Privacy Policy

1. Corporate Identity & Data Fiduciary

Rozmo is a software product designed, developed, and owned by Imbine Technologies ("Company", "we", "our", or "us"), a technology organization registered and headquartered in New Delhi, India.

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), Imbine Technologies acts as the Data Fiduciary regarding the personal data collected through the Rozmo mobile applications (Android/iOS) and the rozmo.in website.

2. Personal Data We Collect & Purpose of Processing

We adhere to the strict principle of data minimization. We only request and process personal data that is strictly necessary to deliver price discovery and grocery comparison services:

A. Location Data (GPS & Pincode)

• Data Collected: Precise and coarse geographical coordinates (latitude and longitude) and selected delivery address/pincode.
• Purpose: Quick-commerce stores (Zepto, Blinkit, Swiggy Instamart, BigBasket, DMart, etc.) operate via localized dark stores. Location data is required to determine store availability, stock catalogs, surge delivery charges, and accurate delivery ETAs in your neighborhood.
• Processing: Location data is processed on your device and transmitted to our catalog geocoding API. We do not store real-time travel or location history.

B. Camera & Photo Access (Scan & Shop)

• Data Collected: Camera frame feeds and selected images when using the barcode scanner or photo product identifier.
• Purpose: To read packaging barcodes (EAN-13, UPC) and identify grocery items to immediately display comparative store prices.
• Processing: Barcode scanning is executed locally on-device. Images are never used for facial recognition or commercial advertising.

C. Microphone & Speech Recognition (Voice Search)

• Data Collected: Short voice audio snippets when you activate the in-app microphone button.
• Purpose: To transcribe product search queries (e.g., "1kg cold pressed mustard oil") into text for instant price comparison.
• Processing: Audio processing is converted on-device via native speech engines (Android Speech Services / iOS Speech Framework). Audio recordings are not permanently stored on our servers.

D. Account & Authentication Information

• Data Collected: Mobile phone number, Firebase Auth UID, device client identifier, and optional user profile name.
• Purpose: To provide secure OTP sign-in, manage saved delivery addresses, maintain in-app customer support chat, and authenticate device sessions.

E. Technical & Device Diagnostics

• Data Collected: Device model, OS version, anonymous crash logs via Firebase Crashlytics, and network performance indicators.
• Purpose: To debug application crashes, monitor latency, and distribute over-the-air (OTA) application updates.

3. On-Device Price Comparison Architecture

Rozmo utilizes a decentralized, on-device comparison engine. When you execute a search, catalog mapping queries and real-time merchant pricing checks are coordinated directly between your device and the respective quick-commerce platforms. We do not inspect, intercept, or store your payment card details, bank logins, or checkout credentials.

4. Legal Grounds for Processing (DPDP Act, 2023)

Under Section 4 and Section 6 of the DPDP Act, 2023, Imbine Technologies processes personal data based on:

• Consent: Explicit, informed consent provided when granting device permissions (Location, Camera, Microphone) and when entering your phone number for OTP authentication.
• Legitimate Uses: Strictly for fulfilling requested service actions (generating comparative price charts and providing customer support).

You have the right to withdraw consent at any time by revoking permissions within your mobile operating system settings or requesting account deletion.

5. Data Sharing & Third-Party Service Providers

We do NOT sell, rent, or trade your personal data to data brokers or advertising networks.

Data is shared only with trusted infrastructure providers supporting core app functionality:

• Google Firebase (Alphabet Inc.): Authentication, Crashlytics, and real-time database support.
• Cloudflare Inc.: Global CDN, web hosting, and cybersecurity protection.
• Merchant Deep Links: When you tap to buy an item, you are redirected to the third-party merchant's app or website. Their respective privacy policies govern your checkout on their platform.

6. Data Retention & Security Standards

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal requirements.

In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we implement industry-standard TLS/SSL encryption, secure server isolation, and access controls.

7. Data Principal Rights (Your Rights under Indian Law)

Under the DPDP Act, 2023, you have the following enforceable rights:

• Right to Access: Request a summary of your personal data processed by us.
• Right to Correction & Erasure: Request the correction of inaccurate data or complete deletion of your account and associated records (see our Data Deletion Guide).
• Right of Grievance Redressal: Submit complaints regarding data processing to our designated Grievance Officer.
• Right to Nominate: Nominate an individual to exercise rights on your behalf in the event of death or incapacity.

8. Grievance Redressal Officer

In compliance with Section 10 of the DPDP Act, 2023 and Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer for Rozmo / Imbine Technologies is:

9. Policy Updates

We may update this Privacy Policy periodically to reflect technological changes, product features, or regulatory guidance from the Data Protection Board of India. Material updates will be highlighted on our website and communicated via in-app notices.