1. Who this policy covers
This Privacy Policy explains how Pados ("Pados", "we", "us") collects, uses, and protects information when you use the Pados app as a resident or as a shop owner. Pados is operated by Yonder AI Private Limited, 102, Mapsko Casabella, Sector 82, Gurgaon, Haryana – 122001, India.
2. Information we collect
| Category | What | Why |
|---|---|---|
| Identity & contact | Phone number (used for OTP sign-in), name | To verify you're a real person and to identify your orders/khata |
| Address | Tower and flat number within your society | To deliver orders and confirm you belong to the society |
| Order data | Items ordered, order status, timestamps, which shop | To fulfil and track your orders |
| Khata (credit ledger) | Debit/credit entries and running balance per resident per shop | To maintain the digital version of the shop's credit ledger — see the Terms of Service for how khata works |
| Shop & product data (owners) | Shop details, product listings, prices, stock, product photos | To run and display the shop's catalogue |
| Device & notifications | A push-notification token (Firebase Cloud Messaging) | To notify you about order status changes |
| Location (optional, once) | Your device's location, read once when you sign up, and only if you tap "Use my location" on the "Where do you live?" screen | To work out which society you live in, so you aren't shown the shops at someone else's gate. We store that single reading on your resident record so we can spot and correct a wrongly-joined society |
| App usage (analytics) | Product events — an order placed, a khata balance settled, a shop application submitted — with a Firebase Analytics app-instance ID | To understand which parts of Pados are actually used, so we know what to build and fix next |
We do not collect payment-card details or bank details. Pados v1 supports cash-on-delivery and khata (credit) only — no online payment processor is integrated, so no payment data passes through the app. We do not use an Advertising ID: the Android permissions that would grant one are explicitly removed from the app.
About location. It is entirely optional — if you decline, or your phone has no signal indoors, you simply pick your society from a searchable list instead and everything else works identically. We ask only for foreground access ("while using the app"), we read your location once, at signup, and we never read it again, never track you in the background, and never build any movement history. We do not use it for delivery routing or advertising.
3. How we store and process your data
Pados is built on Firebase (Google Cloud) — specifically Firestore (database), Firebase Authentication (phone OTP), Cloud Storage (product photos), and Cloud Messaging (push notifications). Google acts as our data processor under its own data-processing terms.
We use Firebase Analytics to record the product events listed above. We use no advertising SDKs, we run no ads, and we share nothing with advertisers.
One feature reaches a service outside Google. When a shop owner scans a product barcode while adding stock, the app looks that barcode up in Open Food Facts (world.openfoodfacts.org), a public product database, to prefill the product's name. That request contains the barcode and nothing else — no account, no device identifier, no location — because it identifies a product, not a person. Camera images are decoded on your device and are never uploaded. This applies to shop owners only; residents never trigger it.
4. Who can see your data
- Your name, flat address, and order contents are visible to the specific shop you order from, so they can fulfil the order.
- Your khata balance is visible to you and to the shop(s) you have a balance with — not to other residents or other shops.
- We do not sell your personal data to anyone, and we do not share it with advertisers.
- We may disclose data if required by law or to a competent authority under a valid legal request.
5. Data retention
We keep your account and order/khata history for as long as your account is active, so your ledger history stays accurate. You can request deletion of your account and personal data at any time (see Contact) — order records a shop needs for tax/accounting purposes may be retained by that shop separately from the app.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent. Write to us (see Contact) to exercise these rights.
7. Children
Pados accounts are intended for residents aged 18 and above who can place and be responsible for orders and khata dues. We do not knowingly collect data from children under 18 as independent account holders.
8. Security
Data in transit is encrypted (HTTPS/TLS). Access to Firestore data is restricted by per-resident and per-shop security rules, so residents can only read/write their own orders and khata, and shop owners can only manage their own shop's data.
9. Changes to this policy
We'll update the effective date above and notify you in-app if we make material changes.
10. Grievance Officer & Contact
In accordance with Indian IT Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020:
| Grievance Officer | Bhavya Yadav |
| info@yonderai.ai | |
| Address | 102, Mapsko Casabella, Sector 82, Gurgaon, Haryana – 122001, India |