Your privacy, in plain language.

Faazio is a daily superapp operated by FA CREATORS, based in Karaikal, Puducherry, India. This policy explains what personal data we collect through the Faazio apps (Mart, Food, Pharma, and community features) and the website at https://faazio.com, why we collect it, how we use and share it, and the choices you have.

It applies to customers, delivery partners, and seller partners. By creating an account or using Faazio, you confirm that you have read and understood this policy. If you do not agree with it, please do not use the service.

Effective date: 28 October 2026.

• Account and contact details. Your name, email address, phone number, and saved delivery addresses. We verify phone numbers with a one-time password (OTP).
• Orders and transactions. Items ordered, order value, fulfilment method, delivery address, order status, payment status, and any support, return, or refund requests you raise.
• Location. With your permission, we use your device's approximate and precise location to show nearby stores and estimate delivery. Customers share location only while using the app. Delivery partners share location while they are online on a delivery so we can dispatch, coordinate, and support active orders.
• Camera and photos. If you grant camera or photo permission, we use it only for the feature you choose — for example, uploading a prescription or partner verification document. You can use the rest of Faazio without granting these permissions, although some features will not work.
• Device and technical data. Device model, operating system, app version, IP address, and diagnostic or security logs.
• Usage data. In-app events such as products viewed or features used, linked to a hashed identifier. We use this to understand what is working and improve recommendations.
• Push notifications. A Firebase Cloud Messaging token so we can send order updates and service messages. You can disable notifications in your device settings.
• Installed payment apps. To show the UPI payment options available at checkout, we check which UPI apps (for example Google Pay, PhonePe, Paytm, Amazon Pay, or BHIM) are installed on your device. This check happens locally on your device; we do not transmit the list of installed apps to our servers.
• Community and reviews. If you use Faazio Community (including blood donation features) or post a review, we collect the details you choose to submit. Public views redact sensitive contact details where appropriate.
• Partner information. If you join as a seller or delivery partner, we collect the business, identity, vehicle, and KYC information needed to verify you, plus payout details. Sensitive documents are stored in private storage with restricted access.
• Website. faazio.com does not use advertising or third-party analytics cookies. Our servers keep basic request logs (such as IP address, browser type, and the page requested) for security and reliability. The site loads web fonts from Google Fonts, which receives your IP address as part of that request.

We use personal data to:

• create and manage your account and verify your phone number;
• take, fulfil, and deliver orders, including sharing the minimum details needed with sellers and delivery partners;
• process payments, payouts, refunds, and returns;
• provide customer support and respond to your requests;
• personalise your experience, including product recommendations based on usage events;
• send transactional messages such as OTPs, order status, and delivery updates, and — where permitted — service or promotional messages that you can opt out of;
• protect the service, prevent fraud and abuse, and keep the platform secure;
• troubleshoot, monitor performance, and improve the app and website;
• comply with legal obligations and enforce our terms.

We process personal data on the basis of your consent, the need to perform our contract with you, legal obligations, and other lawful grounds permitted under applicable law.

We share personal data only as needed for the purposes described in this policy:

• Service providers. Companies that help us run Faazio, including cloud hosting and content delivery (Render, Vercel, Cloudflare), databases and storage (Supabase, MongoDB Atlas, Aiven Valkey), SMS/OTP and push notifications (Google Firebase), maps and places (Google), and payment or payout processing (Razorpay). They may process data only for the services they provide to us.
• Sellers and merchants. The order and fulfilment details needed to prepare and hand over your order.
• Delivery partners. Your name, phone number, drop-off location and address, and order details while a delivery is assigned to them.
• Legal and safety. We may disclose data if required by law, a court order, or a lawful request from a public authority, or where necessary to protect the rights, safety, or security of Faazio, our users, or the public.
• Business transfer. If Faazio is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.
• Aggregated information. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We do not sell or rent your personal data, and we do not share it with third-party advertisers. Some of our service providers may process data outside India; where that happens, we take steps to require appropriate safeguards.

We keep personal data only for as long as needed for the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

• Account data is kept while your account is active. If you ask us to delete your account, we remove or anonymise the data unless we are required to keep it by law.
• Order and transaction records are kept for as long as required by tax, accounting, consumer-protection, and dispute-resolution rules.
• Prescription images and partner KYC documents are kept only as long as needed to provide the service and meet legal obligations, then deleted.
• Usage events are kept for about 90 days.
• Security and audit logs are currently kept for about 7 days.
• Abandoned carts are cleared after about 30 days.
• Blood donation requests expire automatically, generally within a day.

When a retention period ends, we delete or anonymise the data.

You can permanently delete your Faazio account in the app or by email. Deleting your account removes your personal data; a limited set of records is kept where the law requires it.

Delete your account in the app

1. Open the Faazio app and go to the Account (You) tab.
2. Open Privacy and security, then tap Delete account.
3. Review what is deleted and kept, then confirm Delete my account.

Delete your account by email

If you cannot sign in, email [email protected] with the subject “Delete my account” from the email or phone number on your account. We may ask you to verify your identity before acting.

What we delete

• Account and profile details — name, email address, and phone number.
• Saved delivery addresses and default-address selection.
• Saved card tokens stored on your device.
• Favourites, recent searches, and cart contents.
• Prescription images and prescription details you uploaded.
• Blood donation records and notification device tokens.
• FaazioCoins balance and streak progress.

What we keep, and for how long

• Order, payment, return, and tax invoice records are kept as long as required by tax, accounting, consumer-protection, and dispute-resolution rules. They are no longer linked to your name, email address, or phone number.
• Security and audit logs are currently kept for about 7 days, then deleted.
• Hashed usage events are kept for about 90 days, then deleted.

We complete deletion within 30 days of a verified request, except for records we must retain under the periods above. See Section 5, “How long we keep your information” for the full retention schedule.

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• access a copy of the personal data we hold about you;
• correct or update inaccurate information;
• request deletion of your account and personal data;
• withdraw consent at any time, for example by disabling location, camera, or notification permissions;
• object to or request restriction of certain processing;
• request portability of data you provided, where applicable;
• opt out of promotional messages while continuing to receive essential service messages.

To exercise a right, email [email protected] with the subject “Privacy request”. We may need to verify your identity before acting. We will respond within the time required by applicable law. If you are in the EEA or UK, you may also have additional rights under the GDPR and can complain to your local supervisory authority. In India, you can complain to the Data Protection Board of India.

Faazio is intended for adults. It is not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

We use technical and organisational safeguards designed to protect your personal data, including:

• encryption in transit using HTTPS/TLS;
• encryption at rest through our cloud infrastructure providers;
• access controls and least-privilege permissions for systems that hold personal data;
• secure storage for session tokens on your device (iOS Keychain / Android Keystore);
• private storage and short-lived signed links for prescriptions and partner documents;
• monitoring and audit logs to detect misuse.

We do not store full card numbers or CVV codes. No method of transmission or storage is completely secure, so please protect your account and contact us immediately if you suspect unauthorised access. We will never ask for your password or OTP by phone, email, or message.

We may update this policy from time to time. The effective date at the top of this page shows when it last changed. If we make a material change, we will notify you in the app or on this page before it takes effect. Please review this page periodically.

If you have questions, requests, or concerns about this policy or your personal data, contact:

We aim to respond within a reasonable time and within any deadline required by applicable law.