Privacy Policy

Zyppa Technologies ("Zyppa", "we", "our", "us") operates the Zyppa mobile application and website at zyppa.in. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

This policy complies with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applies to all users — customers and shop owners — in Kerala and across India.

1. Information We Collect

1.1 Information You Provide

• Account registration: Name, mobile number, email address
• For customers: Delivery address (pickup location reference), order history, payment method (processed by Razorpay — we do not store card data)
• For shop owners (vendors): Business name, shop address, GSTIN, FSSAI / drug licence number (where applicable), bank account details for settlements
• Communications: Messages you send to our support team

1.2 Information Collected Automatically

• Device information (device type, OS version, app version)
• Usage data (pages viewed, features used, time spent)
• Location data (only when you grant permission, used to find nearby shops)
• IP address and network type
• Crash reports and diagnostic data via Firebase

2. How We Use Your Information

• To create and manage your Zyppa account
• To process orders and send OTP verification for pickup
• To settle payments to shop owners via bank transfer
• To send order notifications via SMS and push notification (Firebase Cloud Messaging)
• To show you relevant local shop offers near your location
• To improve the app experience through analytics
• To comply with legal and regulatory obligations in India

3. Third-Party Services

We share data with the following trusted third-party services necessary to operate Zyppa:

We do not sell your personal data to any third party.

4. Data Retention

• Account data is retained as long as your account is active.
• Order history is retained for 3 years for compliance with GST regulations.
• You may request deletion of your account and personal data at any time (see Section 6).

5. Data Security

We use industry-standard security measures including HTTPS/TLS encryption, hashed passwords, and access controls. Payment data is handled entirely by Razorpay, which is PCI-DSS compliant. We do not store card numbers or UPI IDs.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Erasure: Request deletion of your account and personal data
• Grievance: Raise a complaint with our Data Protection Officer
• Nomination: Nominate another person to exercise rights on your behalf

To exercise any of these rights, email privacy@zyppa.in. We will respond within 30 days.

7. Children's Privacy

Zyppa is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact privacy@zyppa.in.

8. Cookies and Tracking

Our website (zyppa.in) uses minimal cookies for session management and analytics. We use Firebase Analytics in the app to understand usage patterns. You can opt out of analytics by adjusting your device settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via push notification or email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact — Data Protection Officer