Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Roz ("Roz", "we", "us", "our") collects, uses, shares, and protects personal data of customers and merchants who use the Roz mobile application and related services (the "Platform"). This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and other applicable Indian law.

By using the Platform, you consent to the collection and use of your personal data as described in this Policy.

1. Data We Collect

Category	Examples	Purpose
Account data	Name, phone number, email, password (hashed)	Account creation, authentication, login
Location data	GPS coordinates, delivery address, pincode	Showing nearby stores, calculating delivery distance and fee, routing deliveries
Order data	Items ordered, order value, order history, timestamps	Processing orders, order tracking, customer support, dispute resolution
Payment data	Payment method, transaction status (card/UPI details are handled by our payment processor, not stored by Roz)	Completing and verifying payments
Merchant data	Store name, address, GSTIN (if provided), bank account/payout details, product catalogue	Enabling merchant storefronts, processing payouts
Device & usage data	Device type, OS version, app version, crash logs	App performance, debugging, security
Communications	Support chat messages, notification preferences	Customer support, order updates

2. How We Use Your Data

To create and manage your account
To show you nearby merchants and enable ordering
To process, fulfil, and deliver orders
To calculate delivery distance, time estimates, and applicable fees
To facilitate payments and merchant payouts
To provide customer support and resolve disputes
To send order updates and service notifications
To improve the Platform, fix bugs, and ensure security
To comply with legal obligations

3. Who We Share Data With

We do not sell your personal data. We share data only as necessary to operate the Platform:

Merchants — receive your order details, delivery address, and contact number necessary to fulfil your order.
Delivery partners (e.g. Borzo) — receive pickup/drop-off addresses and contact details necessary to complete delivery.
Cloud infrastructure providers (Supabase) — store our application data on our behalf under contractual confidentiality and security obligations.
Payment processors — process transactions; card/UPI credentials are handled directly by the processor and are not stored on Roz's servers.
Law enforcement or regulators — where required by applicable law.

4. Data Storage & Security

Your data is stored on secure cloud infrastructure with access-control policies restricting who can view or modify it. Passwords are stored using industry-standard hashing. While we take reasonable technical and organisational measures to protect your data, no method of transmission or storage is 100% secure.

5. Data Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting, or dispute-resolution requirements. You may request deletion of your account and associated data at any time, subject to legal retention obligations (e.g. transaction records).

6. Your Rights

Under the DPDPA and applicable law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request erasure of your data, subject to legal retention requirements
Withdraw consent for optional data processing (e.g. marketing notifications)
Lodge a grievance with our Grievance Officer (below), or with the Data Protection Board of India

7. Location Permissions

Roz requests access to your device's location to show nearby stores and enable accurate delivery. You may disable location access via your device settings, but this will limit core functionality of the app (such as discovering nearby merchants).

8. Children's Privacy

Roz does not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

9. Cookies & Tracking

The Roz app may use local storage and analytics tools to remember preferences and understand app usage patterns, solely to improve the Platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the revised Policy.

11. Contact & Grievance Officer

For privacy-related queries, data access requests, or grievances, contact:

Grievance Officer
Roz
Email: privacy@roz.app
Response time: within 30 days