GullyFynd ("we," "us," "our") operates the GullyFynd buyer app, seller (partner) app, and website, connecting you to local stores near you for hyperlocal shopping and delivery. This policy explains what information we collect, why, and how it's handled.
Information we collect
- Phone number — used to sign you in via OTP (one-time password) verification through Firebase Authentication. This is required to use the app.
- Profile details — name, email, and birthday, if you choose to add them in your profile.
- Location — your device's GPS location, used to show you nearby stores, calculate delivery distance, and determine store serviceability. Location access is optional but required for core app features like browsing nearby stores.
- Order & delivery information — items you order, delivery address, and order history, used to fulfill and track your orders.
- Payment information — payments are processed directly by Razorpay, our payment gateway partner. We do not store your card, UPI, or bank account details on our servers — Razorpay handles that in line with their own security and compliance standards.
- Photos — if you upload a profile photo or a photo on a post, it's stored via Firebase Storage.
- Date of birth and age group — used to give people under 18 a safer, limited version of the app.
- Things you post — Neighbourhood board posts and replies, reviews, Ask nearby requests, event listings and chat messages. Posts are visible to signed-in people within the distance you choose. A property rental listing shows the exact location you set on its page; every other post only shows an approximate distance band such as "within 3 km".
- Check-ins, saved shops and activity — places you check in at and shops you save, used for features such as Places I've Been and your For you feed.
- Questions to IsHa — what you ask the assistant is sent to Google's Gemini AI service to produce an answer. We keep a short record to limit usage and improve it.
- Device and crash information — error logs, app version and push notification tokens, used to keep the app working and send notifications you allow.
- Your agreement — when you sign in we record that you agreed to the Terms, Privacy Policy, Community Guidelines and this data notice, with the version and the time.
- Seller business details — if you register a store on the seller (partner) app, we collect your business name, address, phone number, GSTIN, and bank account details for payouts, used to verify and operate your store on the platform.
How we use your information
- To create and manage your account
- To show you relevant nearby stores and products
- To process and deliver your orders
- To communicate with you about your orders or account
- To improve the reliability and safety of the app
Who we share information with
- Sellers — when you place an order, the relevant store owner sees your order details, delivery address, and contact number to fulfill it.
- Firebase / Google Cloud — our backend infrastructure provider, used to store account, order, and app data securely.
- Google (Gemini AI, Maps and Places) — to answer IsHa questions and to search for places and addresses.
- Meta (WhatsApp Cloud API) — to send sign-in codes and order messages to your WhatsApp number when you choose that option.
- Other people on GullyFynd — what you post is shown to others as described above. Replies stay inside the app and your phone number is not shown to other users.
- Razorpay — our payment processor, used to handle payments securely.
- Delivery partners — your delivery address and contact number are shared with the courier assigned to your order, solely to complete delivery.
- GSTIN verification service — if you register as a seller, your GSTIN is checked against a third-party GST lookup service to verify it's valid. GSTIN is public government business registration data, not sensitive personal information.
We do not sell your personal information to third parties.
Data retention
We retain your account and order data for as long as your account is active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Neighbourhood board posts expire on their own and are deleted shortly after. Records of your agreement to these documents are kept as proof of consent.
Your choices
- You can edit or update your profile information at any time from the app.
- You can revoke location access at any time through your device settings — some features may not work without it.
- You can delete your account and data at any time — see how to delete your account.
Children's privacy
GullyFynd is meant for adults. People under 18 may use a limited version only with a parent or guardian's permission: they cannot post or reply on the Neighbourhood board, some categories (such as pharmacies and clinics) are hidden from them, and we do not use their information for advertising. A parent or guardian can ask us to correct or delete a child's information at any time by emailing us.
International data transfers
Your information is stored and processed on Google Cloud (Firebase) servers, and sent to the services named above. These servers can be located outside India, including in the United States. By agreeing at sign-in you consent to this transfer. We choose providers that protect data with encryption and access controls, and we share only what each service needs.
Your rights
Under India's Digital Personal Data Protection Act, 2023, and similar laws such as the EU/UK GDPR and California's CCPA/CPRA where they apply to you, you can:
- ask what information we hold about you, and get a copy;
- correct or update it;
- delete it (see delete your account) or limit how we use it;
- withdraw your consent, which may mean you can no longer use parts of the app;
- object to certain uses, and complain to us or to the relevant data protection authority;
- nominate someone to exercise these rights for you if you cannot.
We do not sell your personal information and do not share it for advertising. Email contactus@gullyfynd.com and we will respond within 30 days.
Security and breaches
We protect data with encryption in transit, restricted access, and extra safeguards for sensitive seller details such as bank information. If a breach affects your personal information we will tell you and the authorities as the law requires.
Grievance Officer
Grievance Officer, Aard Innovations Pvt Ltd: contactus@gullyfynd.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact us
Questions about this policy or your data? Email us at contactus@gullyfynd.com.