Privacy policy

Information we collect

We only collect what is needed to run a delivery marketplace and to keep both sides of a delivery safe.

• Account details. Your name, email address and phone number. If you sign in with Google, we receive your name, email address and profile picture from Google — we never receive your Google password.
• Delivery details. Pickup and drop-off addresses, recipient names and phone numbers, parcel descriptions, weights and any photos you attach to a request.
• Verification details.If you apply to carry parcels, run errands or source products, we collect identity and vehicle documents so we can confirm you are who you say you are before you handle someone else's goods or money.
• Payment references. Amounts, payment references and confirmation status. We do not collect or store card numbers or mobile-money PINs.
• Messages and ratings. Messages you exchange with the other party on a delivery, and the ratings and reviews you leave.
• Technical details. Your IP address and browser information, recorded as part of security and rate-limiting logs.

How we use your information

• To create and secure your account, and to sign you in.
• To match parcels and errands with carriers and fetchers, and to show the other party what they need to complete the job.
• To hold payment in escrow and release it to the right person once a delivery is confirmed.
• To send transactional messages: verification codes, booking updates, delivery confirmations and receipts.
• To verify carriers, fetchers and runners, and to investigate reports of loss, damage or prohibited items.
• To detect and prevent fraud and abuse, including rate-limiting sign-in and verification attempts.

We do not sell your personal information, and we do not use it to serve advertising.

What other users can see

A marketplace only works if both sides know enough to trust each other, so some details are deliberately shared — but only at the point they are needed.

• While a parcel or errand is still open, browsing users see the route, approximate area, item description and price. They do not see your exact address or your phone number.
• Once a booking is confirmed, the carrier or fetcher and the sender see each other's first name, phone number and the precise pickup and drop-off addresses needed to complete the delivery.
• Your rating, review history and verification status are visible to users considering working with you.
• Anyone holding a tracking number can see that delivery's status and progress history. Tracking pages do not expose phone numbers or full addresses.

Service providers we share with

We use a small number of providers to operate the service. Each receives only what it needs to do its job.

• Supabase — hosts our database and handles authentication.
• Google — only if you choose to sign in with Google.
• Resend — delivers our transactional email.
• OpenStreetMap (Nominatim) — turns a place name you type into map coordinates. Requests are sent from our server, so your IP address is not shared with them.

We may also disclose information where we are legally required to, or where it is necessary to investigate fraud, prohibited items or a threat to someone's safety.

How we protect your information

• Data is encrypted in transit. Access to production data is restricted to the people who need it.
• Database access rules restrict every record to the users entitled to see it, rather than relying on the app alone to hide things.
• One-time codes are stored only as hashes and are never written to our activity logs in readable form.
• Our internal audit trail identifies people by a one-way hash rather than by storing raw email addresses or full ID numbers.
• Sign-in, verification and resend attempts are rate-limited to blunt brute-force attempts.

No system is perfectly secure. If we ever discover a breach affecting your personal information, we will tell you and take the steps required of us.

How long we keep it

• Account information is kept while your account is open.
• Delivery, payment and escrow records are kept after completion because we need them to resolve disputes and to meet financial record-keeping obligations.
• Verification documents are kept while your carrier, fetcher or runner status is active, and for a limited period afterwards.
• One-time codes and short-lived security logs expire automatically.

Your choices and rights

• You can view and update your name, phone number and addresses in your settings at any time.
• You can deactivate your account. We keep the delivery and payment records tied to completed jobs, as described above.
• You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete what we are not required to keep. Write to privacy@mytipkart.com.
• You can turn off non-essential notifications in your settings. We will still send you messages about deliveries you are part of, because they are part of the service.

Cookies

We use cookies and similar browser storage to keep you signed in, to remember which workspace you are acting in, and to hold an in-progress request so you do not lose it if you navigate away. We do not use advertising or cross-site tracking cookies, and the app loads no third-party analytics.

Children

MyTipKart is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us their information, contact us and we will remove it.

Changes to this policy

If we make a material change to this policy we will update the date at the top of this page and, where the change meaningfully affects you, tell you directly.