CollegeCart Privacy Policy

Last updated: November 3, 2026

CollegeCart ("we", "our") operates the CollegeCart mobile application. This policy explains what we collect, why, and the choices you have.

1. Information we collect

• Account details you give us: name, email address, mobile number, hostel and room number, and a password or login OTP. We do not read your phone contacts or track your GPS location — your delivery location is the hostel and room you enter yourself.
• Orders: items you order, order history, delivery notes and delivery OTP.
• Payments: your payment is processed by Razorpay. We receive only the payment status and a transaction reference. We never see or store your card number, UPI PIN or banking credentials.
• Optional content: a profile picture or an image you attach while contacting support, only when you choose to add one.
• Device/push token: a Firebase Cloud Messaging token so we can send order-status notifications. You can turn notifications off in your device settings at any time.

2. How we use it

• To create and secure your account, verify your number, and let you sign in.
• To deliver your orders to your hostel room (your name, phone number and room are shared with the delivery partner handling your order only).
• To process payments, refunds and order-related support.
• To send order and delivery updates, and — only if you opt in — offers and promotions.
• To keep the app working and improve it (crash logs and basic analytics; never sold, never used for advertising profiles).

3. What we never do

• We never sell your personal data.
• We never share your data with advertisers or data brokers.
• We never see or store your card or banking details (Razorpay handles those).

4. Retention & deletion

We keep your data only while your account is active and as required for tax and accounting law. You can delete your account at any time inside the app: Profile → Delete account. Deletion removes your personal data from our live systems; anonymised order records required by law may be retained. You can also request deletion by emailing alok78332@gmail.com.

5. Security

All data is encrypted in transit (HTTPS/TLS). Accounts are protected by OTP/password verification, and delivery handover requires a one-time delivery OTP.

6. Third-party services

• Razorpay — payment processing (razorpay.com/privacy)
• Supabase — cloud database and authentication (supabase.com/privacy)
• Google Firebase — push notifications (policies.google.com/privacy)
• Truecaller — optional one-tap login, only if you tap the Truecaller button (truecaller.com/privacy-policy)

7. Children

CollegeCart is intended for users aged 18 and over. We do not knowingly collect data from children.

8. Changes

We may update this policy; the "last updated" date above reflects the latest version. Material changes will be announced in the app.

9. Contact

For privacy questions or deletion requests: alok78332@gmail.com