Privacy Policy

Version 1.3 · Last updated: 16 October 2026

This policy explains what personal data Bhejjo collects through its mobile app and website, why we collect it, who we share it with, and the choices you have. It applies to customers, sellers, delivery partners and other users of the Bhejjo platform.

1. Information we collect

Information you give us

• Account details — name, mobile number, and email address if you provide one.
• Delivery addresses — address lines, locality, city, PIN code, and an optional label such as Home or Office.
• Order information — products ordered, prices, applied discounts, and delivery preferences.
• Service requests — device details, fault description, and warranty information when you raise a service claim.
• Content you post — product reviews, ratings and questions.
• Business details — if you register as a seller, delivery partner or institute: shop name, address, identity and bank or UPI payout details.

Information collected automatically

• Device and app data — device model, operating system version, app version, and a device identifier used for push notifications.
• Usage data — screens viewed, products browsed, and actions taken in the app, used to improve the product.
• Crash reports — diagnostic data when the app fails, so we can fix it.
• Approximate or precise location — only if you grant permission, and only to suggest your delivery city and to help delivery partners reach you.

What we do not collect

We do not collect card numbers, CVV, UPI PIN or net-banking credentials. Orders are paid on delivery, by UPI or another online method — never in cash. We record only the payment reference (for example the UPI transaction number) so the payment can be matched to the order. Card and gateway payments are processed by a regulated payment gateway; card details are handled by that gateway, not stored by Bhejjo.

2. Why we use your data

3. Who we share it with

We share only what is necessary, and never sell your personal data.

• Sellers — receive your name, phone number and delivery address for orders placed with them, so they can pack, invoice and service your order.
• Delivery partners and local partners — receive your name, phone number, address and a delivery verification code, only for your active order.
• Service partners — receive the details needed to collect, repair and return your device.
• Education partners (EdueCard) — a coaching institute or study library receives your name, mobile number, city and area, and what you want to study, only for the specific partners you add to your EdueCard, and only when you confirm that share. Creating an EdueCard on its own sends nothing to anyone. See clause 11 of our terms.
• Google (Firebase) — our technology provider for database, file storage, sign-in, push notifications, analytics and crash reporting.
• Authorities — where disclosure is required by law, court order, or to protect the rights and safety of users.

If Bhejjo is ever merged with or acquired by another business, your data may transfer to that entity, and we will notify you before it becomes subject to a different policy.

4. Where your data is stored

Data is stored on Google Cloud infrastructure in the asia-south1 (Mumbai) region. Some processing by our service providers may take place outside India; where that happens, we rely on the provider's contractual safeguards for cross-border transfers.

5. How long we keep it

• Account data — while your account is active, and until you ask us to delete it.
• Order, invoice and tax records — retained for the period required by Indian tax and accounting law, typically up to 8 years, even after account deletion.
• Service records — for the duration of the applicable warranty plus 1 year.
• EdueCard consent records — the record of what you agreed to share, and when, is kept even after you delete your EdueCard. It is the proof that a share was authorised while it ran, so erasing it would remove your own evidence as well as ours.
• Crash and analytics data — retained on a rolling basis by our providers, typically no more than 14 months.

6. Your rights and choices

• Access and correction — view and edit your profile and addresses in the app, or write to us.
• Deletion — request deletion of your account and associated personal data. See Delete your account.
• Withdraw consent — turn off location or notification permissions at any time in your device settings. Some features will stop working.
• Grievances — contact our Grievance Officer, listed on the Contact page. We acknowledge complaints within 48 hours and aim to resolve them within one month.

To exercise any of these, write to support@bhejjo.com from the email address or with the mobile number registered on your account, so we can verify the request is genuinely yours.

7. Security

Data in transit is encrypted using TLS. Access to production systems is restricted to authorised personnel. Sign-in uses one-time passwords sent to your mobile number rather than stored passwords. No system is perfectly secure, so we ask you not to share your OTP with anyone — Bhejjo staff will never ask for it.

8. Students and age

Shopping, selling and delivery on Bhejjo are for people aged 18 and over. EdueCard is the exception, because school and coaching students are often younger, and we would rather serve them properly than pretend they are not there.

We do not ask a student's age. An EdueCard is only an admission enquiry, so it is open to every student, and the institutes a student adds are given that student's own name and mobile number.

We record what was agreed, when, and under which version of the notice, and the student can stop the sharing at any time from the My EdueCard screen. If a parent or guardian wants their child's details removed, or you believe a child's data has reached us in some other way, write to us and we will delete it.

9. Changes to this policy

We may update this policy. The "last updated" date above always reflects the current version, and material changes will be notified in the app.

10. Contact