Privacy Policy

1. Introduction

Yelly, a mobile app that helps consumers locate vendors passing nearby selling vegetables, fruits, and other produce or services, and enables them to locate their presence on a map.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our application. It applies to both Vendors (individuals or businesses who list on the platform) and Consumers (individuals who use the app to find vendors).

By using the app, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the app.

2. Data We Collect

2.1 From Vendors

When a vendor registers on the platform, we may collect:

  1. Full name and contact number
  2. Business name (if applicable)
  3. Real-time or pinned GPS location of the vending spot
  4. Photographs of the cart or produce
  5. Operating hours
2.2 From Consumers

When a consumer uses the app, we may collect:

  1. Name and mobile number (if account registration is used)
  2. Device location (GPS) to show nearby vendors - only with explicit permission
  3. Search history and browsing behaviour within the app
  4. Device identifiers (device ID, OS version, app version)
2.3 Automatically Collected Data

We automatically collect certain technical data including:

  1. IP address and approximate location
  2. App usage data and crash reports
  3. Log data (timestamps, pages visited, actions taken)

3. How We Use Your Data

We process your personal data only for specific, lawful purposes:

  1. To register and verify vendor accounts and manage listings
  2. To display vendor locations to consumers searching nearby
  3. To send service-related notifications (e.g., listing approval, alerts)
  4. To facilitate reviews, ratings, and vendor feedback
  5. To improve app performance, fix bugs, and enhance user experience
  6. To comply with applicable laws, regulations, and court orders
  7. To detect and prevent fraud, misuse, or unauthorised access

We do not use your data for automated profiling that produces legal or similarly significant effects without your consent.

4. Legal Basis for Processing (DPDP Act 2023)

We process personal data on the following grounds under the DPDP Act, 2023:

  1. Consent: Where you have freely given, specific, and informed consent (e.g., location access, optional features)
  2. Legitimate Uses: Where processing is necessary to fulfil a service you have requested, or to comply with legal obligations

You have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Location Data

Location is central to the functionality of this app. Here is how we handle it:

  1. Vendor location is collected only when the vendor actively logs in the app and sets working hours.
  2. Consumer location is accessed only when the app is in use and only with the device's permission settings
  3. Precise vendor location data is displayed publicly on the map to all app users

You may revoke location permissions at any time through your device settings, though this will limit app functionality.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data in the following limited circumstances:

  1. Service Providers: Third-party vendors who assist in app hosting, analytics, cloud storage, and customer support - bound by data processing agreements
  2. Map and Location Services: We use third-party mapping APIs (e.g., Google Maps) to display vendor locations. Their own privacy policies apply
  3. Legal Obligations: If required by law, court order, or government authority
  4. Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred — you will be notified

Vendor listing information (name, location, products) is publicly visible on the app by design.

7. Data Retention

We retain your data only for as long as necessary for the purposes outlined in this policy:

  1. Active vendor accounts: Retained for the duration of the account
  2. Inactive accounts: Deleted or anonymised after 24 months of inactivity
  3. Consume9 usage data: Retained for up to 12 months for analytics, then anonymised
  4. Legal hold data: Retained as required by applicable law

8. Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the following rights:

  1. Right to Access: Request a summary of the personal data we hold about you
  2. Right to Correction: Request correction of inaccurate or incomplete data
  3. Right to Erasure: Request deletion of your personal data, subject to legal obligations
  4. Right to Grievance Redressal: Raise a complaint with our Grievance Officer
  5. Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, contact us at [contact@yourapp.com]. We will respond within 30 days.

You may also lodge a complaint with the Data Protection Board of India if you believe your rights have been violated.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  1. Encryption of data in transit (TLS/HTTPS) and at rest
  2. Role-based access controls limiting who can access your data
  3. Regular security audits and vulnerability assessments
  4. Secure deletion of data when it is no longer required

However, no method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in harm, we will notify affected users and the Data Protection Board of India as required by law.

10. Children's Privacy

This app is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

11. Third-Party Links and Services

The app may contain links to third-party websites or integrate with third-party services (e.g., mapping services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top and notify users via in-app notification or email. Continued use of the app after changes constitutes acceptance of the revised policy.

13. Contact Us and Grievance officer

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact:

Email: info@yelly.in

Grievance Officer: Chetan Dhruve, info@yelly.in

Address: 002, Bikaner Corner, 5th cross, Lakshmi Road, Shantinagar, Bangalore 560027

We aim to respond to all queries within 30 days.