ChocoMart Customer Privacy Policy
Effective and last updated: 15 August 2026
This policy explains how Bombay Store handles information when you use the ChocoMart customer app (com.bombaystore.customer).
Information we handle
| Information | How it is used |
|---|---|
| Mobile number and name; optional email, date of birth, gender, and referral code | To create and manage your customer profile, recognize you, provide referral benefits, and contact you about your account or orders. |
| Delivery address, including label, street, area, and city | To calculate applicable pricing, fulfill and deliver orders, and let you reuse saved addresses. |
| Precise location coordinates | Only when you tap “Use my current location.” The app uses location to suggest an address and saves the coordinates with that address. You can enter an address manually instead. |
| Orders and purchase history | Order number, products, quantities, prices, cashback, delivery status, delivery address, and timestamps are used to fulfill orders, show history, manage stock, and provide customer service. |
| Device push token and notification permission | To send operational or promotional notifications when you allow notifications. |
| Verified Firebase authentication identifier | To securely authorize access to your customer profile and account features after mobile-number verification. This technical identifier is linked to the customer profile identifier used by the app. |
| Locally stored session, cart, and notification-read time | To keep you signed in, remember your cart, and manage the in-app notification experience on your device. |
How we use information
- Provide product browsing, pricing, cart, checkout, order delivery, cashback, referrals, and account features.
- Send order and service notifications and, where permitted, promotional messages.
- Maintain stock, prevent duplicate credits, troubleshoot failures, protect the service, and comply with law.
Services and sharing
The app uses Google Firebase Authentication and Cloud Firestore. Firestore data is configured in the asia-south1 region. Push notifications use Expo Notifications and the platform notification services operated by Apple or Google. Location and reverse-geocoding functions use your device platform's location services.
We share information only as needed with service providers that operate these features, with authorized Bombay Store administrators and delivery staff who need order information, when required by law, or to protect users and the service. Delivery staff can see assigned customers' names, phone numbers, delivery addresses, ordered items, and order totals.
We do not use an advertising SDK, analytics SDK, or crash-reporting SDK in the audited app version. We do not sell personal information and do not use personal information for cross-app tracking.
Payments
The audited app version offers cash on delivery. It does not collect card, bank-account, or online-payment credentials.
Retention and security
We keep profile and service data while the account is active and retain order or transaction records as needed for fulfillment, accounting, fraud prevention, disputes, and legal obligations. When data is no longer needed, it should be deleted or anonymized. Data is transmitted using encrypted network connections. No method of storage or transmission is completely secure.
Your choices
- You can decline location access and enter a delivery address manually.
- You can decline or disable notifications in device settings.
- You can edit profile and saved-address information in the app.
- You can request access, correction, or deletion by emailing firebasehostmailid@gmail.com.
Children
ChocoMart is intended for adults placing retail orders. Bombay Store does not knowingly seek personal information from children using the service independently.
Changes and contact
We may update this policy as the app or legal requirements change. The effective date above will be updated. Questions and privacy requests can be sent to Bombay Store at firebasehostmailid@gmail.com.