Privacy Policy
This policy primarily covers the Cravix customer app and public website operated by Cravix Food Delivery, a proprietor-operated business at Buchireddypalem, Nellore district, Andhra Pradesh 524305. It explains collection, use, sharing and your choices. Website partner-application data is also covered; partner-only app information is identified separately.
The Cravix customer app is awaiting Google Play approval and is not yet publicly available. The Cravix Merchant and Cravix Delivery Partner apps are not publicly available. Cravix gives them directly to approved partners, and only Cravix can create accounts for them.
1. Information we collect
Customers (Cravix app)
| Data | Why we collect it |
|---|---|
| Name, mobile number, email address (optional), profile photo (optional) | Create and secure your account, verify your number by one-time password (OTP), contact you about orders |
| Delivery addresses and their map coordinates | Deliver your orders and show stores that deliver to you |
| Precise and approximate device location (only with your permission) | Detect your current address and show nearby stores when you choose current location. You can instead search for an address or move the map pin without GPS permission. Saved address coordinates are still needed for delivery. |
| Orders, cart, reviews and ratings, support tickets | Fulfil orders, handle refunds and complaints, improve stores and riders |
| Payment method chosen (UPI or cash), order amounts, Cravix wallet balance and transactions, and coupons | Process payments, refunds and wallet credits. We do not store your UPI PIN or bank login. |
| Notification preferences and a push-notification token for your device | Send order updates and offers according to your notification preferences |
Merchants (Cravix Merchant app)
| Data | Why we collect it |
|---|---|
| Owner name, store name, phone number, email, username and password (stored hashed) | Create and secure the merchant account and contact the store |
| Store address and map location, opening hours, logo, banner and menu photos | List the store to customers and route deliveries |
| GST number, FSSAI licence number | Verify the business and meet legal and food-safety requirements |
| Payout requests and settlement history, including UPI transaction references | Pay the store its earnings |
| Crash and error reports from the app | Find and fix bugs |
Delivery partners (Cravix Delivery Partner app)
| Data | Why we collect it |
|---|---|
| Name, phone number, email, date of birth, address, emergency contact, profile photo, username and password (stored hashed) | Create and secure the account, contact you, and reach someone in an emergency |
| Driving licence, Aadhaar, vehicle type, number and model, and photos of these documents | Verify your identity and eligibility to deliver |
| Bank account number, IFSC code, UPI ID, earnings, wallet and payout history | Pay your earnings |
| Precise location while you are on duty or have an active delivery | Assign nearby orders, navigate, and show customers and stores where their delivery is |
| Duty shifts, deliveries completed, ratings and reviews | Run the delivery network and handle disputes |
People who apply to join (website forms)
| Data | Why we collect it |
|---|---|
| Name, mobile number, email (optional), city and area | Contact you about your application |
| Merchants: store name, store type and FSSAI number (optional). Delivery partners: vehicle type, whether you hold a driving licence, and preferred hours. | Assess whether we can work together in your area |
When you submit an application, your details go to our website host (Cloudflare), which stores the submission in our website database, where our team reviews it. We do not ask for identity documents on the website; our team collects and verifies them in person or by phone if your application goes ahead.
People who ask for launch updates (website form)
| Data | Why we collect it |
|---|---|
| Name (optional) and mobile number | Tell you when the Cravix customer app is available on Google Play |
Collected automatically from all apps
Device type, operating system and app version, login times, and technical logs that our servers record when the apps communicate with them. We use these for security, fraud prevention and troubleshooting.
2. How we use your information
- To provide the service: take orders, pass them to stores, assign riders, deliver, and take payment.
- To verify accounts with OTPs and keep them secure.
- To send order and account notifications, and offers according to your notification preferences. You can turn off Offers & promotions under Profile → Notifications.
- To provide customer support and resolve disputes.
- To pay merchants and delivery partners.
- To detect fraud and abuse and to meet legal, tax and accounting obligations.
- To understand how the service is used and improve it.
We do not sell your personal data.
3. Who we share it with
- Stores and riders, to complete your order. The store receives your name, order and delivery instructions. The rider assigned to your order receives your name, phone number and delivery address. Customers and stores can see the assigned rider's name and location during the delivery.
- Service providers who process data on our behalf:
- Google (Firebase Cloud Messaging for notifications, Google Maps for maps and location)
- Twilio to send OTPs
- Cloudinary to store images such as store photos, profile photos and documents
- Amazon Web Services (AWS) for backend hosting and MongoDB for the database
- Sentry to collect crash and error reports from the Cravix Merchant app
- Cloudflare to host this website and store the forms submitted on it
- Authorities, when the law requires us to or to protect the rights, property or safety of our users or the public.
- A buyer or successor if Cravix is involved in a merger, acquisition or sale of assets, under this same policy.
Website hosting and resources
Cloudflare hosts this website. Hosting requests may generate technical access and security logs. The website’s fonts are served from our own site, so loading a page does not contact Google. To stop automated spam, the website’s forms are checked by Cloudflare Turnstile, which looks at technical information from your browser and does not use advertising cookies. Forms you submit on the website are stored by Cloudflare.
4. How long we keep it
We keep account data while your account is active. A successful customer-account deletion immediately anonymises the profile and removes its identifying contact details, saved addresses and session/device tokens. Order and financial records may be retained for up to 8 years for accounting, tax and disputes; fraud and security records may be retained for up to 1 year. A protected phone fingerprint can be retained for re-registration controls. See account deletion.
Website application details are used to assess and respond to your application. Launch-update details are deleted once we have told you the app is available. Contact us to withdraw an application or to have your details removed sooner. Detailed partner-app retention arrangements are separate from the customer-account deletion process.
5. Security
Data travels between the apps and our servers over encrypted HTTPS connections. Passwords are stored hashed, and login tokens are kept in secure storage on your device. Access to personal data inside Cravix is limited to staff who need it. No system is perfectly secure, and we will notify you and the authorities of a data breach where the law requires it.
6. Your rights and choices
You can contact us to exercise the following choices and any rights available under applicable data-protection law:
- ask for a summary of the personal data we hold about you;
- correct or update it (most of it you can edit yourself in the app);
- delete your account and personal data;
- withdraw consent, such as location permission (in your phone settings) or promotional notifications (in the app);
- nominate someone to exercise these rights if you die or are unable to;
- raise a complaint with our Grievance Officer and seek further remedies available under applicable law.
To use any of these rights, email cravixdeliveries@gmail.com from, or mentioning, the phone number registered with your account.
7. Children
Cravix is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
8. Changes to this policy
If we change this policy we will update the effective date above, and for significant changes we will tell you in the app before they take effect.
9. Contact and Grievance Officer
Shaik Nayab, Grievance Officer
Business structure: proprietor
Cravix Food Delivery
Buchireddypalem, Nellore district, Andhra Pradesh 524305
Email: cravixdeliveries@gmail.com
We aim to resolve order-related complaints within 2–3 hours during support hours and other complaints within 1–2 working days.
Phone: +91 72077 44006
Support hours: 7:00 am to 10:00 pm IST, seven days a week.