Privacy notice — release draft

This notice is a draft. Operator identity, privacy contact, retention periods and actual provider details must be completed before public signup or a store release.

Information used by the app

Google account authentication and basic account identity, saved names and addresses, orders and rides, customer-selected map coordinates, support requests and optional service feedback. Partner applications include contact and verification documents stored privately. Custom requests can include shopping lists, voice recordings and bill images. Cash collections, purchase reimbursement, agreed earnings and actual transfer receipts are recorded for operations and accounting.

The selected login method uses Google account identity, email and basic profile scopes. Chauraha does not request access to Gmail messages, Google Drive files, Google contacts or Calendar. After login, the customer supplies a name and Indian mobile contact and chooses permission for the shop, assigned partner and authorized team to use it to fulfil requests. This supplied phone is not verified by SMS and does not let another person open or link the account or obtain business permissions.

Riders can share location during duty and active work. Background sharing requires an additional choice and device permission. Operational push notifications require opt-in; the device token and generic update are processed for delivery. Customers see recent location only for their assigned active job.

Who needs this information

Order details are used by the customer, the shop fulfilling the order, the assigned rider and authorized operations staff. Contact access is checked against the current job and assignment. Offers and unaccepted shopping assignments do not disclose the customer contact. The active-job contact feature stops providing contact after completion or cancellation, and a former rider loses access after reassignment. Feedback is used for service planning. A maps provider receives map/location requests when its integration is configured.

Home service requests include the type of work, description, saved address, requested time, the chosen service provider and the quote you accept. Individual providers apply with a display name, skills, experience and permission for team review; approved profiles can show these details to customers. Only the customer, assigned provider and authorized team can open a service booking. Contacts become available after the provider accepts the confirmed booking and stop being supplied when the work ends or is cancelled. Start and finish codes are shown only to the customer. Completed-work records retain the agreed amount paid directly to the provider.

Your choices

Location requires device permission. Coming-soon feedback has a separate permission for saving the response and an optional launch notification choice. Account deletion instructions are listed separately.

You can edit saved addresses and your name, turn off push notifications, change background-location permission, or request deletion. Essential job information is shared with the shop, assigned rider and authorized staff to fulfil your request.

Storage, providers and retention

The staging deployment runs Supabase software for authentication, database records and private file storage on Chauraha’s Azure server. This is self-hosted software; it does not by itself send these records to Supabase’s hosted service. Microsoft Azure hosts the server, and Azure Maps receives map, search and route requests. Google handles the Google sign-in step when that provider is enabled. Expo and the configured Android push provider receive notification-delivery requests when push is enabled. Paid SMS authentication is disabled in the selected staging setup. The actual enabled providers must be reviewed before this notice is published.

Actual storage periods, provider configuration, backup retention and required financial-record retention are awaiting operator review.

The draft does not assert compliance or promise a retention/deletion timeline that has not been configured and reviewed.