Freshferri (the "App", "we", "us") is a fresh-grocery pre-booking and group-buying platform operated by BygbidAI Technologies (of which Freshferri is a part). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights over it. By creating an account, you accept this Policy.

If anything here is unclear, write to us at bygbidai@gmail.com — we will get back to you within 30 days as required by the Indian Digital Personal Data Protection Act, 2023.

• Account: name, email, phone number, password (hashed with bcrypt — never stored in plain text).

• Address book: shipping addresses you save (line, city, state, pincode).

• Order activity: products you buy, pools you join, refundable interest fees you pay, order status, delivery details.

• Device: an Expo / FCM push notification token (only after you grant permission), platform (iOS / Android / Web), and a session JWT.

• Payments: Razorpay handles card/UPI/net-banking details directly — we never see your full card or banking credentials. We store only a payment ID and signature.

• Logs: standard server logs (IP, user-agent, timestamps) for security and abuse prevention.

• To create and authenticate your account (email OTP, password, JWT session).

• To process orders, hold the refundable pool-interest fee, and unlock pools when the threshold is met.

• To send you transactional notifications: OTP codes, pool unlocks, order status, refunds.

• To run the admin dashboard (analytics on revenue, orders, pool conversions) — these are aggregate numbers, not personal details.

• To prevent fraud, debug issues, and comply with legal obligations.

We do not sell your data. We share only with:

• Razorpay (payment processor) — to charge and refund pool interest fees and order payments. Razorpay is PCI-DSS compliant.

• Gmail / SMTP providers — to deliver OTP and order emails.

• Expo Push (Firebase Cloud Messaging on Android, APNs on iOS) — to deliver push notifications.

• Logistics partners — when you place a paid order, we share your name, phone, and shipping address with the carrier so they can deliver.

• Law-enforcement or courts — only on a written legal request (e.g., a court order under Section 91 of the CrPC).

The Freshferri mobile app does not use third-party advertising cookies. The web preview uses an essential first-party session cookie to keep you logged in. We do not run any cross-site trackers, ad networks, or fingerprinting tools.

• Account + order data: as long as your account exists, plus 7 years thereafter (required under Indian tax & GST rules).

• Push notification tokens: up to 90 days after the last app launch.

• OTP codes: deleted immediately after use, or 10 minutes if unused.

• Logs: 30 days, then aggregated and anonymized.

You can ask us to:

• Access — get a copy of all personal data we hold about you.

• Correct — fix anything inaccurate.

• Delete — erase your account and all related data (subject to the 7-year tax retention above).

• Withdraw consent — for push notifications, marketing emails, or non-essential processing.

• Grievance — raise a complaint with our Grievance Officer (see Contact below).

Email any of these requests to bygbidai@gmail.com — we respond within 30 days.

Freshferri is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a minor has signed up, please email us and we will delete the account.

Passwords are hashed with bcrypt (12 rounds). All API traffic uses HTTPS / TLS 1.2+. Database access is restricted to authenticated services. Despite reasonable safeguards, no system is 100% secure — please use a strong, unique password.

Our database and servers are hosted in India. Notification delivery uses Expo / Google / Apple infrastructure which may temporarily process data in the US or EU. By using Freshferri you consent to this routing.

When we materially change this Policy, we will update the "Effective" date at the top and post a notification in the app. Continued use after the change means you accept it.

Email: bygbidai@gmail.com

Grievance Officer: BygbidAI Privacy Team

Response time: within 30 days under DPDPA, 2023.