Privacy Policy

Effective 3 October 2026

This policy explains what personal information Dunoya Native Technologies LLP ("Dunoya", "we", "us") collects when you use the Dunoya customer app, the Dunoya Store Partner app, the Dunoya Delivery Partner app and our website dunoya.in (together, the "Services"), why we collect it, who sees it, and the choices you have. We handle your information in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. Who we are

Dunoya is a quick-commerce platform that connects customers with nearby stores and delivery partners for groceries and everyday products. Dunoya Native Technologies LLP (Chennai, Tamil Nadu, India) is the data fiduciary responsible for your personal information. Contact details are in section 14.

2. What we collect

We collect only what the Services need. It depends on how you use them.

We do not collect card or bank details in the apps. Orders are paid in cash on delivery.

3. How we use it

• To create and secure your account and sign you in.
• To check that we deliver to your address, show you nearby stores and products, and process, track and deliver your order.
• To let stores prepare orders, and delivery partners collect and deliver them (including routes, distance and estimated time).
• To verify and onboard stores and delivery partners, and to keep deliveries safe and honest.
• To send order updates and alerts (accepted, packed, on the way, arrived, delivered, cancelled) and important service messages.
• To provide customer support, handle complaints, refunds and disputes, and keep records the law requires.
• To prevent fraud and abuse and to keep the Services secure.
• To understand how the apps are used and fix crashes, using aggregated analytics and crash reports.
• To comply with the law.

We use your information on the basis of your consent (which you give when you sign up and grant permissions, and can withdraw) and for the lawful uses the DPDP Act permits, such as delivering the order you placed and complying with law. We do not sell your personal information.

4. Who we share it with

• Stores and delivery partners involved in your order. The store sees the items and order details. The delivery partner sees the pickup store, your delivery address, the name of the person receiving the order and the order total (cash to collect), and the phone number only where needed to complete the delivery. You see the delivery partner's name, vehicle, a way to contact them, and their live position while your order is on its way.
• Service providers that run the Services for us, under contract: Google (Firebase Authentication, Realtime Database, Cloud Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, Analytics, Crashlytics, App Check and Google Maps Platform for maps, routes and place search).
• Authorities when the law requires it, or to protect rights, safety and property.
• A successor if Dunoya is merged or sold, with the same protections for your information.

5. Location

• Customer and store apps: precise location is used to find your service area and delivery address, and to place the store on the map. You can deny it and still search for and type an address.
• Delivery Partner app: your precise location is shared while you are online or on a delivery so that stores, customers and our operations team can see where the delivery is, and so we can route and verify it. While a delivery is active the app runs a visible notification (a foreground service) so tracking continues when the app is not on screen. Tracking stops when you finish the delivery or go offline. Location is stored with the order's tracking record.

You can change location permission at any time in your phone's settings; some features will not work without it.

6. Notifications

We send push notifications for orders and deliveries (for example new order, delivery partner arrived, delivery update). They are part of the service. You can switch them off in your phone's settings, but you may then miss important order events.

7. Security

Data is encrypted in transit, access is restricted by account and role, and our apps use Google Play Integrity and Firebase App Check to reduce abuse. No system is perfectly secure, so we also limit what each role can see. If we learn of a breach affecting your information we will notify you and the authorities as the law requires.

8. How long we keep it

• Account details: while your account is active, and until you delete it (section 10).
• Order, payment and settlement records: for as long as needed for accounting, tax, dispute and legal requirements.
• Support messages: while your account exists and as needed to resolve the issue.
• Delivery tracking (route and position of a delivery): kept with the order record for dispute and safety handling.
• Crash and analytics data: for the period set in our analytics settings (up to 14 months).

9. Your rights and choices

Under the DPDP Act you may ask to: know what we hold about you, correct or update it, erase it, withdraw consent, nominate someone to exercise your rights if you cannot, and have a grievance addressed. You can update your name and addresses inside the app. For other requests write to support@dunoya.in from the phone number on your account so we can verify it is you. We reply within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.

10. Deleting your account

• Customers: open the Dunoya app, go to Account and choose Delete my account. This removes your profile, saved addresses, cart, notifications, support chats, notification tokens and sign-in. It is not possible while an order is in progress. Past orders remain as business records without the details you deleted.
• Store and delivery partners: open your app and tap Delete my account (the small grey link under Log out in the Store app, or at the bottom of Profile in the Delivery app), then Request deletion. You can also email support@dunoya.in from your registered phone number. We close the account once pending orders and payments are settled. Payment and order records are kept as the law requires.

Full steps are on our account deletion page.

11. Children

The Services are for people aged 18 and over. We do not knowingly collect personal data of children. If you believe a child has given us information, write to us and we will delete it.

12. Where data is stored

Our data is stored with Google Cloud, in data centres in Asia that include India (Mumbai) and Singapore. Google and its processors handle it under contract and appropriate safeguards.

13. Changes

We may update this policy. We will change the effective date above and, for important changes, tell you in the app or by notification. Using the Services after a change means you accept the updated policy.

14. Contact and grievances

See also our Terms & Conditions.