Privacy Policy

Aarogya Ruchi, a sole proprietorship owned and operated by Pinninti Hari Krishna ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard information when you use our website and progressive web application.

1. Information We Collect

Personal Information

Because we run on cash-on-delivery and plan to use WhatsApp sign-in, we keep what we collect to a minimum. When production accounts and ordering are enabled, we will collect only:

• Your name
• Your WhatsApp number (used as your account and login)
• Your home / delivery location
• Your orders and delivery history
• Referral details needed to credit our referral goodie (your number and, if you were referred, who referred you)

Current preview: Production accounts and WhatsApp OTP delivery are not yet enabled. Information entered in the preview login is stored locally in your browser and is not sent to Meta or our production account system.

We do not require your email address, password or secondary phone number. While payment remains cash on delivery, we also do not collect card, UPI or banking credentials through the website.

Automatically Collected Information

Our hosting and security systems may automatically receive:

• IP address and request timestamps
• Browser, device and operating-system information
• Security, error and performance logs

2. How We Use Your Information

We use the collected information to:

• Process and deliver your orders
• Send a WhatsApp OTP when you request login after production authentication is enabled
• Communicate with you about orders when that feature is enabled
• Run our referral program and add first-order and referral goodies
• Send promotional messages (with your consent)
• Improve our app and services
• Prevent fraud and ensure security
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Delivery partners, cloud hosting providers and delivery partners, limited to the information necessary to operate and fulfil the service
• Operational analytics: Limited technical data used to secure and improve the service
• Legal Requirements: When required by law or to protect our rights
• WhatsApp Business Platform: This integration is not yet active. After it is enabled, requesting a login code will cause your phone number, the authentication message and delivery metadata to be processed through Meta Platforms, Inc. Future order or marketing messages will be used only for the disclosed purpose and with the applicable consent.

4. Data Security

We implement industry-standard security measures including encryption, secure servers, and access controls to protect your data. However, no method of transmission over the internet is 100% secure.

5. Data Retention

Preview login information remains in your browser until you log out, clear site data or request deletion through the available controls. After production launch, we will retain account information while your account is active and for only as long afterward as needed for security, dispute handling and legal obligations. Production OTP records will expire after five minutes and be removed after successful verification. Order and transaction records may be retained for the period required by applicable tax, food-safety and consumer laws.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Opt-out of marketing communications
• Withdraw consent at any time

These rights are provided under the Digital Personal Data Protection Act, 2023 (DPDP Act). To exercise any of them, contact our Grievance Officer at contact@aarogyaruchi.com. We will acknowledge your request and respond within the time required by law.

7. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

8. Changes to This Policy

We may update this policy periodically. We will publish the revised policy and update the date shown above. Where required, we will provide an additional notice or request fresh consent.

9. WhatsApp & Messaging Services

9.1 WhatsApp Marketing

Promotional WhatsApp messages are not part of login consent. If we introduce them later, we will ask for separate, optional consent and keep a record of when and how it was provided. You will be able to opt out at any time by replying "STOP" to any WhatsApp message or contacting us at contact@aarogyaruchi.com.

9.2 Phone Number Authentication (OTP)

WhatsApp OTP delivery is not active in the current preview. When production authentication is enabled, entering your number and selecting "Send code via WhatsApp" will request and consent to one authentication message for that login attempt. The production OTP will be:

• Valid for five minutes from generation
• Single-use only
• Invalidated after successful verification
• Rate-limited to protect your number from misuse

9.3 Message Frequency & Your Choices

Once enabled, authentication messages will be sent only when requested. Future service or promotional messages will depend on the relevant order or consent: you can opt out of marketing without losing account access; opting out of marketing does not block a login OTP you request; and we will honour WhatsApp opt-out requests.

9.4 WhatsApp Business Platform (Meta)

We plan to use the WhatsApp Business Platform operated by Meta Platforms, Inc. for requested authentication messages. The integration is not active in the current preview. Once enabled, and if additional messaging is later introduced, Meta will process the following for messages you request or consent to: your phone number, the content of messages you send and receive, message delivery and read status, and timestamps and related message metadata.

Meta processes this information to operate and secure the WhatsApp Business Platform. Meta's handling of the data is governed by its terms and privacy policy. We retain related information only as long as necessary for authentication, security, support and legal compliance. Marketing opt-out does not prevent you from requesting a future login code.

10. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

• Business operator: Pinninti Hari Krishna
• Email: contact@aarogyaruchi.com
• Phone: +91 89781 38585
• Address: 23/10, Bowrampet, Qutubullapur, Bachupally, Telangana – 500043
• Grievance Officer: Pinninti Hari Krishna, contact@aarogyaruchi.com