Privacy Policy
Effective 19 July 2026
This Privacy Policy explains what personal data Kuch Bhi Lo — operated by Shrawan Kumar Upadhyay HUF — collects, why, how it's used and shared, and the rights you have over it under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). It applies to everyone who uses the Platform — customers and Merchants alike.
1. What we collect
| Data | Why |
|---|---|
| Phone number | Account creation and sign-in, via Firebase Authentication (OTP) |
| Name (optional) | Personalising your account and order records |
| Precise location (latitude/longitude) | Matching you to Merchants who can actually deliver to you — this is core to how the Platform works |
| Order history and cart contents | Placing and tracking orders, showing your past orders |
| Prescription images (medicine orders only) | Shared only with the fulfilling Merchant for their regulatory review |
| Order chat messages | Visible to you, the Merchant on that order, and platform support if escalated |
| Push notification token | Sending order-status alerts via Firebase Cloud Messaging |
| For Merchants: shop photo, owner ID proof, address proof, GST details (if applicable), bank account details | KYC verification required to list a shop on the Platform |
We don't collect data we don't need — there's no ad-tracking SDK anywhere on the Platform, and we don't sell personal data to anyone, ever.
2. Who we share it with
- The Merchant fulfilling your order — your name, phone number, delivery location, and order contents, so they can actually fulfil and deliver it. This is unavoidable for a hyperlocal order to work.
- Firebase (Google) — phone number, for authentication; device push token, for order-status notifications. Governed by Google's own privacy terms for Firebase.
- Cashfree Payments — order amount and a payment reference, if you pay online. Cashfree is a licensed payment aggregator and processes your card/UPI details directly; we never see or store your card number or UPI PIN.
- Kuch Bhi Lo support/admin staff — order and chat details, only when a complaint is escalated to us for resolution.
- Law enforcement or regulators — only when legally required, such as under a valid court order or statutory request.
We do not share your data with advertisers or data brokers.
3. Where and how it's stored
Platform data, including KYC and prescription documents, is stored in our own self-hosted database infrastructure — not a third-party data broker. Access to KYC documents and prescription images is restricted to the specific Merchant or customer they belong to, and to admin staff reviewing a specific verification or complaint. All API access requires an authenticated session, and file uploads are validated for type and size before storage.
4. How long we keep it
We retain account and order data for as long as your account is active and for a reasonable period after, to meet accounting, tax, and dispute-resolution obligations. Prescription images are retained only as long as needed for the order and any related dispute window. If you delete your account, we delete or anonymise personal data within 30 days, except where we're required to retain records by law (for example, transaction records for tax purposes).
5. Your rights under the DPDP Act
You have the right to:
- Access a copy of the personal data we hold about you
- Correct or update inaccurate or incomplete data
- Withdraw consent for a specific processing purpose, where consent is the basis for it
- Request erasure of your data, subject to our legal retention obligations above
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Lodge a grievance with our Grievance Officer, and if unresolved, with the Data Protection Board of India
To exercise any of these, email help@kuchbhipucho.com. We'll respond within 15 days.
6. Children
The Platform is intended for users aged 18 and above and is not directed at children.
7. Changes to this policy
If we materially change what we collect or how we use it, we'll update the "Effective" date above and, where the change is significant, notify you directly before it takes effect.
8. Contact
Grievance Officer / Data queries: help@kuchbhipucho.com