This Privacy Policy describes how BudgetBasket ("we", "us", "our") collects, uses, stores, and shares information when you use our website at www.budgetbasket.co.in and our Android application (collectively, the "Service").

BudgetBasket is a free grocery price comparison tool. We help you find the cheapest platform for your weekly groceries by comparing prices across Blinkit, Zepto, and Swiggy Instamart. We do not sell or deliver groceries ourselves; we are an independent comparison service.

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information you provide directly

BudgetBasket has no login and no user account. You do not give us your name, email address, or a saved delivery address to use the Service. The only things you actively provide are:

• Pincode / area — used to fetch grocery prices for your delivery area. You enter it, or let us derive it from your location (see 1.2). It is stored on your device; the pincode value is also sent to our price source (Actowiz) alongside your search term, and is included in the anonymous usage events described in 1.2.
• Shopping list contents — the items you add to your list. Stored locally on your device only; because there is no login, lists are not saved on our servers.

1.2 Information collected automatically

• Approximate location — only if you tap "Use my location" or "Pick on map", we send your device's GPS coordinates or map selection to Mapbox to convert them into a pincode/city (see section 3.3). We do not track your location in the background, and the raw coordinates are not stored on our servers — only the resulting pincode/city is kept on your device. In addition, our analytics providers (see section 3.8) may derive an approximate (city-level) location from your IP address; IP anonymization is enabled for Google Analytics.
• Anonymous identifiers — an anonymous client ID is generated on first use and stored on your device. The app also creates an anonymous session with our database provider (Supabase); this is not a login and carries no name or email — it is a random identifier used only to attach anonymous usage events. Our analytics providers also assign their own measurement identifiers (see section 3.8).
• Usage and analytics data — we measure how the Service is used (for example: searches run, comparisons completed, savings shown, order links tapped, pincode set) via (a) Google Analytics, (b) Vercel Web Analytics, and (c) a first-party events log in our own database. These records are tied to the anonymous identifiers above, never to your identity. See sections 3.8–3.10.
• Standard log data — when the Service makes a request, our hosting provider (Vercel) automatically logs your IP address, browser type, operating system, and timestamps for security and operational purposes.

1.3 Information stored locally on your device

The following are stored on your device only and are not sent to our servers:

• Your recent search terms
• Your shopping lists
• Your selected pincode/city
• Theme preference and onboarding completion flag
• An anonymous device/session identifier

You can clear this data at any time by clearing your browser/app storage.

2. How We Use Your Information

• To fetch grocery prices from Blinkit, Zepto, and Swiggy Instamart for your delivery pincode
• To convert your location into a pincode/city, only when you ask us to (via Mapbox — see section 3.3)
• To understand and improve the Service through anonymous usage analytics (see sections 3.8–3.10)
• To respond to your support requests or feedback at the contact details you provide
• To comply with applicable laws and prevent fraud or abuse

We do not sell your personal information to third parties. We do not display advertising. We do not share your data with marketing companies. We do not send any commercial, promotional, or marketing messages. We do not collect a name, email, or account; if you contact us by email, we use your email address only to reply to you.

2.1 We do not share your data with grocery platforms

BudgetBasket does not transmit your name, email, address, or any other personal data to Blinkit, Zepto, or Swiggy Instamart. When you tap "Order on Blinkit/Zepto/Swiggy", you are simply redirected to that platform's own app or website. From that point on, your interaction is governed entirely by that platform's own privacy policy, and any data they collect from you is collected by them directly, not via BudgetBasket.

3. Third-Party Services We Use

BudgetBasket relies on the following third-party services to function. Each is contractually or technically bound to handle data only for the purposes described:

3.1 Supabase (database)

We use Supabase as our database and backend. Because BudgetBasket has no login, we do not store user accounts, names, emails, or passwords, and we do not send OTPs. On first use the app creates an anonymous Supabase session — a random identifier with no personal details — so that anonymous usage events can be stored under database access rules. Supabase's full privacy practices are described in its privacy policy.

3.2 Vercel (hosting)

Our website and API are hosted on Vercel. Vercel maintains server logs (IP address, request timestamps) for security and performance, per its privacy policy.

3.3 Mapbox (maps and geocoding)

If you use the "Pick on map" or "Use my location" features, we send your coordinates to Mapbox to convert them into a human-readable address (street, city, pincode). Mapbox's privacy practices are described at mapbox.com/legal/privacy.

3.4 Actowiz Solutions (price data aggregation)

We use an aggregator service (Actowiz Solutions) to fetch publicly available price listings from Blinkit, Zepto, and Swiggy Instamart. We only share with this service the search keyword and pincode needed to retrieve relevant prices. We do not share your personal information with this service.

3.5 wsrv.nl (image proxy)

To display product images reliably across devices, we route product image requests through wsrv.nl, an open-source image proxy. Only the public image URL is shared; no personal data.

3.6 Google Fonts

We use Google Fonts to render typography. Google may log standard request metadata (such as IP address) when fonts are loaded.

3.7 Blinkit, Zepto, and Swiggy Instamart

When you tap "Order on Blinkit/Zepto/Swiggy" from within the Service, you are taken to that platform's website or app. Once there, that platform's own privacy policy governs your interaction. We are not affiliated with these platforms and have no control over their practices.

3.8 Google Analytics (usage analytics)

We use Google Analytics, a service provided by Google, to understand how people use BudgetBasket so we can improve it. Google Analytics collects information such as the actions you take in the Service (for example, searches you run, comparisons you view, and order links you tap), device and usage identifiers, and approximate location derived from your IP address. We have enabled IP anonymization. This information is shared with Google and processed in accordance with Google's Privacy Policy. We use this data only to analyse usage and improve the Service, not to identify you personally. You can opt out of Google Analytics by installing Google's opt-out browser add-on.

3.9 Vercel Web Analytics

In addition to Google Analytics, we use Vercel Web Analytics (provided by our host, Vercel) to measure page and route usage. It is privacy-focused and does not rely on cross-site tracking cookies.

3.10 First-party usage events

We also record a small set of anonymous usage events (for example: a search run, a comparison completed, an order link tapped — together with your pincode and an anonymous session identifier) in our own Supabase database (see section 3.1). These events are stripped of personal identifiers and are used only to understand and improve the Service.

4. Data Storage and Security

Data transmitted between your device and our servers (Supabase, Vercel) is encrypted in transit using HTTPS/TLS. Because there is no login, we do not hold passwords or email credentials. We employ standard security practices to protect against unauthorised access, but no system is completely secure. You use the Service at your own risk.

5. Data Retention

• Anonymous usage events — retained (tied only to an anonymous session identifier) to analyse and improve the Service.
• Analytics data — usage data collected by Google Analytics is retained per Google's data-retention settings (by default up to 14 months) and then aggregated; Vercel Web Analytics is aggregated.
• Server logs — retained by Vercel per their standard policy (typically 30 days).
• Local device data — retained on your device until you clear browser/app storage or uninstall.

6. Your Rights

BudgetBasket has no account and stores no personal identifiers such as your name or email. Most of your data (searches, list, pincode) lives on your device and is fully within your control. Under the Digital Personal Data Protection Act, 2023 (India) and similar laws, you have the right to:

• Access — request the limited anonymous data associated with your device/session identifier
• Correct or delete local data — clear the app's on-device storage at any time (via browser/app settings) to remove your searches, list, and pincode
• Delete server-side data — email us to delete the anonymous usage data tied to your device/session identifier
• Withdraw consent — clear your local data; you can also opt out of Google Analytics (see section 3.8)
• Lodge a complaint with the Data Protection Board of India if you believe your rights have been violated

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

For how to remove your data, see our Data Deletion page.

7. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Cookies and Local Storage

We do not use cookies for advertising or cross-site tracking. We use Google Analytics and Vercel Web Analytics for usage measurement, which may set first-party analytics identifiers on your device to distinguish sessions and devices (see sections 3.8–3.10). Apart from analytics, we use the browser's localStorage and sessionStorage to remember your preferences, shopping list, and recent searches; this data stays on your device.

9. International Data Transfers

Some of our service providers (Supabase, Vercel, Mapbox, and Google) may process data on servers located outside India. By using the Service, you consent to such transfers, which are protected by contractual safeguards equivalent to those required under Indian law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top whenever we make material changes. Your continued use of the Service after changes are posted constitutes acceptance.

11. Disclaimer About Price and Product Information

Prices, availability, and product information displayed on BudgetBasket are fetched from Blinkit, Zepto, and Swiggy Instamart. We make commercially reasonable efforts to keep this information accurate but make no guarantees. Always verify prices, fees, and offers on the respective platform before placing an order. BudgetBasket is not responsible for any difference between displayed and actual prices, or for any issues with orders placed on third-party platforms.

12. Contact Us