Privacy Policy

1 Who we are

Supplier2Shop is operated by the Supplier2Shop team. For any privacy question, correction or deletion request, contact:

• Email: sumitsharma8897@gmail.com
• Phone: +91 98051 98061

2 What we collect

Everything below is provided by you, or generated by your use of the app.

What we do not collect

• We do not collect your location. The app has no location permission.
• We do not access your camera roll or contacts beyond the single photo you choose to upload.
• We do not process payments and never see your bank or card details. You settle with your trading partner exactly as you do outside the app.
• The app contains no ads and no third-party trackers, and we do not advertise to you.

About the advertising ID

Google's Firebase Analytics, which we use to count which screens get opened, reads your device's advertising ID. We would rather say so than let the word "advertising" go unexplained: we run no ads, we sell nothing to advertisers, and we do not build a profile of you. It reaches Google as part of Analytics and goes no further.

The ID belongs to your device, not to us, and you control it. On Android: Settings → Privacy → Ads, where you can reset it or delete it entirely. The app works exactly the same either way.

3 Who can see your data

Your trading partners

Once you and another business connect inside the app, they can see your name, business name, profile photo, contact number, business category and delivery address, along with any orders between the two of you. This is the point of the app — a supplier cannot deliver to an address they cannot see.

Businesses you have not connected to

Your mobile number is how anyone finds you. A signed-in user who already knows your registered number can look up your profile before sending you a connection request — and that lookup returns the profile in full, including your email address, delivery address and GST number, not only your name and business. Being findable by a number is what lets a supplier or shop you already deal with offline connect to you here; we would rather tell you plainly that the lookup is not partial.

What a lookup does not reach: your orders. Those are readable only by the two businesses named on them, connected or not.

A supplier's catalogue and published delivery dates are visible to any signed-in user. They carry product names, units and photos, and no prices.

Nobody can browse or download a list of everyone registered. Profiles are reachable one at a time, by a number the person looking already has — there is no directory, no search by name or area, and no way to enumerate accounts.

Service providers

The app runs on Google Firebase. Your data is stored and processed by Google Cloud services on our behalf — Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging and Crashlytics. Data is held in Google's asia-south1 (Mumbai) region. See Firebase's privacy documentation.

Nobody else

We do not sell, rent or trade your personal data. We do not share it for advertising or marketing by anyone. We will disclose data only where the law requires it.

4 Notifications

The app sends push notifications for:

• a reminder about an hour before orders close on a delivery date you have not ordered against
• a supplier sending your order out for delivery
• a supplier asking you directly to place an order
• an order closed automatically because its delivery date has passed

You can turn notifications off at any time in your Android settings. The app works without them.

5 How your data is protected

• All traffic between the app and our servers is encrypted in transit over HTTPS.
• Access is enforced by Firebase Security Rules. Orders are readable only by the two businesses named on them. Profiles cannot be listed or exported in bulk by anyone — they are reachable only one at a time, by account id. Your mobile number, user type and account id cannot be altered from the app.
• Actions that affect another person — sending them a notification, dispatching a delivery day, deleting an account — run on our servers, not on the device, so they can be checked before they happen.
• Nothing is stored on your device beyond what is needed while the app is open. The app is online-only and does not keep a copy of your business data after you close it.

6 How long we keep it

• Your profile — until you delete your account.
• Orders — kept as a record of what two businesses agreed, including after one side deletes their account. See section 7.
• Crash reports — retained by Firebase Crashlytics on its own schedule (typically 90 days).

7 Deleting your account

You can delete your account from inside the app: Account → Delete Account. You will be asked to confirm, and the deletion is immediate and permanent.

What is deleted

• Your profile and all business details
• Your profile photo and any catalogue item photos
• Your connections to every trading partner
• Your catalogue and published delivery dates, if you are a supplier
• Your activity log
• Your sign-in credential — your mobile number is released for a fresh registration

What is kept, and why

Orders are not deleted. An order is a shared business record of what two parties agreed. Your trading partner has the same claim on their copy of it as you have to be forgotten, and erasing it would rewrite their books. Your name and contact number remain on those past orders so the other side can still read their own history. Nothing else of yours survives, and you will not appear anywhere in the app as a contactable business.

If you cannot access the app, email sumitsharma8897@gmail.com from your registered address, or phone the number in section 1, and we will delete the account for you. We aim to action requests within 30 days.

8 Your rights

You can, at any time:

• See your data — all of it is visible in the app under My Profile and your order history
• Correct it — edit your details from My Profile
• Delete it — see section 7
• Request a copy — email us and we will send you an export
• Withdraw consent — turn off notifications, or delete your account entirely

9 Children

Supplier2Shop is a business tool intended for people running or working in a shop or supply business. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has registered, contact us and we will remove the account.

10 Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. Where a change is significant we will also notify you in the app. Continuing to use Supplier2Shop after a change means you accept the updated policy.

11 Contact

Questions, corrections, complaints or deletion requests:

• sumitsharma8897@gmail.comEmail us
• +91 98051 98061Call or WhatsApp