Privacy Policy

01Who we are and what this Policy covers

This Policy explains how B4Bharat Reltech Private Limited (36/5, Hustlehub Tech Park, Somasundarapalya Main Rd, adjacent 27th Main Road, ITI Layout, Sector 2, HSR Layout, Haralukunte Village, Bengaluru, Karnataka 560102) handles personal data when you use B4Bharat Ghar — the Ghar portal of the B4Bharat app, the Ghar pages of b4bharat.com, and the WhatsApp messages and SMS login codes we send you about Ghar. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary and you are the Data Principal.

It reads with the Ghar Terms of Service. Business use of B4Bharat is covered by the B4Bharat Privacy Policy, and cookies on the website by the Cookies Policy.

02What we collect

Location. We use the pincode you give us to check delivery. On the first screen (name and WhatsApp number) the app asks for permission to use your location while the app is open. If you allow it, your phone works out your approximate city and state, and only those two are sent to us with your answers — never your exact position. If you say no, we estimate your state and city from your IP address. Ghar works the same either way, and you can turn location off for the B4Bharat app in your phone’s settings at any time.

We collect this from you, automatically from the app, from Razorpay (payment status) and from the seller and delivery partners (delivery status). Ghar does not ask you for identity documents.

03Why we use it

We process your data on the basis of the consent you give when you accept the Terms and this Policy, and the legitimate uses the DPDP Act allows, such as fulfilling an order you placed or meeting a legal duty. In detail:

• Your account, orders and delivery, payments and refunds, order messages and support — the data you give us for that purpose (section 7(a) of the DPDP Act) and the consent you give at sign-up.
• Safety and fraud prevention, and improving Ghar — your consent.
• Measuring app installs and ads, and promotional notifications — your consent, which you can withdraw at any time (see Your rights).
• Legal duties — to meet our obligations under law and to comply with orders of courts and authorities (sections 7(d) and 7(e) of the DPDP Act).

This Policy is the notice the DPDP Act requires. You give your consent when you accept the Ghar Terms and this Policy at sign-up, and you can withdraw it as easily as you gave it.

Promotions. You can turn off push notifications from the B4Bharat app in your phone’s settings at any time. Ghar may send offers and product news as push notifications and in the app’s notification inbox. The app has no separate switch for offers yet, so turning off notifications also stops order updates by push; order updates still reach you on WhatsApp. We do not send promotional WhatsApp messages or SMS for Ghar. If we start, we will ask for your consent first, and every such message will tell you how to stop it.

04Who we share it with

The seller of your order

The seller who fulfils an order receives the delivery name, phone number, address, pincode and delivery notes, with the items ordered, so it can pack, ship and deliver. The seller may pass these to its courier or delivery partner for that delivery only. The seller and its delivery partner may use these details only to deliver that order and to handle a return or complaint about it. They must keep them confidential and must not use them for marketing or pass them on for any other purpose.

Your linked Sarthi (only if you link a code)

A Sarthi you link sees your first name, city, a masked phone number, how many orders you have placed, the date of your last order, your orders’ status and amounts, and your total spend. A Sarthi never sees your full phone number or your address. They also see your district, whether you are in their territory, and an activity label (active, slipping or dormant) worked out from the date of your last order. For each order placed while you are linked to them, they see its order number, date, status and amount and their commission on it — not your name on that order. A Sarthi never sees your email either.

Service providers

These are all the providers that receive Ghar customers’ personal data today; we update this list when it changes. Each provider may use your data only to provide its service to us. We use them under written contracts that let them use your data only on our instructions and require them to keep it secure and confidential.

Others

• Authorities — when the law requires it, for example a court order or a lawful request from a government agency.
• Professional advisers — auditors and lawyers, under a duty of confidentiality.
• A buyer of our business — if B4Bharat is merged or sold, with this Policy continuing to protect your data.

We do not sell your personal data.

05Meta SDK and app tracking

• The B4Bharat app includes the Meta (Facebook) SDK. It sends Meta device identifiers and app events (for example that the app was installed or opened) so that we can measure our advertising on Meta’s services.
• On iPhone, tracking needs your permission under Apple’s App Tracking Transparency, and you can change it in Settings at any time. On Android you can reset or delete your advertising ID in your phone’s settings.
• Meta processes this data under its own privacy policy, and may do so outside India.
• The SDK starts when the app opens and logs automatic app events (such as install, app open and session length), with your device’s advertising ID where it is allowed to.
• If you decline tracking on iPhone, the app tells the SDK not to use your advertising ID; app events are then sent without it. On Android there is no prompt in the app: the advertising ID is sent unless you delete it or opt out of ads personalisation in your phone’s Google settings.
• We do not send Meta your name, phone number, email, address or what you buy.

06How long we keep data, and how we protect it

• While your account is open we keep your account, addresses and order history so you can use Ghar.
• After you delete your account, your account profile, login phone number and email, and saved address book are anonymised once the 30-day window ends (see Deleting your account).
• Order records — each order, including the delivery name, phone number, address, pincode and notes saved on it, and the tax and GST, payment and refund records — are kept for eight years from the end of the financial year in which the order was placed, the period the Companies Act, 2013 and GST law require for accounts and tax records, including after you delete your account. The seller of an order can still see that order’s delivery details in its order list.
• Details from before sign-up (the name and WhatsApp number from the first screen, and the approximate city and state) are kept for up to 90 days if you do not finish signing up, so that our team can help you complete it. Deleting your account does not remove them automatically: ask the Grievance Officer and we will erase them.
• App analytics events (screens, searches and product views) are kept for 180 days. They are deleted month by month, so some last up to about seven months; after that we keep only daily totals that do not identify anyone. Server and security logs are kept for at least 180 days, as the CERT-In directions require, and for no more than one year.

Security. Data travels between the app and our servers over encrypted connections (HTTPS), and access inside B4Bharat is limited to the people who need it. Login codes (OTPs) are stored only in scrambled (hashed) form, expire after two minutes and stop working after five wrong tries; login sessions are stored in hashed form too. Our logs hide phone numbers (only the last four digits show) and other sensitive values. Staff see only what their role allows, and important admin actions are recorded in an audit log. Files we store on Amazon S3 are encrypted at rest by AWS, and your card, UPI and netbanking details never reach us: Razorpay handles them. No system is perfectly secure: keep your OTP private.

Where data is stored. We host Ghar on Amazon Web Services; our database and stored files are kept in AWS’s Asia Pacific (Hyderabad) region in India (ap-south-2). Some providers, such as Meta, Expo and Google, may process data outside India; we transfer data only to countries the Government of India has not restricted under the DPDP Act.

Breaches. If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act and its Rules require.

07Your rights

• Access — ask for a summary of the personal data we hold about you, how we use it and who we have shared it with.
• Correction and update — edit your name, email and pincode in Account → Mera profile and your addresses in Account → Mere address, or ask us.
• Erasure — delete your account (see Deleting your account) or ask us to erase data we no longer need.
• Withdraw consent — at any time, as easily as you gave it. This does not undo processing already done; data needed for orders already placed or required by law is still kept, and without consent you may no longer be able to use Ghar.
• Nominate someone to use these rights for you if you die or cannot act.
• Grievance redressal — complain to us first (see Grievance Officer), then to the Data Protection Board of India.

To use a right, write to the Grievance Officer. We check your identity first and reply within the time the law sets. You can make most changes yourself in the app (Account); send any other request to the Grievance Officer by email or WhatsApp (contact details below). We acknowledge a request within 48 hours and answer it within 30 days, and never later than the 90 days the DPDP Rules, 2025 allow.

08Deleting your account

1. Open the account menu in the B4Bharat app.
2. Tap Delete Account (at the bottom, under Logout) and confirm.

• Your account is scheduled for deletion and you are logged out. Nothing is deleted for 30 days: log in again within 30 days to keep your account.
• After 30 days your account profile, login phone and email, and saved address book are permanently anonymised, any pending portal-switch request is cancelled, and all your logins are ended.
• Your orders are not anonymised. Each order keeps the delivery name, phone number, address, pincode and notes it was placed with, and those records, with the tax, payment and refund records, are kept for eight years from the end of the financial year of the order, as company and tax laws require. The seller of an order can still see its delivery details (see Retention).
• Open orders and pending refunds: deleting your account does not cancel an order you have already placed or stop a refund that is due. The order is still delivered, or cancelled under the Ghar Terms, and any refund still goes back to your original payment method. Its records are then kept as described above and deleted when the legal period ends.
• No app? See b4bharat.com/account-deletion for other ways to ask.

09Children

Ghar is for people aged 18 and over. We do not knowingly collect personal data from children, and we do not track children or target advertising at them. If you believe a child has given us personal data, write to the Grievance Officer and we will delete it. Under section 9 of the DPDP Act, using a child’s personal data needs the verifiable consent of a parent or lawful guardian. Ghar does not offer accounts to children and does not collect that consent, so you must be 18 or older to sign up. If we learn that an account belongs to a child, we close it and delete its data, except records the law requires us to keep.

10Grievance Officer and contact

For any question about this Policy, to use your rights, or to complain:

We acknowledge a complaint within 48 hours and aim to resolve it within one month of receiving it. That is well within the 90 days the DPDP Rules, 2025 allow for answering a grievance; if a complex case needs longer than a month, we tell you why, and we never take longer than 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.

11Changes to this Policy

• This Policy and the Ghar Terms of Service always share one version number (G-1.0 today). A change to either page gives both a new version.
• We publish every change here with a new version and effective date, and tell you about material changes in the app or on WhatsApp at least 15 days before they take effect. Where a change needs your fresh consent, we ask for it in the app.
• This Policy is in English. On request we provide it in Hindi or in any other language listed in the Eighth Schedule to the Constitution of India: write to the Grievance Officer.