Privacy Policy

1. What we collect

• Your account: your name, email address, phone number (optional) and password. We email you a one-time code to confirm your address. Passwords are stored hashed, never as plain text.
• Your orders: the delivery addresses you save, what you ordered, the amounts, how you paid and the status of each order.
• Your cart and saved items. Before you sign in, your cart is kept only in your browser or on your phone, and is sent to us when you sign in.
• In the app, if you allow notifications: a push token that lets us send order updates to your phone. The app works fully without it, and you can turn notifications off in your phone's settings at any time.
• In the app, for updates: when the app starts it checks for updates. That request carries the app version, your phone's platform (Android or iOS) and a random installation identifier that is not linked to your account.
• Technical information needed to answer each request, such as your IP address and browser or device type.

2. What we do not collect

• Card, UPI and netbanking details. Online payments are made inside Razorpay's own secure checkout. Those details go straight to Razorpay; we receive only a reference confirming the payment.
• Your location, contacts, photos, camera or microphone.

We show no advertising, we use no analytics or advertising trackers, and we never sell your data.

3. Cookies on the website

The website uses a cookie and your browser's local storage only to keep you signed in and to remember your cart. It sets no advertising or analytics cookies. If you block cookies, signing in will not work.

4. Why we use it

• To create and secure your account
• To take, ship, deliver and invoice your orders
• To tell you what is happening with an order
• To answer you when you contact us
• To meet legal obligations, such as keeping tax invoices

5. Who receives it

Only the companies we need to run the service, and only what each one needs:

We also disclose information when the law requires it.

6. Where it is stored

Your account and order data are stored on our servers in Mumbai, India, and product images in Bangalore, India. Expo, Google and Brevo process the limited data listed above on their own servers, which may be outside India, only to deliver notifications, app updates and emails.

7. How long we keep it

Your account details are kept while your account exists. Order records and invoices are kept for as long as Indian tax and accounting laws require, even after you delete your account.

8. Your choices and rights

• Delete your account in the app: Account → Delete my account. Your name, email and phone are removed straight away. If you never placed an order, nothing is kept; if you did, the order records are kept without your personal details, as described on our account deletion page.
• Edit or remove saved addresses, reset your password and turn notifications off yourself.
• To see, correct or delete anything else we hold about you, or to delete your account without the app, email connect.genuinenutrition@gmail.com.

9. Children

Shop Genuine is not meant for anyone under 18, and we do not knowingly collect data from children.

10. Security

Everything between your browser or the app and our servers travels encrypted (HTTPS). Passwords are stored hashed and payment gateway keys are stored encrypted. No system is perfectly secure, but we take reasonable steps to protect your information.

11. Changes to this policy

If we change this policy we will update the date at the top, and tell you on the website or in the app when a change is significant.