Privacy Policy

1. Introduction

This Privacy Policy explains how [Company Legal Name] ("PaperNest", "we", "us" or "our") collects, uses, shares and protects information when you use the PaperNest mobile application (the "App") and the website at [Website URL] (the "Website"), together the "Services".

By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 to the extent it is in force.

Before publishing: go through every section and delete anything the App does not actually do. This page must match your Google Play Data Safety answers and the Data Collection page.

2. Information we collect

The information we collect depends on how you use the Services. It falls into the categories below. We collect only what is needed to provide and improve the Services.

3. Information provided by users

You may give us information directly, for example when you:

create or update an account;
place an order or provide a delivery address;
contact us through the App, the Website contact form, email or phone;
submit a data deletion request.

This can include your name, email address, phone number, delivery address and the content of your messages to us.

Remove any item above that the App or Website does not collect.

4. Account information

If the App offers accounts, we store the details needed to create and manage your account, such as your name, email address and/or phone number, and a sign-in identifier. [Describe the sign-in method — e.g. phone number with OTP, email and password, or Google Sign-In — and the provider used, e.g. Firebase Authentication.]

We do not store your password in readable form. [Confirm with your authentication provider.]

5. Device and technical information

When you use the App, certain technical information may be collected automatically, such as device model, operating system version, app version, language settings and crash or diagnostic data. This helps us keep the App working and fix problems.

List only what is actually collected, including by SDKs (e.g. Firebase Crashlytics or Analytics). If nothing is collected, replace this section with a statement saying so.

6. Usage information

We may collect information about how you interact with the App, such as screens viewed, products browsed and features used, to understand what works and improve the Services. [Confirm whether in-app analytics are used, and name the provider.]

7. Location information, if applicable

[Choose one:] The App does not request access to your device's location. — or — The App requests access to your [approximate/precise] location only to [purpose, e.g. suggest a delivery address]. You can turn off location access at any time in your device settings.

Keep only the sentence that is true for the App.

8. Camera and storage permissions, if applicable

[Choose one:] The App does not request access to your camera or device storage. — or — The App asks for [camera/photos/storage] permission only when you choose to [purpose, e.g. upload a profile photo]. Files are used only for that purpose.

You can grant or withdraw permissions at any time in your device settings. Some features may not work without the relevant permission.

9. How we use information

We use information to:

provide, operate and maintain the Services;
create and manage your account;
process orders and arrange delivery, where applicable;
respond to your questions and support requests;
send service messages such as order updates [if applicable];
keep the Services secure and prevent fraud or misuse;
understand usage and improve the Services;
comply with legal obligations.

We do not sell your personal information.

We share personal information only as described here:

Service providers who help us run the Services (see below);
Delivery partners, who receive the details needed to deliver your order [if applicable];
Payment processors, who handle payments on our behalf [if applicable];
Legal and safety — when required by law, court order or a government authority, or to protect the rights, property or safety of PaperNest, our users or others;
Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

11. Service providers

We use trusted third parties to host data, authenticate users, process payments and provide technical services. They may process information only on our instructions and must protect it.

Current service providers: [List them, e.g. Google Firebase (hosting, database, authentication), payment gateway name, SMS/OTP provider].

12. Data security

We use reasonable technical and organisational measures to protect personal information, such as encrypted connections (HTTPS/TLS) [confirm] and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Data retention

We keep personal information only as long as needed for the purposes in this policy — for example, while your account is active — and as required by law. Order and transaction records may need to be kept for tax and accounting purposes for the period required by applicable law [confirm period with your accountant].

14. Children's privacy

The Services are intended for users aged 18 and over, or younger users with the involvement and consent of a parent or guardian. We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has given us personal data without such consent, contact us at [Privacy Email] and we will delete it.

Stationery apps often reach students. Decide your age policy and confirm it matches your Google Play target audience settings.

15. Third-party services

The Services may contain links to, or features provided by, third parties (for example payment gateways or social media sites). Their privacy practices are governed by their own policies, which we encourage you to read.

16. Cookies and similar technologies

The Website [does not use cookies for tracking or advertising / uses the following cookies: …]. It may store small preferences in your browser to make the site work. The App may use similar technologies, such as local storage or SDK identifiers, to keep you signed in and remember settings.

17. Your rights

Subject to applicable law, you can:

access the personal data we hold about you;
correct or update inaccurate information;
request deletion of your personal data;
withdraw consent where processing is based on consent;
nominate another person to exercise your rights in case of death or incapacity, where the law provides for it;
raise a grievance with us, and if unresolved, with the relevant authority.

To exercise these rights, email [Privacy Email]. We may need to verify your identity first.

18. Data deletion

You can ask us to delete your PaperNest account and associated personal data using our Data Deletion Request page or by emailing [Privacy Email]. Some information may be kept where required by law, for example transaction records for tax purposes. Details are on the Data Deletion page.

19. Changes to this Privacy Policy

We may update this policy from time to time. We will post the updated version here and change the effective date above. For significant changes, we will give additional notice, such as an in-app message.

20. Contact information

For privacy questions or requests, contact:

[Company Legal Name]
[Business Address]
Privacy: [Privacy Email]
Support: [Support Email]

Grievance Officer: [Grievance Officer Name], reachable at [Privacy Email].