Privacy Policy

Summary of key points

• ·What we collect — your phone number, name, delivery address with its map pin, orders and bills, a device push token, and — for delivery partners on an active order — live location.
• ·Why — to take, prepare, deliver or hand over your orders, to process payments and refunds, to keep everyone safe, and to meet legal duties. We do not sell personal information and we run no advertising trackers.
• ·Who sees it — only the store preparing your order, the delivery partner carrying it, and the service providers that run payments, SMS, notifications, maps and hosting for us.
• ·Your rights — access, correction, deletion and withdrawal of consent under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Delete your account any time from Profile → Delete Account.

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register, place an order, apply to be a store or delivery partner, or contact us. What we collect depends on how you use sabCheej:

• ·Phone number — your account identity. Used for the login OTP, order updates and so the store or delivery partner can reach you.
• ·Name, and optionally an email address.
• ·Delivery address and its map pin — an address is saved from your phone’s location (or a pin you place on the map); the area, city and pincode are read from that pin. Without a pin we cannot check which stores deliver to you or guide the delivery partner, so a pin is required for home delivery.
• ·Orders, bills and payment references — the items, amounts, coupons and loyalty points on each order, the payment method you chose, and the payment gateway’s transaction and refund references. A card number or UPI PIN never reaches our servers.
• ·Prescription image — only when you upload one yourself for a pharmacy order, so the pharmacist can verify it.
• ·Referral code and loyalty balance — if you use the Refer & Earn programme.
• ·Partner enquiries and contact messages — the name, mobile number, shop name, area, pincode and business type you enter in the store-partner or delivery-partner form, and whatever you write in the contact form, are saved and emailed to our support inbox so we can call or write back. We use them only for that.
• ·Store partners — shop name, address and pin, opening hours, delivery window, catalogue, packing-proof photos you upload, and settlement records. Delivery partners — name, phone, online status and earnings records.

All personal information you provide must be true, complete and accurate, and you must tell us of any change (you can edit most of it in the app).

Information automatically collected

Some information is collected automatically when you use the app or this website. It does not reveal your specific identity but may include device and usage information:

• ·Device and app data — app version and build, device type and operating system, IP address, language, and error or crash logs. We use these to keep the service running, to fix problems and to prevent misuse — for example to tell you when a newer app version is available.
• ·Push notification token — issued by your device when you allow notifications, so we can tell you “order accepted”, “ready for pickup” or “rider has arrived”. Permission is asked only after your first order.
• ·Location data (customers) — with your permission, a one-time GPS fix when you add an address or set your browsing location. We do not track customers in the background.
• ·Location data (delivery partners) — while you are online and carrying an active order, your position is shared with the customer for live tracking and stored as a breadcrumb trail for that order only. Tracking stops when the order ends.

2. How do we process your information?

We process your personal information to:

• ·create and manage your account and log you in with an OTP;
• ·take your order, send it to the store, and either deliver it to your pinned address or hold it for in-store pickup;
• ·check which stores deliver to your location and price the delivery fee by distance;
• ·process payments and refunds through our payment gateway and keep a record of each payment event for reconciliation and disputes;
• ·show live tracking and confirm hand-over with the 4-digit delivery or pickup code;
• ·send order updates by push notification, SMS and email, and respond to your support requests;
• ·run the loyalty points and referral programme and apply coupons;
• ·settle payouts with store and delivery partners and keep the accounting records the law requires;
• ·keep the service safe — detect fraud, abuse and duplicate accounts, and protect our users, partners and systems;
• ·improve the service — for example by looking at aggregate, anonymous search terms to see which products people cannot find; and
• ·comply with applicable law and respond to lawful requests.

3. What legal bases do we rely on?

We process your personal information only when we have a valid reason to under Indian law, principally the DPDP Act:

• ·Consent — you give it when you create an account, allow location or notification permission, upload a prescription, or apply as a partner. You may withdraw consent at any time (see “Your privacy rights”); some features will then stop working and we will tell you which.
• ·Performing the service you asked for — taking, paying for and delivering an order needs your address, phone number and payment reference; there is no order without them.
• ·Legal obligations — tax and accounting records, and responding to a valid order from a court or authority.
• ·Safety and vital interests — where processing is needed to protect someone’s life or safety, or to prevent fraud against you or others.

sabCheej is operated from India for users in India. If you use it from elsewhere, Indian law governs this notice.

4. When and with whom do we share your information?

We share personal information only with the parties without whom the service cannot run, and only as much as each one needs:

• ·Store partners — your name, the order details and (for delivery) the delivery area, so they can prepare it. For in-store pickup they see your name and the order, and verify your pickup code at the counter.
• ·Delivery partners — your name, delivery address, map pin and phone number, only for the order they are carrying.
• ·Payment gateway (Razorpay) — to process online payments and refunds. Razorpay’s own privacy policy applies to the payment details you enter on their pages.
• ·SMS/OTP, email and push-notification providers — to deliver the login OTP, order messages and notifications.
• ·Map data providers — we draw maps with OpenStreetMap-based tiles and, when your phone cannot name the area or pincode of a pin, we ask OpenStreetMap’s geocoding service for it. Only the coordinates of that pin are sent, never your name or phone number.
• ·Cloud hosting — our servers and database run with a hosting provider under contract.
• ·Business transfers — if Trackbes Technology is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, under this notice.
• ·Legal requirements — when a valid legal or court order requires it, or where someone’s safety is at stake.

We do not sell personal information, share it with advertising networks, or run offer walls or third-party ad SDKs in the app.

5. Do we use cookies and other tracking technologies?

This website is static and uses no advertising cookies or third-party tracking pixels. The app stores a small amount of data on your device (your login session, your chosen browsing location, delivery or pickup preference, recent searches and a cached copy of your cart) so that it works smoothly and offline-tolerantly; none of that is sent to advertisers. If we ever add analytics or crash reporting, this notice will say so, and you will be able to decline where the law requires.

6. Is your information transferred internationally?

Our servers and database are located in India. Some service providers — for example the push-notification service or the map geocoding service — may process limited data (a device token, or the coordinates of a pin) on infrastructure outside India. Where that happens we rely on those providers’ contractual and security commitments, and we send them the minimum needed.

7. How long do we keep your information?

• ·Account data — for as long as your account exists. When you delete the account we remove it, except records the law requires us to keep.
• ·Order, invoice and payment records — for the period required by Indian tax and accounting law, because they are financial records.
• ·Delivery partner location trail — kept for the order plus a short dispute window (a configurable number of days), then deleted automatically.
• ·Packing-proof photos — kept for a configurable retention period after the order completes, then deleted.
• ·Contact messages, partner enquiries and in-app feedback — kept for 12 months as support history, then deleted. If you delete your account, the name, number and email on your messages are removed at once; the text is kept without any identifier.

8. What are your privacy rights?

Under the DPDP Act you have the right to:

• ·Access — ask for a summary of the personal information we hold about you and how it has been processed.
• ·Correction and completion — fix a wrong name, number or address yourself in the app, or ask us to.
• ·Erasure — delete your account from Profile → Delete Account, or email us. Records the law requires us to keep are retained; everything else is removed.
• ·Withdraw consent — turn off notifications, revoke location permission in your phone settings, or close the account. Live tracking and pinned addresses need location; without it those features stop, and the app tells you so.
• ·Nominate — name someone to exercise these rights for you in the event of death or incapacity; write to us to set it up.
• ·Grievance redressal — raise a complaint with our Grievance Officer (below) and, if unresolved, with the Data Protection Board of India.

We respond to requests within the time the law allows. We may need to verify your identity (for example by OTP to your registered number) before acting on a request.

9. Controls for Do-Not-Track features

Most browsers and some mobile systems offer a Do-Not-Track (“DNT”) setting. No uniform standard for honouring DNT signals has been adopted, so we do not currently respond to them. Since we run no tracking for advertising, the practical effect is the same: we do not track you across other sites or apps.

10. Do we collect information from minors?

sabCheej is not intended for anyone under 18, and we do not knowingly collect personal information from children. By using the service you represent that you are at least 18. If we learn that a minor’s data has been collected, we will deactivate the account and delete the data promptly. If you become aware of such data, please contact us at sabcheej@gmail.com.

11. How do we keep your information safe?

Data travels over encrypted connections (HTTPS). OTPs and sessions are short-lived tokens; passwords for staff accounts are stored as hashes. Access is limited by role — a store sees only its own orders, a delivery partner only the order they are carrying, and our staff only what their job requires, with an audit log of admin actions. Payment card and UPI details are handled entirely by the payment gateway. No system is completely secure; if a breach affects you we will inform you and the authorities as the law requires.

12. Do we make updates to this notice?

Yes, as the product and the law change. The updated version will be posted on this page with a new effective date. For material changes we will also notify you in the app, by SMS or by email. Please review this notice from time to time.

13. How can you contact us about this notice?

sabCheej is owned and operated by Trackbes Technology. For questions about this notice, or to make a complaint under the DPDP Act and the IT Rules, contact:

14. How can you review, update or delete your data?

In the app, Profile lets you edit your name and email, manage saved addresses, and delete your account. Notification and location permissions are controlled in your phone’s settings. For anything you cannot change yourself — or to request a copy of your data — write to sabcheej@gmail.com from your registered email or with your registered phone number, and we will verify and act on the request.