Privacy Notice

The short version

We collect what running your membership requires, we ask separately for everything optional, and every optional consent is revocable in the app. We do not sell personal data, and analytics stays off until you switch it on.

What we process, and why

• Account and identity — your sign-in identity, email, and (if you add them) display name and date of birth. Basis: providing the service; DOB is used only for age-appropriate protections under the DPDP Act.
• Orders and delivery — order history, payment status from the gateway (never your card number — that goes directly to the RBI-authorised gateway), and the encrypted gift-card codes we deliver to you. Basis: contract.
• Fraud and security — device signals and access logs that keep accounts and the money path safe. Basis: legitimate use for security; required records are retained per law.
• Product analytics — pseudonymised usage events, ONLY after you consent. No consent means no analytics beacons and no analytics cookies at all.
• Marketing — offer emails, ONLY after you consent, unsubscribe any time. Transactional messages (receipts, delivery) are separate and always sent.

Your rights

Under the DPDP Act you can access a copy of your data, correct it, withdraw any consent, and request erasure of what we are not legally required to keep. Start any of these from your account's privacy section or by writing to [email protected]. We verify every request before acting on it.

Retention and sharing

We keep data only as long as the purpose (or the law — e.g. financial record-keeping) requires, then delete or anonymise it. We share data with the processors that make the service work — payment gateways, the gift-card issuers fulfilling your order, email delivery, and infrastructure providers — each bound by contract to use it solely for that purpose.

Consent record

Every consent decision you make is recorded with its timestamp and the notice version in force, and each new version of this notice is versioned so you can see exactly what you agreed to and when. Questions or concerns: see the Grievance Redressal page.