Version 2.0 · Last updated June 2026 · DPDP Act 2023 | DPDP Rules 2025 | IT Rules 2021
This Privacy Policy explains how ResQbag Technologies collects, uses, stores, and protects your personal data across the consumer app (Android & iOS), resqbag.in, merchant.resqbag.in, and email/in-app support. Under the DPDP Act, ResQbag is your Data Fiduciary.
ResQbag Technologies operates a food rescue marketplace connecting consumers with restaurants, cafes, and bakeries selling surplus food at discounted prices. We are incorporated in India and headquartered in Bangalore, Karnataka. This policy complies with India’s DPDP Act, 2023, the DPDP Rules, 2025, and the IT Rules, 2021. Merchant partners act as separate data processors when they receive your order details and are contractually bound to use that data only to fulfil your order.
| Account | Full name, mobile number, email address (on signup) |
| Location | Neighbourhood / city to show listings near you. Precise GPS only with your permission — you can deny this. |
| Orders | Items reserved, pickup time, order status, order ID |
| Payments | Transaction reference IDs, payment status, refund records. We never store raw card or bank details. |
| Device | Device model, OS version, app version, push notification token (for order alerts only) |
| Usage | Screens viewed, listings tapped, pickup confirmations — anonymised only |
| Support | Messages, food-issue photos, complaint details you send us |
We use data only for: creating and managing your account (consent); showing listings near your location (consent); processing your order and payment (contractual necessity); order/pickup updates via push or SMS (consent); sharing your name and order details with the Merchant you ordered from (contractual necessity); customer support, dispute resolution, and refunds (legitimate use); FSSAI compliance, GST, and tax obligations (legal obligation); fraud detection and platform security (legitimate use); and anonymised analytics (no personal data).
Our commitments: we do not sell your personal data; we do not share it with advertisers or ad networks; we do not use it to train AI or ML models; and we do not send marketing without your explicit opt-in.
We do not sell or rent your data. We share only: with the Merchant you order from (name and order details, solely to fulfil your order); with our PCI-DSS certified payment gateway; with infrastructure/service providers under data processing agreements; and where required by a valid legal or regulatory demand. In a business transfer, your data may transfer with advance notice and equivalent protection. We never share data with advertisers, data brokers, or anyone who offers to pay for it.
| Account & profile | Until deletion or 2 years of inactivity |
| Order history | 7 years (GST / Income Tax Act) |
| Payment records | 7 years (RBI guidelines & IT Act) |
| Support conversations | 2 years |
| Push notification tokens | Until app uninstall or permission revoked |
| Crash and error logs | 90 days |
When the retention period ends, we securely delete or irreversibly anonymise your data. You can also request early deletion at any time (see Section 6).
The DPDP Act, 2023 gives you rights to Access, Correct, Erase, and Withdraw Consent for your data, to Grievance Redressal, and to Nominate someone to exercise these rights. To exercise any right, email support@resqbag.in with your registered mobile number or email; we respond within 7 working days. You can correct most details and manage consent directly in app settings.
ResQbag is intended for users 18 and older. We do not knowingly collect data from minors. If we learn we have inadvertently collected such data, we will delete it promptly. Parents or guardians can contact support@resqbag.in; we will remove verified reports within 72 hours.
Protect your account: never share your OTP. ResQbag staff will never ask for your OTP, password, or payment details over call, WhatsApp, or email.
We use no advertising cookies and no cross-site tracking. The consumer app uses a local session token (keeps you logged in), a push notification token (order alerts), location access (only when the app is open and you have granted permission), and crash/error reporting (no personally identifiable data). On the website we use Plausible Analytics, a privacy-first tool with no cookies and no cross-site tracking.
| Push notifications | Device Settings > Notifications > ResQbag, or in-app under Profile |
| Location access | Device Settings > ResQbag > Location > Never (listings will not be location-filtered) |
| Profile information | In-app: Profile > Edit, or contact us |
| Delete your account | In-app: Profile > Delete account. Or email support@resqbag.in. Processed within 30 days. |
| Analytics opt-out | Email support@resqbag.in |
We may update this policy to reflect changes in our services, legal requirements, or security practices. For material changes we update the Last Updated date, send an in-app notification at least 7 days before the change, and email registered users where the change affects processing of their data.
| Support & Privacy | support@resqbag.in |
| Grievance Officer | Bavesh Raam S — support@resqbag.in |
| Response time | 7 working days |
| Company | ResQbag Technologies, Bangalore, Karnataka, India |
If unresolved after 30 days, you may escalate to the Data Protection Board of India, or the Consumer Disputes Redressal Commission in your district. © 2026 ResQbag Technologies, Bangalore, India.