Privacy Policy
Last updated 5 September 2026
Build Bharat Mart is operated by NNPYS Home Solutions LLP. This policy describes every category of personal data the app and website collect, why we collect it, who processes it on our behalf, how long we keep it, and the rights you have over it. It is written to be checked against what the software actually does.
What we collect
These five categories are the complete list. They match, item for item, the App Privacy declaration published on our App Store listing.
| Data | Why we need it |
|---|---|
| Name, email address, phone number | To create your account, sign you in, and contact you about an order. Your phone number is the primary way you sign in. |
| Delivery addresses | To deliver what you buy and to calculate delivery charges. |
| Approximate or precise location | Only when you tap to detect your address, and only while the app is open. We never collect location in the background. |
| Photos you choose to upload | Your profile picture, and any photo you submit to search for a product by image. |
| Account identifier and device push token | To keep your cart, orders and saved items attached to your account, and to send you order updates. |
| Order history | To show your orders, process returns and refunds, and issue a GST invoice. |
| GST number (optional) | Only if you supply one, so business purchases carry a compliant invoice. |
What we deliberately do not collect
Stated explicitly, because the absence is a choice rather than an oversight:
- No Aadhaar, PAN, passport or other government identity number. We do not ask for one and do not store one. If we ever need to verify identity, we will use a regulated KYC provider and keep only the result, never the number.
- No card, bank or UPI details. Payments are handled by Razorpay. You enter payment details in Razorpay’s own secure interface; they are never sent to us and we cannot see them. We receive only a payment reference confirming the payment succeeded.
- No advertising or tracking. We do not run ads, do not use advertising identifiers, do not build advertising profiles, and do not share or sell your data to data brokers or advertisers. We do not track you across other companies’ apps or websites.
- No contacts, no calendar, no microphone recordings, no background location, no browsing history. Voice search is processed by your device’s own operating system; we receive the resulting text, never the audio.
- No behavioural analytics, at present. Analytics collection is switched off for every user and stays off until we ship a consent screen. If that changes, this page and our App Store privacy declaration will be updated in the same release.
How you sign in
You can sign in with your phone number and a one-time password, or with Google, Apple or Facebook. When you use one of those, we receive only your name and email address from them — nothing else, and never your contacts or your activity on their services. Signing in with Apple lets you hide your email address; we support that fully, and an account created that way works exactly like any other.
Who processes your data
- Google (Firebase) — authentication, database, file storage and notification delivery. Our database and server functions run in Google’s India regions.
- Razorpay — payment processing, as an RBI-regulated payment aggregator.
- Apple, Google and Meta — only if you choose their sign-in, and only for that sign-in.
- Delivery partners — the name, address and phone number needed to deliver your order, and nothing more.
Each acts on our instructions under contract. Some may process data outside India; where they do, we rely on contractual safeguards.
How long we keep it
- Account details — while your account is open, and up to 90 days after you delete it, so an accidental deletion can be reversed.
- Orders, invoices and tax records — eight years, as required by Indian tax law. This is the one category we cannot delete on request.
- Delivery addresses and saved items — until you remove them.
- Uploaded photos — profile pictures until you replace or delete them; image-search photos are deleted after the search.
- Push tokens — until you sign out, uninstall, or turn notifications off.
Your rights
Under the Digital Personal Data Protection Act 2023 you may ask us to:
- tell you what personal data we hold about you, and who we shared it with;
- correct anything inaccurate or incomplete;
- delete your data, subject only to the tax records above;
- nominate someone to exercise these rights if you die or become incapacitated;
- withdraw a consent you previously gave, as easily as you gave it.
You can delete your account from inside the app at any time. For anything else, write to us using the details below and we will respond within 30 days.
Keeping it safe
Data is encrypted in transit and at rest. Access rules are enforced by the database itself, not only by the app, so one customer cannot read another’s orders, addresses or saved items even with a modified client. Prices, payments and refunds are calculated and written by our servers rather than by your device, so a tampered app cannot alter what you are charged. Requests from the app are attested with Apple’s App Attest and Google’s Play Integrity before a payment is accepted.
Children
Build Bharat Mart is intended for adults buying home improvement goods and services. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we change what we collect, we will update this page and the date at the top, and change our App Store privacy declaration in the same release. Material changes will be notified in the app.
Contact and grievances
For any question about this policy, or to exercise a right above, contact our Grievance Officer:
- Email buildbharatmart@gmail.com
- Phone +91 99999 98645
- NNPYS Home Solutions LLP, House X-52, Kh No-61/25, Ground Floor, Kalan Sultanpuri C Block, New Delhi 110086, India
If you are not satisfied with our response, you may complain to the Data Protection Board of India.