Privacy Policy

Kashibaa · Last updated: 5 October 2026

This Privacy Policy explains how Kashibaa ("we", "us") collects, uses and protects information in the Kashibaa app (Android, iOS and web). Kashibaa is a wholesale ordering app: shop owners and buyers use it to browse products, place orders, track deliveries and payments, and download invoices.

1. Information we collect

• Account information: your mobile number, used to sign in with a one-time SMS code (Firebase Authentication). We never see or store the code.
• Profile information: your name, shop name and delivery addresses (address, city, state, pincode, contact phone).
• Orders and payments: your cart, wishlist, orders, order status, payment records, advance deposits and invoices. Payments are made offline (cash, UPI or bank transfer); we do not collect card or bank details in the app.
• App activity: recently viewed products and search history, used to show you relevant products. Search history is stored only on your device.
• Device information: a push notification token (Firebase Cloud Messaging) used to send order updates and offers, and app preferences (language, theme, notification settings) stored on your device.
• Security checks: to protect sign-in from abuse, Google reCAPTCHA and Firebase App Check may collect device and browser signals. See Google's Privacy Policy.

We do not collect your location, contacts, photos, call logs or SMS, and we do not show advertisements.

2. How we use information

• To sign you in and keep your account secure.
• To show products and prices, and to process, deliver and track your orders.
• To record payments and advances and to generate invoices.
• To send notifications about your orders, new products, discounts and restocks (you can turn offers off in the app's settings).
• To keep the service working, prevent fraud and fix problems.

3. Where data is stored

Data is stored on Google Firebase (Authentication, Cloud Firestore and Cloud Messaging), which encrypts data in transit and at rest. See Firebase privacy and security.

4. Sharing

We do not sell or rent personal information. Data is shared only:

• with Kashibaa staff, who need your profile and orders to process and deliver them;
• with service providers that run the app (Google Firebase);
• when you choose to share something, such as a product link or invoice through WhatsApp or another app, or when you contact us by phone or WhatsApp;
• when required by law or to protect our rights.

5. Data retention and deletion

We keep your account data while your account is active. Orders, payments and invoices may be kept for up to 8 years where required by Indian tax and accounting law. You can ask us to delete your account and personal data at any time — see Delete your account.

6. Security

Access to your data is limited to your signed-in account and authorised Kashibaa staff, and is enforced by Firebase security rules. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

7. Children

The app is for business customers and is not directed at children under 18. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date shown above.

9. Contact us

For questions about this policy or your data, email kashibaa.master@gmail.com.