Version 2026-10-24.1 · Updated 24 October 2026
Privacy policy
How OneLocal uses your personal data, why, and how you stay in control. Written to be read in two minutes.
Who we are
OneLocal is run by Proviyaa Retail Technologies Private Limited, C/o Yerte Manisha Baswaraj, Bunglow No. 37, New Adarsh Colony, Ausa Road, Latur 413512, Maharashtra, India. Under India’s Digital Personal Data Protection Act, 2023 we are the “Data Fiduciary” and you are the “Data Principal”.
What we collect, and why
We collect only what these purposes need, and use it only for them. We never sell your data.
Name, mobile number and email
To create your account, sign you in (including with Google), and reach you about your orders.
Kept: While your account is open.
Delivery addresses and map pins
To deliver your orders and check that we deliver there.
Kept: Saved addresses: until you delete them. On an order: with the order.
Orders: items, prices, taxes, coupons, store
To fulfil, bill and refund orders, and keep the tax records the law requires.
Kept: As tax law requires.
Payment references (method, status, payment ids)
To confirm payments and refunds. Card numbers, UPI PINs and bank logins are typed on the payment provider’s page and never reach us.
Kept: As payment and tax law require.
Location: the town you pick, or your current location when you tap “Use current location”
To show what OneLocal offers where you are.
Kept: On your phone only, until you change it.
Help and privacy requests
To answer you.
Kept: Until answered, then as our retention schedule says.
A device key for notifications
To tell you about your orders. You can turn notifications off in your phone’s settings.
Kept: While the app is on your phone.
Marketing messages and personalised suggestions
Only if you say yes. Off until you switch them on.
Kept: Your choice is recorded, with the date and notice version.
Who we share it with
Anyone who handles your data for us may use it only on our instructions, and must keep it safe.
- The store or restaurant fulfilling your order: The items, and the delivery address and notes for that order only. (India)
- The delivery rider: The delivery address, map pin and notes for the order they carry. (India)
- Supabase: Hosts our database and sign-in. (Mumbai region, India)
- Google: Sign in with Google (your name and email, only if you choose it); maps and address search when switched on; push notifications (Firebase). (Google’s servers, may be outside India)
- Payment provider: Takes online payments; holds card, UPI and bank details under its own licence. (India)
Sign in with Google
If you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We use them only to create and sign in to your OneLocal account. We do not get your Google password, and we do not read your Gmail, contacts or any other Google data. You can remove OneLocal’s access any time at myaccount.google.com/permissions.
Your rights
- See your data: download everything we hold about you, with who we shared it with.
- Correct it: edit your profile any time, or ask us to fix anything else.
- Delete it: delete your account in the app. We erase what we can at once and tell you what the law makes us keep.
- Withdraw consent: switch off any optional use in the app, as easily as you switched it on.
- Nominate someone to use these rights for you if you die or cannot act.
- Complain: to us first, then to the Data Protection Board of India.
All of these are in the app under You → Privacy & your data.
What we must keep
Tax invoices and order amounts (GST records) for the statutory period; payment and refund records as payment and tax law require; your consent history so we can show we followed your choices; security logs for one year. Everything else is erased once it is no longer needed for the purpose you gave it for, or when you withdraw consent.
Children
Accounts are for people aged 18 or older. A child can use OneLocal only through a parent’s or guardian’s own account. We do not track children’s behaviour or show them targeted advertising.
Keeping it safe
Your data travels encrypted and is stored with Supabase in the Mumbai region, India. Only our servers can read the database. If a breach ever affects your data, we will tell you and the Data Protection Board without delay.
Questions and complaints
Our grievance officer answers questions about your personal data: Vaishnavi Baswaraj Yerte, proviyaaretailtech@gmail.com, +91 86683 20699 (Monday to Saturday, 10 am to 6 pm). We reply within 90 days. General support: proviyaaretailtech@gmail.com.
Changes
When this policy changes, the version above changes, and we ask again wherever your consent is needed. You can ask us for it in Marathi, Hindi or any language in the Eighth Schedule to the Constitution.