Privacy policy

We collect only what an order requires:

• Account details — your email address, and optionally your first name, last name and phone number.
• A username, used by the shop to identify your account.
• Delivery addresses — the name, phone number, street address, city, state and pincode you enter.
• Your basket — the products, chosen pack sizes and quantities you add.
• Orders — the items, quantities, prices, delivery address, chosen delivery slot, order status and any adjustments.
• Messages you send us through the support page.

We do not collect payment card details, because this application does not take payment. There is no advertising or analytics tracker on the site.

Your account, addresses and orders are stored in our database (PostgreSQL, hosted by Supabase in the Asia-Pacific region). Passwords are handled by our authentication provider and are never visible to us or stored by this application.

Our database enforces row-level security: every table containing personal data is restricted by policy to the authenticated customer who owns the row. Another customer cannot read your addresses, basket, orders or messages even if they guess an identifier — the database refuses the query regardless of what the application asks for.

• To pick, pack and deliver your order, and to contact you about it.
• To show you your own order history and let you reorder.
• To answer messages you send us.
• To keep accounting records of orders placed.

Only you and the shop's own staff can see your personal data. The shop sees your order, the delivery address and your contact number so it can deliver. We do not sell or rent your information, and we do not share it with advertisers.

Our infrastructure providers (database and hosting) process data on our behalf under their own terms.

If you browse without signing in, your basket and your recent searches are kept in your browser's local storage so they survive a refresh. Nothing from a guest basket is sent to our servers. When you sign in, your basket is merged into your account so it follows you between devices.

If you install the app, a service worker caches pages and images on your device so the app opens faster and shows something useful when you are offline. Clearing your browser data removes all of this.

• Erase your saved addresses and basket yourself, any time, from the account page.
• Change your name and phone number from the account page.
• Ask us to delete your account entirely — message the shop and we will remove it within 7 days.
• Ask what we hold about you, and ask us to correct it.

Past order records are kept for accounting and to resolve disputes, even after an account is deleted. They are reduced to what is required for that purpose.

• All traffic is encrypted in transit over HTTPS.
• Database access is restricted per customer by row-level security policies.
• The customer app never holds an administrative key, so it cannot bypass those policies even if it is compromised.
• Administrative access is granted per person on the server side and is not available from this application.

This service is intended for adults placing grocery orders. We do not knowingly create accounts for children.

If this policy changes in a way that affects you, the updated version will replace this page with a new date at the top. Continuing to use the service after that means you accept the change.

For any privacy question or request, use the contact page. Please include the email address on your account so we can find it.