Kadam is operated by an individual based in Bengaluru, India (“we”, “us”, “our”). This Policy is published in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
1. Information we collect
Information you provide
- Phone number — to create your account and sign you in via one-time password (OTP).
- Profile details — your name and age / date of birth.
- Profile photo — only if you upload one from your camera or photo gallery.
- Order & reservation details — items reserved, stores selected, and order history.
- Referral information — referral codes you enter or share.
- Support communications — anything you send us when you contact support.
Information collected automatically
- Precise & approximate location — to show nearby stores, plan walking routes, and verify (via geofencing) that you have arrived at a store. Location is used only while you are using the App (foreground); we do not track your location in the background.
- Physical activity / step data— your step count from your device’s built-in activity sensor, while you have an active walk open, to calculate distance walked and StepCoins. This is read on-device; we do not connect to Google Fit or Health Connect.
- Device & technical information — device model, OS version, app version, language, a Firebase installation / messaging identifier (for push notifications), and crash / diagnostic data.
- Usage information — interactions within the App.
- Install attribution — Google Play install-referrer data, used to attribute referrals.
Payment information
In this version of the App, payment is made in cash at the store counter. We do not collect, process, or store your card, UPI, or bank details. We record only your order details and whether the order was completed.
2. How we use your information
- Create and secure your account and authenticate you via OTP.
- Show nearby stores, plan walking routes, and verify store arrival.
- Calculate walking distance and award / redeem StepCoins.
- Process reservations and orders (payment is made in cash at the counter).
- Operate the referral programme.
- Send transactional and service push notifications.
- Provide customer support and resolve disputes.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and improve the App.
We do not sell your personal data.
3. Android permissions we use and why
| Permission | Why we use it |
|---|---|
| Location (precise & approximate) | Find nearby stores, plan routes, verify arrival (foreground only). |
| Physical activity / activity recognition | Count steps to compute distance walked and StepCoins. |
| Camera | Scan QR codes and take a profile photo. |
| Notifications | Send order updates and service alerts. |
| Internet / network state | Connect to our servers; detect offline state. |
| Vibrate | Provide haptic feedback for alerts. |
You can grant or revoke these permissions anytime in your device settings. Some features will not work without the relevant permission.
4. Health and fitness data
Kadam reads your step countfrom your device’s built-in activity sensor (the Android “physical activity” permission), only while you have an active walk open, solely to calculate your walking distance and StepCoins within the App. We do not connect to Google Fit or Health Connect, and we do not read any other health or fitness data.
- We do not use activity or fitness data for advertising.
- We do not sell activity or fitness data.
- We do not share it with third parties except as needed to operate the App or where required by law.
- You can revoke the physical-activity permission at any time in your device settings; step tracking simply stops.
5. How we share information
- Service providers / processors that help us run the App, under confidentiality obligations: Google Firebase Cloud Messaging (push notifications), Google Maps Platform (maps / geocoding / routing), and our cloud hosting provider(s).
- Merchants / stores — to fulfil your reservation, a participating store receives the order details needed to prepare and hand over your items. Stores do not receive your payment credentials.
- Legal & safety — when required by law or to protect rights, property, or safety.
- Business transfers — in a merger, acquisition, or sale of assets, subject to this Policy.
6. Data retention
We retain your personal data while your account is active and as needed to provide the App, comply with legal obligations (e.g. tax / financial records), resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it.
7. Data security
We use reasonable technical and organisational measures including encrypted transport (HTTPS / TLS), secure on-device token storage, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights and choices
Subject to applicable law (including the DPDP Act, 2023), you may access, correct, or delete your data, withdraw consent for optional permissions, and raise a grievance (Section 11).
Account and data deletion
You can request deletion of your account and personal data at any time — see our Account & Data Deletion page, or email [email protected] from your registered number. We delete your personal data on a verified request, except information we are required to retain by law (e.g. transaction records), which we keep only for the legally required period.
9. Children’s privacy
Kadam is intended for users aged 18 and over (see our Terms). Consistent with the DPDP Act, 2023, we do not knowingly collect or process the personal data of children (persons under 18). If we become aware that we have collected such data without verifiable parental consent, we will delete it. If you believe a child has shared personal data with us, contact our Grievance Officer (Section 13).
10. Third-party services
- Google (Firebase, Maps, Play) — policies.google.com/privacy
11. International data transfers
We are based in India and primarily process data in India. Some service providers may process data on servers outside India; where they do, we apply protections consistent with applicable law.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you in-app. Continued use after changes take effect constitutes acceptance.
13. Contact us / Grievance Officer
For questions, requests, or complaints about this Policy or your data, contact the Grievance Officer for Kadam at [email protected] (Bengaluru, Karnataka, India). We will acknowledge and respond to grievances within the timelines required under applicable law.