Privacy Policy

Last Updated: 16 October 2026

At GROVIA ("GROVIA", "we", "our", or "us"), your privacy is important to us. This Privacy Policy explains what personal information we collect when you use the GROVIA website, the GROVIA customer app, the GROVIA Partner (delivery) app and the GROVIA Admin app (together, the "Services"), how we use it, who we share it with, how long we keep it, and the choices you have. By using our Services, you agree to this Privacy Policy and our Terms of Use.

Applicability & Scope

This Privacy Policy applies to everyone who uses our Services: customers who order groceries, delivery partners who deliver them, and store staff who manage orders. It covers information you give us directly, information collected automatically from your device, and information we need to deliver your orders in our service areas in and around Lalitpur.

Information We Collect

• Account information: your name, mobile number and, if you add them, your email address and date of birth. We verify your mobile number with a one-time password (OTP) sent by SMS.
• Delivery addresses: the addresses you save or enter at checkout, including landmark, pincode and the map location (latitude and longitude) of the delivery point.
• Home and address photos (optional): if you choose to, you can attach a photo of your house or building entrance to an address or an order so our delivery partner can find you. Adding a photo is never required to place an order.
• Order information: the products you buy, quantities, prices, coupons used, the delivery slot you choose, special instructions, order status history, the delivery OTP and invoices.
• Payment information: the payment method (online or Cash on Delivery), payment status, amount and the payment reference issued by our payment partner. Online payments (UPI, cards, net banking, wallets) are processed by Razorpay. GROVIA never sees or stores your card number, CVV, UPI PIN or bank login details.
• Location information:
  • Customers: with your permission, your device's location is used when you tap "Use current location" to set a delivery point and check that we deliver there. We do not track your location in the background.
  • Delivery partners: with your permission, the Partner app uses your device's location while the app is open to show your assigned deliveries on a map and work out the best order to deliver them in. The route is calculated using your location and the delivery addresses; we do not track partners in the background.
• Proof-of-delivery photos: delivery partners may take a photo when handing over an order, which is stored with that order.
• Notifications data: if you allow notifications, we store a device token from Google Firebase Cloud Messaging so we can send order updates to your phone. We also keep a list of the notifications sent to your account inside the app.
• Device and usage data: device type, operating system, app version, IP address, crash information, and cookies or similar technologies on our website.

App Permissions

Our apps ask for the following permissions only when a feature needs them. You can refuse or withdraw any of them in your phone's settings; the related feature will then not work, but the rest of the app will.

• Location - to set your delivery point (customers) or show deliveries on a map and plan the route (delivery partners).
• Camera and photos - to attach an optional home photo (customers) or take a proof-of-delivery photo (delivery partners).
• Notifications - to tell you about order confirmations, deliveries, assignments and cancellations.

How We Use Your Information

• To create and secure your account and verify your mobile number.
• To process, pack, deliver and track your orders, and to show the delivery partner where and when to deliver.
• To process payments and refunds, and to prevent fraud.
• To send order updates by in-app notification, push notification or SMS.
• To provide customer support and resolve complaints.
• To keep records required by tax and accounting laws.
• To improve our Services and fix problems.
• To send offers and service updates where you have agreed to receive them. You can opt out at any time.

Sharing of Information

We do not sell or rent your personal information. We share only what is needed, with:

• Delivery partners - your name, phone number, delivery address, map location, optional home photo, delivery slot, items and the amount to collect (for Cash on Delivery), so they can deliver your order.
• Razorpay - to process online payments.
• SMS provider - your mobile number, to send OTP and order SMS.
• Google Firebase Cloud Messaging - your device token, to deliver push notifications.
• Map providers - map locations are shown using OpenStreetMap map tiles and routes may be calculated using the OSRM routing service, and partners can open directions in Google Maps. Only coordinates (not your name or phone number) are sent to these services.
• Hosting and technology providers that run our servers.
• Government or legal authorities when required by applicable law.

Data Retention

We keep your account information while your account is active. Order, invoice and payment records are kept for as long as Indian tax and accounting laws require (generally up to 8 years). Home photos and proof-of-delivery photos are kept with the order they belong to. Notification device tokens are deleted when you log out or uninstall the app. When you delete your account, we delete or anonymise your personal information except where we must keep it by law.

Data Security

We use encrypted connections (HTTPS), access controls and other reasonable technical and organisational measures to protect your information from unauthorised access, misuse, loss or disclosure. No online service can be completely secure, but we work to protect your data and will notify you as required by law if a breach affects you.

Your Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:

• Access and update your personal information from the Profile section of the app.
• Correct inaccurate details.
• Delete saved addresses and photos.
• Withdraw consent for location, camera or notification access in your phone's settings.
• Request deletion of your GROVIA account by contacting us (see below), subject to legal and operational requirements.
• Opt out of promotional messages at any time.

Children's Privacy

Our Services are intended for users aged 18 or older, or for use under the supervision of a parent or guardian. We do not knowingly collect personal information from children.

Third-Party Services

Our Services use third-party services such as Razorpay, Google Firebase, OpenStreetMap and Google Maps, which have their own privacy policies. GROVIA is not responsible for the privacy practices of those services, and we encourage you to read their policies.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our Services, technology or legal requirements. Updates will be published on this page with a new "Last Updated" date. Significant changes will also be announced in the app.

Contact Us

For questions about this Privacy Policy, to exercise your rights, or to request account deletion, please contact us:

GROVIA
Lalitpur, Uttar Pradesh, India
Website: https://letsgrovia.com