InstakartBack to Home

Privacy Policy

Last updated: 16 April 2026

1. Introduction

Instakart ("we," "us," or "our") is operated by DevLune (devlune.in). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Instakart mobile application (available on Google Play as in.devlune.villagecart) and our website at instakart.app(collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Phone Number: Required for account creation and OTP-based authentication via Firebase Authentication.
  • Name & Profile Details: Name and optional profile information you provide during account setup.
  • Delivery Address: Your delivery address including GPS coordinates to verify you are within the serviceable delivery zone.
  • Order Information: Products ordered, quantities, order history, and transaction details.
  • Payment Information: Payment is processed through Razorpay. We store only the Razorpay payment ID and order status — we do not store your card details, UPI ID, or bank account information.

2.2 Information Collected Automatically

  • Device Information: Device model, operating system version, unique device identifiers, and app version.
  • Location Data: GPS coordinates when you use the app, solely to verify delivery zone eligibility and enable delivery tracking.
  • Usage Data: App interaction data, crash reports, and performance metrics collected via Firebase Analytics and Firebase Crashlytics.
  • Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens to send you order updates and delivery notifications.

3. How We Use Your Information

We use the collected information for the following purposes:

  • To create and manage your account.
  • To process and fulfill your grocery orders.
  • To verify that your delivery address is within the serviceable delivery zone.
  • To send order status updates, delivery notifications, and promotional offers via push notifications.
  • To process payments through Razorpay.
  • To improve our app, fix bugs, and analyze usage patterns.
  • To comply with legal obligations and resolve disputes.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

  • Delivery Partners: Your name, phone number, and delivery address are shared with assigned delivery personnel to complete your order.
  • Payment Processor (Razorpay): Order amount and payment details are shared with Razorpay to process transactions. Razorpay's privacy policy governs their use of your data.
  • Firebase (Google): Authentication data, analytics, crash reports, and cloud storage are processed by Google Firebase services. See Firebase Privacy Policy.
  • Google Maps: Location data is sent to Google Maps services for delivery zone verification and navigation. See Google Privacy Policy.
  • Law Enforcement: When required by law, court order, or government regulation.

5. Data Storage & Security

Your data is stored on Google Firebase servers (Cloud Firestore, Firebase Storage) which are hosted on Google Cloud infrastructure. We implement Firestore Security Rules and Row-Level Security to restrict data access. All data transmission is encrypted via HTTPS/TLS.

While we take commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

  • Account Data: Retained as long as your account is active. You may request deletion at any time.
  • Order History: Retained for 2 years for customer support and legal compliance.
  • Analytics Data: Aggregated analytics are retained as per Firebase defaults (typically 14 months).

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Opt out of promotional push notifications via your device settings.
  • Withdraw consent for location access via your device settings (note: this may affect app functionality).

To exercise any of these rights, contact us at sidharth@devlune.in.

8. Children's Privacy

Instakart is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Third-Party Links

The Service may contain links to third-party websites or services (e.g., Razorpay, Google Maps). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us: