Privacy Policy

Privacy Policy

Last updated: 8 September 2026

This explains what Stachy collects, why, who sees it, and what you can do about it.

Contact: stachysupport@gmail.com

1. What we collect

Your mobile number. It is how you sign in and how a shop or rider reaches you about an order. We cannot run an order without it.

Your name, if you give one. It appears on your order so a shop knows who is collecting.

Your address and location. Stachy is a local service — a shop two districts away is no use to you — so we compare where you are with where shops can serve. A saved address is kept until you delete it.

Your orders. What you ordered, from whom, what it cost, and when. This is your receipt and the shop's record.

Photographs you send. A picture of a handwritten list, or a reference photo for a cake. See section 4.

Device information. Basic technical details and crash reports, used to find faults.

2. What we do not collect

We do not collect your card number, bank details or UPI ID. Online payments are handled by Razorpay, and those details go to them, not to us.

We do not read your contacts, photo library, messages or call log.

3. Who sees what

The shop you order from sees your name, your order and your collection or delivery details. A shop cannot see your orders from anywhere else.

A rider sees only what they need to complete the delivery in hand: where to collect, where to take it, and a way to reach you if there is a problem.

Razorpay processes payments and sees what it needs to take one.

Nobody else. We do not sell your data, and we do not share it for advertising.

We disclose information where the law requires it — a court order or a lawful request from an authority.

4. Photographs

A photograph of a list or a reference picture for a cake is shown only to the shop filling that order.

These are deleted automatically after seven days. The deletion is a rule on the storage itself, not a task somebody has to remember to run.

A photograph you attach to a complaint is different, and is kept for six months. It is the evidence a refund was decided on, and a payment dispute can be raised long after the case is closed. It is shown only to our support team and, where the complaint is about an order, is not shared with the shop or the rider unless you are told.

5. How long we keep things

Your account and saved addresses are kept until you delete them.

Order records are kept as long as tax and accounting law requires.

Photographs are deleted after seven days. Photographs attached to a complaint are deleted after six months.

Support conversations — your messages to us, and ours to you — are kept with the complaint they belong to.

Crash and diagnostic data is kept for a short period and is not tied to your name.

6. Your rights

You can:

• –See what we hold about you
• –Correct anything that is wrong
• –Delete your account and the personal data attached to it
• –Withdraw a permission you gave, such as location

Account deletion is available in the app under Profile. Some order records must be retained for tax purposes even after an account is deleted; those are kept without your contact details attached.

To exercise any of these, write to stachysupport@gmail.com.

7. Security

Your data travels encrypted and is stored on Google Cloud infrastructure in India.

Access is limited to what each party needs: a shop sees its own orders, a rider sees the job in hand.

No system is perfect. If a breach affects you, we will tell you.

8. Children

Stachy is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will remove it.

9. Changes

We may update this policy. Material changes are announced in the app before they take effect.

10. Contact and complaints

Support: stachysupport@gmail.com

Support hours: 24/7, all days

For a privacy complaint, contact our grievance officer at stachysupport@gmail.com. You are also entitled to complain to the relevant data protection authority.