Privacy Policy

Last updated: July 5, 2026

Bakaloo And Foods Enterprise ("Bakaloo", "we", "us", "our") operates the Bakaloo mobile app and website (together, the "Service"), a grocery delivery platform. This policy explains what information we collect, why we collect it, and how it is handled. It applies to everyone who uses the Service — customers, and where noted, shop staff and delivery riders.

1. Information We Collect

Information you give us

Bakaloo Wallet

The Bakaloo Wallet is a stored-value balance you can top up (via Razorpay) and use to pay for orders. It is a closed-loop balance: it can only be spent within Bakaloo — it cannot be withdrawn to a bank account, UPI, or cash. Sending balance to another Bakaloo user is built into the app but currently turned off; if we turn it back on, it will require you to confirm with your device's fingerprint/ face unlock or passcode, and we will update this policy first.

Information collected automatically

Information we do not collect

We do not access your camera, photo library, contacts, SMS messages, or call logs. Where the app uses biometric unlock (fingerprint/face) to confirm a wallet transfer, that check is performed entirely on your device by the operating system — your biometric data is never sent to us or stored on our servers.

2. Payments

Card, UPI, netbanking, and wallet payments are processed by Razorpay, a licensed payment gateway. Bakaloo does not receive or store your full card number, CVV, or UPI PIN — Razorpay handles that directly under its own security and compliance standards (PCI-DSS). We receive only the outcome of a payment (success/failure) and a reference ID to reconcile it with your order.

3. How We Use Your Information

4. Who We Share Information With

We share information only as needed to run the Service:

5. Data Retention

We retain account and order information for as long as your account is active, and afterward for as long as needed to meet our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You can request deletion at any time (Section 7).

6. Your Choices

7. Account & Data Deletion

You can request deletion of your account and associated personal data at any time from Profile → Account Settings in the app, or by emailing privacy@bakaloo.in from your registered phone number/email — see our Account Deletion page for full step-by-step instructions. We'll complete the request within 30 days, except for records we're legally required to retain (for example, invoices and transaction records under Indian tax law).

8. Age Requirement

The Service is intended for use by people aged 18 and over — you must be at least 18 to create an account or place an order. The Service is not directed at children, and we do not knowingly collect personal information from anyone under 18.

9. Security

All data sent between the app and our servers is encrypted in transit using HTTPS/TLS. We also use access controls and audited third-party payment processing to protect your information. No system is 100% secure, but we work to protect your data and respond quickly to any incident.

10. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent for its processing. To exercise these rights, contact us using the details in Section 12.

11. Changes to This Policy

We may update this policy as the Service changes. Material changes will be notified in-app or by the contact details you've provided. Continued use of the Service after an update means you accept the revised policy.

12. Contact Us

Questions about this policy or your data? Reach us at privacy@bakaloo.in or support@bakaloo.in, or call our helpline at +91 99249 98906.