Draft. The contact details and the business name on this page are not final.
Under the Digital Personal Data Protection Act 2023, Dukaan Babu protects your personal data. We strictly never sell your data and NEVER disclose customer phone numbers to shops. You have the statutory right to access, correct, and erase your personal data.
Dukaan Babu Privacy Policy
Version 0.2-draft. In force from DUMMY — date these pages take effect (YYYY-MM-DD). Last updated 2026-10-08.
In short
- Dukaan Babu connects you with shops near you. We do not sell anything. You pay the shop directly. The shop delivers.
- We use your phone number to sign you in, your name and address so the shop can deliver, and your location to show shops near you.
- The shop you order from sees your order and delivery address (and your exact delivery spot) as soon as you place it, and your name and photo once it accepts. It never sees your phone number.
- Our servers are run by Cloudflare. Your data may be stored outside India (section 4).
- You can ask to see, correct or delete your data. You can delete your account in the app.
- Questions or complaints: DUMMY — personal-data email (mailbox not created yet), or our Grievance Officer (section 10).
Part A. The notice shown before you sign up
Before you start. To connect you with shops we use:
- Your phone number, to sign you in.
- Your name and delivery address, so the shop can bring your order.
- Your location, to show shops near you and check that a shop delivers to you.
- Your orders, chats, photos and voice notes, so the shop can serve you.
- Your network address (IP), to keep the service safe.
The shop you order from sees your order and delivery address (and your exact delivery spot) as soon as you place it, and your name and photo once it accepts. It never sees your phone number. Your data may be stored outside India (section 4). You can withdraw your consent, and ask to see, correct or delete your data, at any time (section 6). You can complain to our Grievance Officer at DUMMY — grievance email (mailbox not created yet).
When you tap Start, you accept this notice and the Terms of Use.
1. Who we are
Dukaan Babu is run by DUMMY — Legal name of the business that runs Dukaan Babu (DUMMY — Sole proprietorship, LLP or private limited company, DUMMY — Registration number (Udyam, LLPIN or CIN), or 'Not registered'), DUMMY — Full postal address with PIN code. Website: https://dukaanbabu.com. In this policy "we" and "us" mean this business.
Dukaan Babu is an app that connects customers with local shops. Shops list their goods and set their own prices. You pay the shop directly, by UPI to the shop's own UPI ID or in cash. The shop delivers. We do not sell goods, we do not take your money, and we charge no fee.
For the data in this policy we decide why and how it is used. In law we are the Data Fiduciary.
2. What this policy covers
This policy covers the Dukaan Babu app and our website https://dukaanbabu.com, including the shop pages we host there. It does not cover what a shop does with your data outside our app.
3. What we collect, why, and how long we keep it
"Restricted" means: the data is taken out of the app, nobody in the app can see it, and it sits in a closed store that no app feature reads. We open it only for a legal request or a dispute. When its time ends, it is erased.
"While your account is open" means we have no fixed end date today. We plan to limit orders and chat to 1 year; this policy will change when we do.
3.1 If you are a customer
| Data | Why we use it | Who can see it | How long we keep it | After you delete your account |
|---|---|---|---|---|
| Phone number | Sign-in | You; our staff. Never the shop. | While your account is open | Restricted for 1 year, then erased |
| Sign-in code | Checks that the phone is yours | Nobody (stored scrambled) | 5 minutes | Erased |
| Name | Shown to the shop | Shops you chat with; a shop you order from only after it accepts your order (before that it sees "New customer"); our staff | While your account is open | Restricted for 1 year, then erased |
| Delivery address you type | So the shop can deliver | The shop of that order; our staff | With the order | Taken off the order; restricted for 1 year from the order's last event, then erased |
| Rough area (about 1 km) | To show shops near you | Our system only | While your account is open | Taken off your profile; restricted with your profile for 1 year |
| Exact location at checkout | To check the shop delivers to you, to guide the delivery, and to settle "out of range" disputes | The shop of that order, from the moment you place it while it is active (it sees the exact spot and the address you typed, so it can decide whether to accept; your name and photo only after it accepts); our staff | 30 days after the order ends | Erased at once |
| Saved addresses (label, landmark, address line, map point, DIGIPIN) | Faster checkout | Only you | Until you remove one | Erased at once |
| Last map pin | Brings back your area after you reinstall | Our system only | 90 days after your last move | Erased |
| Orders (items, prices, totals, note) | The order itself; the shop's records; disputes | You; the shop; our staff | While your account is open. Finished orders and their chat move to archive files 90 days after the order ends. | Your name and address are taken off the order. The note is restricted for 1 year. The rest stays in the shop's records without your personal details. |
| Voice address or voice note on an order | So the shop can find you | The shop of that order | 30 days | Restricted until 30 days from the recording, then erased |
| Chat messages | Talking to the shop about an order | You and the shop. Our staff only when they handle a report about that chat. | While your account is open | Hidden from both sides at once; restricted for 1 year from each message, then erased |
| Chat voice notes | Same as chat | Same as chat | 30 days | As chat |
| Problem report on an order (reason, note, photo) | To sort out a complaint (open for 48 hours after delivery) | You; the shop; our staff | While your account is open | Restricted for 1 year from the later of the report and its closing, then erased |
| "Send my list" (photo, voice, note) | So the shop can pack your bag | That shop | Photos and voice: 30 days. Note: while your account is open. | Note restricted for 1 year; photos and voice end at 30 days |
| Payment screenshot (only if you choose to send one) | Not needed; we do not check payments | The shop of that order | While your account is open | Restricted for 1 year, then erased |
| Reports you file about a user, shop, message or product | To act on abuse and fake listings | Our staff | Kept as our moderation record, with no end date today | Kept |
| People you block | Your safety | Only you | Until you unblock | Kept with the anonymous ID |
| "Ask this shop to deliver here" | Lets a shop see demand. The shop sees only a count per area, never who asked. | Shop owner sees counts only | No end date today | Kept as a count |
| Push notification token and device type (Android, iOS or web) | To send order and chat alerts | Our system only | Until you log out or the token stops working | Erased |
| IP address in our server logs and abuse counters | To stop abuse and fraud | Our staff | About 7 days in server logs; minutes to 1 hour in abuse counters | Not deleted per person |
Guest mode. You can look around without a phone number. Then we keep only a temporary sign-in, your map pin and the abuse counters for your network address. Guests cannot order, chat, upload or report.
3.2 If you run a shop (in addition to 3.1)
| Data | Why | Who can see it | How long | After you delete your account |
|---|---|---|---|---|
| Your name and face photo | Customers know who runs the shop | Everyone (public) | While the shop is listed | Name restricted for 1 year. Photo restricted for 180 days, then erased. |
| Shop name, description, address, PIN code | Your listing | Everyone (public) | While the shop is listed | The shop is taken out of the app at once. These details stay on the hidden shop record, with no end date today. |
| Shop photos | Your listing | Everyone (public) | While the shop is listed | Restricted for 180 days, then erased |
| Exact shop location | Shows your shop on the map and works out delivery range | Everyone (public) | While the shop is listed | Taken off the map at once. The point stays on the hidden shop record, with no end date today. |
| Shop phone | Customers who ordered from you can call you | Only customers who ordered from you; you; our staff | While the shop is listed | Restricted for 1 year, then erased |
| Shop UPI ID | Customers pay you directly | Everyone (public). Anyone who opens your shop can see it. | Until you change it | Stays on the hidden shop record, with no end date today. |
| Products, prices, price history | Your listing | Everyone (public) | While listed | Stays with the hidden shop record |
| Application: name, phone, address, PIN code, location, shop photo, proof photo (trade licence or shop board), note | To see that the shop is real | Our staff only. The proof photo is never made public. | While your account is open | Restricted for 1 year, then erased |
3.3 Sensitive data
We do not ask for passwords, bank or card numbers, health, biometric or caste data, or ID documents from customers. A shop's UPI ID is payment information. It is public because the shop wants customers to pay it directly. A shop's proof photo may show a licence; only our staff see it.
4. Where your data is stored and who helps us
We do not sell your data. We use no advertising or tracking tools, and no crash-reporting or analytics companies.
These companies process data for us. They may use it only to provide their service to us.
| Company | What it gets | Where |
|---|---|---|
| Cloudflare, Inc. (servers, databases, file storage, website delivery, email routing, staff login) | All data in this policy | Cloudflare's network. Some of our databases are placed in Asia-Pacific (for example Singapore, Japan, Hong Kong, South Korea). The exact location of the others is not fixed to one country. None is in India today. Cloudflare is a US company. |
| Expo (650 Industries, Inc.), then Google (Firebase Cloud Messaging) or Apple (Push Notification service) | Your push token, the sender's name, the order alert, and the first 80 characters of a chat message | USA and worldwide |
| Your web browser's push service (web only) | An encrypted alert | Depends on your browser |
| OpenFreeMap | Your phone loads map images straight from this service, so it sees your IP address and the map area you view | DUMMY — country OpenFreeMap serves from (not confirmed) |
| komoot (Photon place search) | The place name you type, and your location rounded to about 11 km (search) or about 110 m ("what is here"). Sent from our server, so it never sees your IP address. | Germany (EU) |
| GitHub (Microsoft) | Our nightly backup is loaded for a short time to build internal reports, then deleted. Only totals are kept, for 14 days. | USA |
| DUMMY — company that hosts our mailboxes (today the owner's Gmail, Google) | Emails you send to our addresses (for example a complaint) | USA and worldwide |
If you install the app from Google Play or the Apple App Store, that store handles your download under its own privacy policy. If you share a shop on WhatsApp, WhatsApp handles that message under its own policy.
Data outside India. Your data may be stored and processed outside India, in the places above. Today none of our storage is in India. Indian law allows this, except to countries the Government of India restricts. If a country we use is restricted, we will stop sending data there.
When we must share. We share data with police, courts or government bodies only when Indian law requires it and the request is valid. We share only what the request covers.
If the business changes hands. If DUMMY — Legal name of the business that runs Dukaan Babu is merged or sold, your data may move to the new owner. This policy keeps applying, and we will tell you first.
5. How we keep data safe
- All traffic between the app and our servers is encrypted (HTTPS).
- Sign-in by SMS code is not switched on yet. Sign-in codes are stored only in scrambled form, for 5 minutes, and too many wrong tries pause sign-in.
- Our staff console sits behind a separate staff login. Only named staff phone numbers can use it. Staff changes (block, suspend, cancel, approve) are recorded.
- Private files (voice notes, list photos, problem photos) have long random links that nobody can guess, and they are not listed anywhere. Anyone who has the exact link can open the file.
- Data restricted after deletion sits in a closed store with no web address.
- We keep backups for 35 days (nightly) and 400 days (long-term). Deleted data can stay in a backup until that backup expires. Backups never contain sign-in codes or session keys. If we restore a backup, we first apply again every deletion people asked for.
No system is perfectly safe. If a breach happens, we follow section 9.
6. Your rights and how to use them
| Right | How to use it |
|---|---|
| Know what we hold (a summary of your data and who we shared it with) | Email DUMMY — personal-data email (mailbox not created yet). We first check that the request comes from the owner of the account. |
| Correct or update | Change your name and addresses in the app (Me). Shops change their details in My shop. For anything else, email DUMMY — personal-data email (mailbox not created yet). |
| Delete your account | Open Me (or My shop), scroll to the bottom and tap "Delete my account". Your data leaves the app at once; the times in section 3 then apply. Some records must be kept longer by law, for a dispute, or because a court or police order covers them; section 3 says which. |
| Withdraw consent | Email DUMMY — personal-data email (mailbox not created yet), or delete your account. Withdrawal does not undo what was lawfully done before. Without the data we cannot run your account. |
| Nominate someone | You may name a person to use your rights if you die or cannot act. Email DUMMY — personal-data email (mailbox not created yet) with their name. |
| Complain | See section 10. |
We do not charge for these requests. When registered Consent Managers become available under Indian law, you may also give, manage or withdraw consent through one.
7. Children
Dukaan Babu is only for people aged 18 or older. We do not knowingly collect data from children, track children or show them targeted ads. If you think a child is using the app, email DUMMY — personal-data email (mailbox not created yet) and we will delete the account.
8. Storage on your phone and in your browser
The app keeps your sign-in key, language, map pin and settings on your phone, so you stay signed in and your choices are remembered.
Our website and shop pages set no cookies and store nothing in your browser. If you turn on browser notifications in our web app, your browser stores a notification key.
You can clear all of this by logging out, clearing the app's data, or clearing your browser's site data.
9. Data breaches
If your personal data is affected by a breach, we will tell you without delay, in plain words. We will say what happened, when, what data it touched, the likely effect on you, what we are doing, what you can do, and how to reach us. We will also report it to CERT-In and, when the law requires, to the Data Protection Board of India.
10. Grievance Officer and contact
- Grievance Officer: DUMMY — Grievance Officer's full name, Grievance Officer
- Email: DUMMY — grievance email (mailbox not created yet)
- Phone: DUMMY — Grievance Officer's phone number (DUMMY — hours the phone is answered, e.g. 10:00 to 18:00, Monday to Saturday)
- Post: DUMMY — postal address for written complaints
- Personal-data questions: DUMMY — personal-data email (mailbox not created yet)
The IT Rules set how fast a complaint must be confirmed (currently 24 hours) and decided (currently 7 days). The full process is on our complaints page.
If you are not satisfied with our answer, you may complain to the Data Protection Board of India once the law allows it (from 13 May 2027). Please write to us first.
11. Changes to this policy
When we change this policy, we change the version and the date at the top. For an important change, we show a notice in the app before it takes effect, and we ask for your consent again where the change affects how we use your data. Earlier versions are available on request at DUMMY — personal-data email (mailbox not created yet).
12. Law and language
This policy is governed by the laws of India. The courts at DUMMY — city whose courts hear disputes have jurisdiction. This does not take away your right to complain to a Consumer Commission where you live.
This policy will be available in all 12 app languages. If a translation and the English text differ, the English text applies, except where the law requires otherwise.