Privacy Policy

Welcome to Bringr ("we," "us," "our"). We operate the Bringr mobile application and the website www.bringr.in (collectively, the "Platform"), a hyperlocal grocery and daily essentials delivery service serving customers in Jandaha, Bihar and surrounding areas.

This Privacy Policy ("Policy") describes how we collect, use, store, and protect information about you when you use our Platform and delivery services ("Services"). By downloading the Bringr app, creating an account, or placing an order, you agree to the practices described in this Policy.

If you do not agree with this Policy, please do not use our Services.

A. Information You Provide

B. Information Collected Automatically

• To provide and fulfil your orders — processing, packing, and delivering your purchases to your address.
• To verify your identity — OTP-based phone authentication prevents unauthorized account access.
• To send order status updates — push notifications and SMS about order confirmation, dispatch, and delivery.
• To determine delivery availability — your location is checked against our serviceable zones. Location is not stored permanently.
• To improve the app — anonymized analytics help us fix bugs, improve performance, and prioritize new features.
• To prevent fraud and maintain security — detecting unusual order patterns or unauthorized login attempts.
• To respond to customer support requests — resolving issues with orders, payments, or your account.
• To comply with legal obligations — retaining financial records as required by Indian tax and consumer protection laws.

We share your data only in these limited and necessary circumstances:

Delivery Partners

Your name, phone number, and delivery address are shared with our delivery executives so they can complete your order. Delivery staff are bound by confidentiality obligations.

Technology Service Providers

We use trusted third-party services to operate the Platform:

• Supabase — database and authentication (servers in Singapore/Asia-Pacific region)
• Firebase (Google) — push notifications (FCM)
• Payment Gateways — Razorpay, Paytm, UPI (PCI-DSS compliant)
• Google Analytics — anonymized app usage analytics

These processors are contractually required to use your data only for the services they provide to us.

Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of our assets, your data may be transferred. We will notify you via the app or email before any such transfer and give you the option to delete your account.

Your data is stored on secure servers managed by Supabase (hosted on AWS infrastructure in the Asia-Pacific region). We implement the following safeguards:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Row-level security (RLS) on our database ensures each user can only access their own data
• Access controls — only authorized personnel can access production data, and only when necessary
• OTP-based authentication — no passwords are stored; login is phone number + one-time code only
• Regular security reviews of our infrastructure and access policies

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy:

• Account & profile data — retained for as long as your account is active, plus up to 30 days after account deletion to allow for dispute resolution.
• Order history — retained for up to 5 years from the order date, as required by Indian GST and financial record-keeping regulations.
• Location data — not stored permanently. GPS coordinates are used in real-time to check delivery zones and are not written to our database.
• Push notification tokens (FCM) — retained while your account is active and deleted when you delete your account or uninstall the app.
• Analytics data — stored in anonymized/aggregated form only; not linked to your identity.

After the applicable retention period, data is securely deleted or irreversibly anonymized.

• 👁
  Access your data You can view your profile, order history, and saved addresses at any time in the app under Account settings.
• ✏️
  Correct your data Update your name and delivery address directly in the Account section of the app.
• 🗑️
  Delete your account & data Visit Account → Delete Account in the app, or submit a request at bringr.in/delete-account. We will delete your personal data within 30 days, subject to legal retention requirements for financial records.
• 🔔
  Manage push notifications Turn notifications on or off at any time in your device's system settings (Settings → Apps → Bringr → Notifications).
• 📍
  Revoke location access Deny or revoke location permission in your device settings at any time. Note: some features (delivery zone check, address auto-fill) require location to function.
• 📋
  Data portability You may request a copy of your personal data by emailing us at info@bringr.in. We will respond within 30 days.
• 🚫
  Grievance redressal As required by Indian IT law, you may raise a grievance with our Grievance Officer (contact details in Section 13). We will acknowledge within 24 hours and resolve within 30 days.

The Bringr app uses Firebase Cloud Messaging (FCM) by Google to send you push notifications about:

• Order confirmation and payment receipt
• Order dispatch and delivery updates
• Important account or service alerts

When you first launch the app, you will be prompted to grant notification permission. You can change this at any time in your device's notification settings. Revoking permission will stop all push notifications but will not affect your ability to place orders.

Your FCM device token is stored in our database linked to your account. It is deleted when you delete your account.

The Bringr app requests foreground location access (only while the app is open) for these purposes:

• Delivery zone check — to determine whether your current area is served by Bringr
• Address auto-fill — to pre-fill your delivery address based on your GPS coordinates

You may deny location permission. The app will still work; you will just need to enter your address manually.

Bringr is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@bringr.in and we will delete the information promptly.

Our Platform may contain links to third-party websites or services (such as payment gateways or social media pages). This Privacy Policy applies only to the Bringr Platform. We are not responsible for the privacy practices of third-party sites and encourage you to read their individual privacy policies before sharing any information.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a notice inside the Bringr app
• Where required by law, request your renewed consent

Your continued use of the Bringr app after any update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please reach out to us: