Last updated: June 2025
Welcome to Cartoo ("we", "our", "us"). We are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.
1. Information We Collect
1.1 Information You Provide
- Phone number — used for account creation and OTP verification
- Name and email — provided during profile setup (email is optional)
- Delivery address — to complete your orders
- Payment information — processed securely via our payment partners; we do not store card details
1.2 Information Collected Automatically
- Device information — device model, OS version, app version
- Usage data — pages viewed, features used, time spent in app
- Location data — only when you grant permission, used to show nearby shops
- FCM token — to send order notifications
2. How We Use Your Information
- Process and fulfil your orders
- Send order status notifications and updates
- Improve app performance and user experience
- Prevent fraud and ensure platform security
- Communicate important service updates
- Comply with legal obligations
3. Sharing Your Information
We do not sell your personal data. We may share information with:
- Shop owners — your name, address, and order details to fulfil your order
- Delivery partners — your name, address, and contact number for delivery
- Payment processors — to process transactions securely
- Analytics providers — anonymised usage data to improve our service
- Legal authorities — when required by law
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time via the app (Profile → Delete Account) or by contacting us.
5. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS), secure token-based authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.
6. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
7. Your Rights
- Access — request a copy of your personal data
- Correction — update inaccurate information via app settings
- Deletion — request account and data deletion
- Opt-out — disable notifications via device settings
8. Third-Party Services
Our app uses the following third-party services, each with their own privacy policies:
- Firebase (Google) — authentication and notifications
- Google Maps — location services
- Razorpay / payment gateway — payment processing
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us: