Privacy Policy

Who we are

Jhundo (jhundo.com and the Jhundo Android and iOS apps) lets neighbours in a housing society buy together at team prices and pick up orders from a drop point in their society. This policy explains what personal data we handle and why.

What we collect

• Phone number: to create your account and log you in with a one-time password (OTP).
• Name (optional): shown to your team; other buyers only ever see your first name.
• Your society: the drop point where your orders are delivered.
• Orders and payments: what you bought, amounts, refunds and pickup codes. We do not receive or store your card, UPI or bank details; Razorpay handles those.
• Support messages you send us.
• Sellers only: business name, GSTIN, PAN and the documents you upload, to verify your business before you can sell.

Location

If you tap “Use my current location” in the app, your phone’s approximate location is used on your device only to find the nearest society. It is not sent to our servers or stored by us. You can deny or revoke the location permission at any time and choose your society by hand.

What we do not collect

No ads, no advertising IDs, no analytics or tracking SDKs, no contacts, photos or files from your phone (except documents a seller chooses to upload). We do not sell your data.

How we use it

• To run your account, process orders, payments and refunds, and deliver to your drop point.
• To send order and OTP messages by SMS.
• To answer support requests and prevent fraud or misuse.
• To meet legal, tax and accounting obligations.

Who we share it with

• Razorpay: payment processing and refunds.
• SMS provider (MSG91): to deliver OTPs and order messages to your phone number.
• The seller and your society’s drop-point host: only what they need to fulfil and hand over your order.
• Hosting and storage providers (Railway, Vercel, Cloudinary) that run our servers and store uploaded images and documents on our behalf. Their servers may be outside India.
• Authorities, when the law requires it.

Security

All data is sent over encrypted connections (HTTPS). Your login token is kept in the app’s private storage on your phone (or your browser’s storage on the website) and is excluded from device backups.

How long we keep it, and deleting your account

We keep your data while your account is active. You can delete your account at any time in the app (Me → Delete account) or on jhundo.com/delete-account. Your phone number, name and support messages are erased immediately. Order and payment records are kept without your name or phone number, only as long as Indian tax law requires. If you can’t log in, ask us via Help & support and we will delete it within 30 days.

Children

Jhundo is meant for adults (18+). We do not knowingly collect data from children.

Changes and contact

If we change this policy we will update this page and the date at the top. For any privacy question, reach us through Help & support.