This Privacy Policy explains how 1APPONLY (OPC) PRIVATE LIMITED ("1APPONLY", "we", "us")
collects, uses, shares and protects your information when you use the
1APPONLY mobile app and related services in India.
By using 1APPONLY, you agree to this policy. This policy is DPDP-Act-2023 compliant.
1. Information We Collect
We collect the minimum information required to deliver our services safely and reliably.
You provide directly
Phone number (used to sign in via OTP)
Name and email (optional profile fields)
Delivery addresses, pincode and precise/approximate location while placing an order
Order contents, special instructions and feedback / ratings
Payment reference IDs (we never store your full card number, UPI PIN or bank credentials)
Collected automatically
Device model, OS version and app version (to diagnose crashes)
Approximate location while the app is open (for pincode & rider matching)
Notification tokens (to send order updates you have consented to)
Respond to your feedback, complaints and support requests
3. Location Data
Location access is optional but strongly improves the experience. We use it only
while the app is open to (a) auto-fill your pincode, (b) show a nearby vendor list,
and (c) match the closest delivery partner within a 10 km radius. You can revoke
location access at any time from device Settings without losing account access.
4. Sharing With Third Parties
We share only what is strictly necessary for a service to work.
We never sell your data.
Restaurants / stores you order from receive your name, phone (for coordination) and delivery address
The assigned delivery partner sees the same, plus a live route
Razorpay processes payment authorisation on our behalf (see razorpay.com/legal)
SMS provider(s) receive your phone number to deliver OTPs
Regulators or law-enforcement, when required by law under a written request
5. Data Retention
Order and invoice records: retained for 7 financial years to comply with GST / income-tax rules
Address book & wallet balance: until you delete your account
OTP logs & authentication attempts: 90 days
Diagnostic crash logs: 30 days
You can request deletion of non-mandatory data at any time from Profile → Delete account
6. Your Rights (DPDP Act, 2023)
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:
Access — see the data we hold about you
Correct — update inaccurate profile information
Erase — delete your account and non-mandatory data
Withdraw consent for optional processing (analytics, marketing) at any time
Nominate a person to exercise these rights on your behalf
Grievance redressal — write to our DPO within 30 days for any complaint
7. Security
We use industry-standard controls: encrypted transport (TLS 1.2+), hashed authentication
tokens, restricted employee access on a need-to-know basis, and regular vulnerability
reviews. No system is fully secure — please keep your phone and login credentials safe.
8. Children
1APPONLY is not directed at children under 18. We do not knowingly collect personal
information from minors. If you believe a minor has an account, please write to us
and we will remove it.
9. Notifications & Marketing
Transactional notifications (order status, payment, refunds) cannot be disabled
while an order is active — they are essential. Promotional notifications can be
turned off any time from device Settings → 1APPONLY → Notifications.
10. Cookies & Similar Tech
The mobile app does not use browser cookies. We store a secure session token
on-device using platform-secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).
11. Changes to This Policy
We may update this policy from time to time. Material changes will be highlighted
in-app and, where required, we will seek fresh consent.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023,
our Grievance Officer can be reached at the contact details below. We aim to
acknowledge complaints within 24 hours and resolve them within 15 working days.