Privacy policy & account deletion
Last updated: 11 October 2026
Privacy policy
Information we store and why
We store the email address and phone number you provide to manage your account and service your orders, including confirmation, delivery, billing and order-related support. Orders also contain your name, selected products and quantities, delivery address and PIN code, invoice amounts and payment and fulfilment status. If you order for another person, their name and phone number are used for delivery. We do not access your phone’s contact list.
Optional app marketing
Email addresses and phone numbers are not used for marketing. Registration offers a separate optional choice for offers and product updates through app notifications. It starts off; you can register and order without agreeing. Signed-in customers can change the choice in Account settings. The choice, channel, notice version and date are saved with the account. Customer marketing delivery has not yet been enabled. Any future marketing service must respect the current choice and withdrawal.
Service providers and device storage
Supabase provides account authentication and database hosting. Expo provides app updates and notification services, and Firebase/FCM supports Android notification delivery. The current notification delivery feature sends order alerts to the shop owner. Session information and app data may be stored on your device. Information needed to operate the app and fulfil orders is processed by these services and by the shop. The shop may share necessary delivery details with its delivery provider.
Payments and photos
UPI payments take place in your chosen payment app. This app creates a payment request; the shop confirms receipt manually. It does not collect your UPI PIN, bank password or bank balance. The owner supplies product images. The app does not request access to customer contacts. Optional foreground location is described below.
Saved delivery details
For orders for yourself, we save your name, mobile number, delivery PIN code and confirmed delivery address with your account to fill future orders. You can edit these details. Signing out removes them from the current checkout screen; the account's saved details remain available when you sign in again. An address entered for another recipient does not replace your own saved address.
Optional device location and PIN lookup
The app requests foreground location permission only when you select “Use my current location”. Your device's location and address service processes the location to suggest an address. We do not save GPS coordinates or track your location in the background. You must check the suggested address and enter your flat/building/home number. You can refuse permission and enter the address manually. The address you confirm is stored and used to service your orders.
PIN lookup sends your entered PIN code to Postal PIN Code API (api.postalpincode.in) to suggest town/city and state. It does not send your name, email, phone number or full delivery address in the lookup request.
How long records are kept
The shop’s stated standard invoice-retention period is two years from the invoice date. Invoices contain order details needed for billing, transaction reconciliation and order-related enquiries. Longer retention may be necessary where applicable law or an unresolved dispute requires it; any such retention must be limited to the necessary records and purpose.
Account information is used while the account remains active. Support information is used to handle the enquiry. The shop must review retained copies and backups when handling deletion requests.
Deletion, correction and questions
We handle verified deletion requests within 30 days, removing personal data that is no longer needed while retaining necessary invoice records. We will explain retained records and their purpose. Our intended customers are adults aged 18 and above.
In Account, “Delete my account” removes the sign-in account and access to receipts. It does not currently erase invoice and order records held by the shop. Those records may still include names, phone numbers and delivery details.
To request correction or deletion of associated personal data, or ask about retained records, email [email protected] from your registered address. The shop may need to verify that the account belongs to you. Do not send a password, UPI PIN or identity document. See Account and data deletion for the request steps.
Privacy requests and complaints
You can ask what personal information we hold, request correction or deletion, withdraw optional marketing consent, or raise a privacy complaint by emailing [email protected]. Use the subject “Privacy request — Bobby’s Nuts and Spices” and describe your request. We may verify your registered email address before acting. Withdrawing marketing consent does not prevent you from registering or placing orders.
Public reviews
If you publish a review, your chosen display name, star rating, comment and date are visible to everyone. Your account ID links the review to your sign-in account but is not shown publicly. One review is stored per account and you can update it. Deleting your account removes its review. Do not include personal contact details in a public review.
Policy changes
We will update this page if our data handling changes. If we introduce a new purpose requiring your consent, we will explain it and request the relevant consent before using your information for that purpose.
Contact: [email protected]
ACCOUNT AND DATA DELETION
Email [email protected] from your registered email with subject Account deletion request. Specify whether you want the account and associated personal data deleted. Do not send passwords, UPI PINs or identity documents. We verify requests and handle them within 30 days. Necessary invoices are normally retained for two years, or longer where applicable law or an unresolved dispute requires it. We explain retained records and their purpose.