Privacy Policy

1. Introduction

This Privacy Policy explains how QUICKMALI PRIVATE LIMITED ("QuickMali", "we", "our", or "us") collects, uses, stores, and protects personal information when you use our mobile applications (QuickMali Customer App, QuickMali Gardener App) and our website (quickmali.com).

2. Information We Collect

• Customer Profile Data: Mobile phone number (used for WhatsApp/SMS OTP login), full name, delivery/service addresses, landmark, city, and optional email address.
• Gardener Partner Data: Full name, phone number, government identity verification documents (Aadhaar, PAN), bank account details for payroll/compensation settlements, emergency contact, and profile photos.
• Location Data:
  • Customers: Foreground GPS coordinates are collected solely with your permission to accurately pinpoint your garden service address for doorstep Mali visits.
  • Gardeners: Background and foreground location is collected exclusively while the gardener is actively On Duty to calculate arrival ETA, navigate to customer properties, route emergency bookings, and compute legitimate fuel distance reimbursements. Location collection stops immediately upon clocking out or switching to Off Duty.
• Camera & Photos: Accessed solely with user permission for uploading garden assessment photos (Customers) or before/after job proof and odometer verification (Gardeners).
• Device & Push Notification Data: Device push tokens, OS type, and app version for dispatching order status, visit reminders, and security alerts.
• Payment Information: Online transactions are processed securely via RBI-authorized payment aggregator Razorpay. QuickMali never stores debit/credit card numbers or UPI PINs on its servers.

3. How We Use Your Information

We use collected information strictly to:

• Deliver doorstep gardening and plant care services.
• Schedule and assign verified Malis to your location.
• Send transactional notifications (visit updates, OTPs, invoices).
• Process payments and settle gardener partner payroll.
• Comply with Indian statutory, tax (GST), and accounting regulations.

4. Data Sharing & Third Parties

We do not sell your personal data. Data is shared strictly on a need-to-know operational basis with:

• Assigned Gardeners: Customer service address, name, and phone are shared only for the duration of scheduled visits.
• Payment Aggregators (Razorpay): For secure payment gateway processing.
• Cloud Infrastructure Providers: Secure AWS EC2 and self-hosted Supabase servers located in certified data centers with encryption in transit (TLS 1.3) and at rest.
• Legal Authorities: When required by applicable Indian laws or lawful government orders.

5. Data Retention & Account Deletion

You have the right to request permanent deletion of your account and personal data at any time through our in-app settings or via our public Account Deletion Request Page.

Upon deletion, your active profile, saved addresses, device tokens, and credentials are permanently purged or anonymized. In compliance with the Indian Companies Act 2013 and Goods and Services Tax (GST) laws, completed transaction logs, GST invoices, and service records are retained for statutory audit periods.

6. Grievance Officer & Contact

For questions, concerns, or data privacy grievances, contact our designated Grievance Officer: