Legal
Privacy Policy
How NammaRaidu collects, uses, and protects your personal information across all services.
Last updated: June 2025
This policy covers all NammaRaidu apps and services:
Services included:
By using any of these services, you consent to the data practices described in this policy.
Who We Are
NammaRaidu is a multi-service mobile platform based in Ariyalur, Tamil Nadu, India. We connect customers with local restaurants, grocery stores, laundry service providers, bike taxi riders, and parcel delivery agents. This Privacy Policy explains how we collect, use, store, and protect your personal information across all our services — including the NammaRaidu User App, NammaRaidu Rider App, and our website (nammaraidu.com).
Information We Collect
We collect the following categories of information when you register, place an order, or use our platform:
Account Information
- Full name and mobile number (required for all users and riders)
- Email address (optional)
- Profile photo (optional — uploaded by you, stored on AWS S3)
- Password (hashed using bcrypt — never stored in plain text)
- Vehicle details for riders: vehicle type, registration number, category, and AC availability
- Bank / UPI details for riders (for earnings withdrawal — not shared with customers)
- Government ID / driving licence uploaded by riders for verification (stored securely)
Order & Transaction Information
- Food orders: items ordered, restaurant name, delivery address, special instructions, order value
- Grocery orders: items, quantities, preferred store, delivery address
- Laundry orders: clothing types, service type (wash / dry clean / iron), pickup and delivery addresses
- Bike taxi trips: pickup location, destination, vehicle category, AC preference, fare paid, OTP for boarding
- Parcel delivery: sender and receiver details, parcel category (document / fragile / general), pickup and drop addresses
- Payment method used: cash or in-app wallet (we do not store card or bank account numbers)
- Wallet transaction history: credits, debits, and withdrawal requests
- Order history, delivery OTPs, and rating/review data
- Cancellation reason when an order is cancelled
Location Information
- Your current location — to auto-fill pickup address and show nearby restaurants, stores, and services
- Pickup and drop-off coordinates for every order
- Rider live GPS location during active deliveries and trips — shared with the customer on the tracking screen
- Background location for the Rider App — collected only when a rider has accepted and is actively on an order
- Background location collection stops immediately when the order is delivered, completed, or cancelled
Device & Technical Information
- Device model, operating system version, and app version
- Firebase Cloud Messaging (FCM) token — for push notifications about order status
- App usage data and crash reports — used for debugging and performance improvement (anonymised)
- IP address and browser type — collected on the website only
- Language and region settings
Contact Form (Website only)
- Name, phone number, email address (optional), subject, and message — submitted via the Contact Us page
- Used solely to respond to your inquiry
- Retained for 1 year and not used for marketing
How We Use Your Information
Your information is used exclusively to deliver, improve, and support our services:
User App
- Food Delivery: relay your order to the restaurant, assign a delivery rider, and provide real-time tracking
- Grocery Delivery: forward your order to the partner store and coordinate pickup and delivery
- Laundry Service: schedule clothing pickup from your address and return after cleaning
- Bike Taxi: match you with the nearest verified rider, calculate fare based on distance and category, enable live map tracking
- Parcel Delivery: assign a pickup rider, share OTP with recipient to confirm delivery
- Send order status push notifications and SMS alerts
- Manage your wallet balance, process refunds, and record transactions
- Display your saved addresses at checkout for faster ordering
- Show your order history and allow you to reorder or rate past services
Rider App
- Match riders with nearby orders based on GPS location, vehicle type, and active service types
- Share trip details (pickup address, drop address, customer name, phone) with the assigned rider
- Enable live location sharing with the customer during an active trip
- Calculate rider earnings per order based on fare minus platform commission
- Process withdrawal requests from rider wallet to their registered UPI or bank account
- Track rider performance metrics: ratings, completed orders, cancellation rate
- Send push notifications for new order requests, assignment updates, and payment credits
- Verify rider identity and documents during onboarding
All Platforms
- Detect and prevent fraudulent activity, fake accounts, and coupon misuse
- Improve app features based on anonymised usage patterns
- Resolve customer and rider disputes using order records
- Comply with applicable Indian laws and respond to lawful government requests
- Send service-related communications (not promotional) unless you opt in
Location Data — Detailed Disclosure
We collect and use location data differently across our two apps. This is disclosed in full below as required by Google Play Store policy:
User App — Foreground Location Only
- Location permission is requested when you open the app or start a new order
- Used to auto-detect your current address for pickup/delivery
- Used to show nearby restaurants, grocery stores, and laundry services
- Used to display the rider's live position on the order tracking map
- We do NOT collect your location in the background — once the app is closed or the order is completed, no location data is collected
- You may deny location permission and enter your address manually — all services remain accessible
Rider App — Background Location (Active Orders Only)
- Background location is required for the Rider App to function correctly during active deliveries and trips
- Background location collection starts only when the rider accepts an order and taps "Go Online"
- Live GPS coordinates are transmitted to our server every few seconds to update the customer's tracking screen
- Background location collection stops automatically when: the order is delivered or completed, the order is cancelled, or the rider goes offline
- Location data is used for: route display on map, distance-based fare calculation, and order assignment to nearest rider
- Riders can revoke location permission at any time from device Settings → Apps → NammaRaidu Rider → Permissions. This will prevent order acceptance.
- Background location is never used for advertising, profiling, or any purpose outside active order management
Information Sharing
We do not sell, rent, or trade your personal data to any third party for commercial purposes. We share information only as strictly necessary to operate our services:
- With the assigned rider: customer name, phone number, pickup and delivery address — shared only for the duration of the active order
- With the restaurant or grocery/laundry store: order items, delivery address, and special instructions — shared to fulfill your order
- With the customer: rider name, phone number, vehicle number, and live GPS location — shared only during an active trip or delivery
- With AWS (Amazon Web Services): profile photos and rider documents are stored on S3. AWS does not access your data for their own purposes.
- With Firebase (Google): phone number for OTP authentication; FCM token for push notifications. Subject to Google's Privacy Policy.
- With Google Maps Platform: pickup/drop coordinates and routes are processed to display maps and calculate distances. Subject to Google's Privacy Policy.
- With payment processors (if applicable): limited transaction data required to process digital payments
- With law enforcement or regulatory authorities: when required by a valid court order, government directive, or applicable Indian law (IT Act 2000, DPDP Act 2023)
- With our internal support and operations teams: for resolving disputes, investigating fraud, and improving service quality
- We never share your data with advertisers or data brokers
Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected:
- Active account data: retained for the lifetime of your account
- Order history: retained for 3 years for legal, tax, and dispute resolution purposes
- Rider GPS trip logs: retained for 90 days then permanently deleted
- Rider documents (licence, vehicle RC): retained while the rider account is active; deleted within 30 days of account closure
- Contact form submissions: retained for 1 year
- Push notification tokens (FCM): updated with each app login; old tokens are discarded
- After account deletion: all personal data is anonymised or deleted within 30 days, except where retention is legally required (e.g. financial records under GST law)
Data Security
We implement technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- All data transmitted between the app and our servers uses HTTPS/TLS encryption
- Passwords are hashed using bcrypt — they are never stored or transmitted in plain text
- Profile photos and rider documents are stored on AWS S3 with private access controls — not publicly accessible by URL
- Firebase Authentication handles OTP-based login — phone numbers are verified by Google's secure infrastructure
- Our admin panel uses role-based access control — only authorised team members can access sensitive data
- API endpoints are protected with JWT authentication and rate limiting
- Regular security reviews are performed on our infrastructure
- In the event of a data breach that risks your rights, we will notify affected users within 72 hours as required by the DPDP Act 2023
Your Rights Under Indian Law
Under the Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Ask us to correct inaccurate, incomplete, or outdated information
- Right to Erasure (Right to be Forgotten): Request deletion of your account and all associated personal data
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer — we must respond within 30 days
- Right to Withdraw Consent: You may withdraw consent to location tracking, push notifications, or data processing at any time through app settings or by contacting us
- Right to Nominate: Under the DPDP Act, you may nominate another person to exercise your data rights in the event of your death or incapacity
- To exercise any of these rights, email us at support@nammaraidu.com with your registered phone number and the specific request
Children's Privacy
NammaRaidu is not intended for use by children under the age of 18. We do not knowingly collect personal information from minors. Our services — particularly bike taxi — require users to be adults. If a parent or guardian believes their child has registered on our platform, please contact us immediately at support@nammaraidu.com. We will delete the account and all associated data within 72 hours of verification.
Cookies & Website Tracking
Our website (nammaraidu.com) uses cookies and similar technologies. The mobile apps do not use browser cookies.
- Essential cookies: required for the website to load and function correctly — cannot be disabled
- Session cookies: maintain your login state while browsing the website — deleted when you close the browser
- Analytics cookies: help us understand which pages are most visited (data is fully anonymised — no personal information is collected)
- Preference cookies: remember your language selection and display settings
- We do NOT use advertising cookies, retargeting pixels, or tracking scripts that follow you across other websites
- You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect the mobile app or your ability to place orders
Third-Party Services & SDKs
NammaRaidu integrates with the following third-party services. Each processes data under their own privacy policies, which we link below:
- Google Maps Platform (Maps SDK, Places API, Directions API): used for address search, map display, live tracking, and route calculation. Google's Privacy Policy: policies.google.com/privacy
- Firebase Authentication (Google): used for phone number OTP login in both the user and rider apps. Firebase Privacy Policy: firebase.google.com/support/privacy
- Firebase Cloud Messaging (Google): used to send push notifications for order updates and new ride requests. Same Firebase Privacy Policy applies.
- AWS S3 (Amazon Web Services): used for secure storage of profile photos and rider documents. AWS Privacy Policy: aws.amazon.com/privacy
- Payment Gateways (if applicable): limited transaction data shared only as required to complete the payment. The respective gateway's policy applies.
- None of these third parties are permitted to use your data for their own advertising or marketing purposes under our agreements with them.
Data Transfers
NammaRaidu is based in India and your data is primarily stored and processed in India. Some of our third-party service providers (Google Firebase, AWS) may process data on servers outside India. When this occurs, it is governed by their data processing agreements and standard contractual clauses that ensure an equivalent level of data protection.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. We will notify you of significant changes through an in-app notification or by updating the "Last updated" date at the top of this page. For material changes affecting your rights, we will request fresh consent where required. Your continued use of NammaRaidu after the effective date of changes constitutes acceptance of the revised policy.
Grievance Officer
In accordance with the Information Technology Act 2000 and DPDP Act 2023, we have appointed a Grievance Officer. You may contact our Grievance Officer for any privacy-related concerns, data access requests, or complaints:
- Name: NammaRaidu Support Team
- Email: support@nammaraidu.com
- Phone: +91 97905 68221
- Address: Ariyalur, Tamil Nadu — 621 704, India
- Response time: We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.
- If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act 2023.
This Privacy Policy is compliant with the Information Technology Act 2000, Digital Personal Data Protection Act 2023, and Consumer Protection Act 2019. For questions, contact support@nammaraidu.com