Privacy Policy

1. Who we are

"SabseSasta" ("we", "us", "our") is a price-comparison mobile application published under the package identifier in.sabsesasta.app. This policy explains how we handle personal data when you use the SabseSasta Android app or visit sabsesastatech.in. This policy is drafted to comply with India's Digital Personal Data Protection Act, 2023 (DPDPA) and Google Play Store's Data Safety requirements.

2. What we collect

2.1 Data you provide directly

• Delivery pincode — 6-digit Indian postal code you type in. Used to fetch location-aware quick-commerce prices. Stored only on your device.
• Search queries — the product names you type into the search bar. Stored locally as your "recent searches" list, and sent to our backend to fetch prices.
• Watchlist items — products you tap the heart icon on. Stored only on your device.
• Theme preference — light/dark/system choice. Stored only on your device.

2.2 Data collected automatically

• Approximate device location — only if you tap "Use current location" and grant OS permission. We reverse-geocode the coordinates to derive your pincode and immediately discard the coordinates. We never store latitude or longitude.
• Anonymous request logs — our backend logs the search query and the pincode (never your IP, device ID, or any identifier) to compute the "Popular searches" list and to cache prices for ~8 minutes. Logs are aggregated and cannot be tied back to a specific user.

2.3 Data we do NOT collect

• Your name, email, phone number, or any identity data
• Your contacts, photos, files, SMS, or call logs
• Your device advertising ID
• Your precise location (we only use approximate coordinates, briefly, if you opt in)
• Any payment information (all purchases happen inside the retailer app or website — never inside SabseSasta)

3. Why we collect it (legal basis)

Under DPDPA §7, we process the minimum data necessary for the specific purpose you've engaged us for:

• Delivering the service — searching prices at your pincode requires the pincode
• Product improvement — aggregate popular-search stats help us surface trending products (no personal data used)
• Legitimate interest — short-term caching to reduce load on retailer platforms and keep the app fast

4. How we share your data

We do not sell, rent, or trade any user data. We share information in exactly these situations:

• With retailer platforms: when you tap "Buy on [Platform]", we open the retailer's app or website with your search query in the URL. The retailer (Amazon, Flipkart, Blinkit, Zepto, Instamart, BigBasket, Meesho) then applies their own privacy policy. We recommend reading theirs before purchase.
• With affiliate networks: some retailer links carry an affiliate tracking parameter so we earn a small commission at no extra cost to you. These parameters do not identify you personally.
• To comply with law: if legally compelled by an Indian court order or by a Data Protection Board direction under DPDPA.

5. Third-party services we use

• Retailer platforms (Blinkit, Zepto, Instamart, BigBasket, Amazon India, Flipkart, Meesho) — we send them your search query, they return their listings and prices
• Google Play Services — for app distribution, updates, and required Play integrity
• MongoDB Atlas / equivalent — our backend database, hosted in India

We do not use third-party analytics (Firebase, Mixpanel, Amplitude, etc.), ad networks, crash reporters, or trackers.

6. Data retention

• On your device: pincode, recent searches, watchlist, and theme are kept until you clear them or uninstall the app.
• On our servers: cached price payloads are auto-deleted after ~8 minutes. Aggregate popular-search counts are retained for up to 12 months and contain no personal data.

7. Your rights under DPDPA

As a Data Principal, you have the right to:

• Access the personal data we hold about you (usually nothing, because we don't collect identifiable data)
• Correction and erasure of your data
• Grievance redressal
• Nominate someone to exercise your rights in the event of death or incapacity
• Withdraw consent at any time (uninstall the app or revoke OS permissions)

To exercise any of these rights, email support@sabsesastatech.in. We respond within 30 days.

8. Grievance officer

In line with DPDPA §8 and the IT Rules 2021, our designated Grievance Officer is:
Name: [Your name]
Email: grievance@sabsesastatech.in
Address: [Your city, India]
We acknowledge grievances within 24 hours and resolve them within 15 days.

9. Children's privacy

SabseSasta is not directed at children under 18. We do not knowingly collect any data from minors. If you believe a minor has used the app, contact us and we'll remove any related data.

10. Security

We use HTTPS/TLS for all traffic between the app and our backend. Local data on your device is stored using standard OS-provided secure storage. We do not collect anything sensitive enough to be a target for a breach, but we still take standard precautions.

11. International users

SabseSasta is designed for shoppers in India. If you access the app from outside India, your data may be processed on servers located in India. By using the app you consent to such transfer.

12. Changes to this policy

We may update this policy occasionally. Material changes will be announced in-app before they take effect. The "Last updated" date at the top always reflects the current version.

13. Contact

General questions or privacy requests:
support@sabsesastatech.in