-notification consent
- Lodge a complaint with a supervisory authority
To exercise rights: email privacy@aaradhymilk.com from your registered email. We may verify your identity before acting.
9. Children’s privacy
The App is intended for adults placing household / business milk orders. We do not knowingly collect data from children under 13 (or the age required in your region). If you believe a child has provided data, contact us to delete it.
10. International transfers
If our hosting or Firebase processes data outside India, we take reasonable steps to ensure appropriate safeguards consistent with applicable law.
11. Third-party services
| Service | Role | Privacy info |
|---|---|---|
| Google Firebase (FCM) | Push notifications | Google Privacy Policy |
| Our API / hosting provider | App backend | Available on request |
12. Changes to this Policy
We may update this Policy. The “Last updated” date will change, and material changes may be notified in-app or by email. Continued use after changes means you accept the updated Policy.
13. Contact
- Privacy / data requests: privacy@aaradhymilk.com
- Customer support: support@aaradhymilk.com / +91-XXXXXXXXXX
- Postal: Aaradhy Milk, India