Privacy Policy

What we collect when you log in

• Your mobile number — this is how you log in. We send an OTP to it.
• Your name, if you give it.
• The addresses you save.
• Your orders and what you like to buy.

We never ask for your email or your date of birth. If any page ever asks you for a password, it is not us — we only use OTP.

What we collect even before you log in

You can use Locofly without an account, so some things are collected before we know who you are. They are tied to your phone, not to you.

• A device ID made the first time you open the app. We use it to remember which messages we have already shown you, so we do not show the same thing again and again. It goes away when you uninstall the app.
• Which screens you open and what you tap, so we can see where the app is confusing.
• Crash reports, so we can fix what broke.

Location

If you allow it, we use your location to:

• Find the Locofly store closest to you.
• Check whether we deliver to your address.
• Show you a realistic delivery time.
• Understand which areas our customers come from, so we know where to open the next store. We also keep the areas you search for in the address box, for the same reason.

This happens whether or not you are logged in. You can say no, or turn it off later in your phone settings — the app still works, and you can type your area instead.

Payments

Online payments go through Razorpay. Your card number and bank details go straight to them — they never touch our servers. We only keep the payment method (UPI, card, or cash) and the transaction ID.

Who we share it with

• Our delivery staff — your name, address, and phone, so they can reach you.
• Razorpay — to take the payment.
• AWS in India — this is where our servers and data live.
• The government or police — only when the law requires it.

We do not sell your data. We do not rent it. We do not trade it.

How we keep it safe

• Everything travels over an encrypted connection (HTTPS).
• Only staff who need your data to do their job can see it.
• Sensitive fields are stored encrypted.

No system on the internet is completely safe. We do everything we reasonably can, but we cannot promise the impossible.

What you can ask us to do

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• Show you what data we have about you.
• Correct anything wrong — you can also fix most of it yourself in Profile.
• Delete your account and your data. You can do this yourself from Profile → Delete Account.
• Stop sending you offers.
• Let someone else act for you on these rights.

To ask for any of this, write to business@locofly.in.

How long we keep it

While your account is open, we keep your data so the app works. After you delete your account we remove or anonymise it within 90 days.

One exception: bills and tax records. The law makes us keep those for 7 years, so we do.

Children

Locofly is for people 18 and over. We do not knowingly keep data about children. If you think we have, tell us and we will delete it.

Changes to this policy

If we change something important here, we will tell you in the app.

Contact

Questions, or something that does not look right? Write to business@locofly.in.