AptiMart Privacy Policy
Version 2026-11-05
1. Who we are and who this policy is for
Apti is a technology service platform by Codepackers Software Solutions Pvt Ltd (CIN U62091HR2023PTC114085), 1501, Tower-2, Unitech Escape, Sector-50, Gurgaon, Haryana, India 122018 ("we", "us"). AptiMart is a workspace in the Apti platform, used through the Apti app ("Apti: Shops near you" on Google Play). This policy covers AptiMart.
AptiMart has three kinds of users:
- Customers, who find neighbourhood shops and service providers, chat with them, call them and order from them.
- Shop owners (including co-owners), who list and run a shop or service.
- Shop staff, whom a shop owner adds to chat with customers, handle orders and make deliveries.
"You" means any of them. Where something applies to only one kind of user, it is marked (customers), (shop owners) or (shop staff).
We are responsible for the personal data of all AptiMart users. A shop is also responsible for what it learns about its own customers when serving them (section 4).
2. What we collect and why
| Data | Why | Kept |
|---|---|---|
| Account (everyone): name, login ID, mobile number, email (optional), profile photo (optional), password (stored as a one-way hash); *optional* gender, date of birth and address; for shop owners, PAN where required. If you sign in with Google, that account's ID, name and email | To create your account, sign you in and show who you are to the shops you deal with | While your account exists |
| Phone and SIM check (everyone): which SIM is in the phone (subscription ID, slot, carrier), a one-time SMS code to confirm your number, sign-in records (IP address, time) | India's telecom rules require messaging apps to tie an account to its SIM; security and fraud prevention | 1 year |
| Location (optional): your position while the app is open, only if you switch on "Share my location" (off until you do); a location or live location you choose to send in a chat; (shop staff) while you make a delivery, your live location, shown only to that customer until the delivery ends | Nearby shops, the map, deliveries, and what you chose to share | Current position until you switch sharing off; 7 days of history. Locations sent in chat go with the chat |
| Addresses (customers, optional): up to 5 delivery addresses | So a shop can deliver to you. A shop sees an address only after you agree | Until you delete them |
| Chats, photos, voice notes, documents, videos and calls (everyone): what you send, and a record of calls (who, when, how long). Calls are not recorded | To deliver them and keep the conversations between customers and shops | Messages 90 days, files 30 days, call records 1 year |
| Orders and payment requests (customers and shops): items, prices, status, the shop's UPI ID, your "I've paid" note and the payment reference you may type | The record of an order between a customer and a shop. We never see or move the money | With the chat |
| Shop details (shop owners): shop name, address, photos, registration numbers, UPI ID, hours, staff, prices and stock, offers; monthly counts of the shop's use (counts only, never content) | To show the shop to customers, and to plan fair future pricing for shops | While the shop is listed, then 180 days |
| Apti Support chat (shop owners): what a shop's owners send to Apti's support team, and their requests for a call back | To answer questions about the shop | 90 days, like other chats |
| Reports and complaints (everyone): what you reported or complained about, and what was done | To keep AptiMart safe and to meet our legal duty to handle complaints | 1 year; removed content 180 days |
| Device and crash information (everyone): device model, Android version, app version, network type, battery level, push token; on Android, error reports with no name or message text | To deliver notifications, keep the app working on weak networks, and fix faults | 1 year; error reports 90 days |
What we do not do. We do not read your phone's contacts. We do not use advertising or analytics trackers. We do not sell your data or use it for advertising.
3. What we use your consent for
Location sharing, sending a location, sharing an address with a shop, notifications and the phone permissions (camera, microphone, location, notifications) are all your choice, and each can be withdrawn as easily as it was given:
- Share my location: Profile › Privacy › Sensors. When you switch it off, we delete your stored position.
- Live location: stop it in the chat.
- Addresses: Profile › My addresses, or say no when a shop asks.
- A shop: leave or block it from its page.
- Phone permissions: your phone's settings.
4. Who sees your data
- The shops you deal with (customers). A shop's owners and staff see your name, your chats and orders with that shop, and the addresses you agreed to share. Only its owners see your mobile number. Customers never see one another, and shops never see your location unless you send it. Each shop must use your data only to serve you, and must never copy, sell or message it outside the app.
- The customers you serve (shop owners and shop staff). Customers see the shop's name, photos, address and registration numbers shown on its page, and the name and photo of whoever answers them in the shop's chat. A shop's owners see its chats, orders and staff.
- Apti's support team reads a shop's Apti Support chat, and content that is reported. We do not otherwise read your chats or listen to your calls.
- Service providers that work for us under contract:
- Hostinger: servers in Mumbai, India
- Google: Firebase Cloud Messaging for notifications, Firebase Crashlytics for error reports, and ML Kit for reading QR codes and business cards on your phone (it sends Google basic device and app diagnostics)
- MSG91: SMS codes
- OpenStreetMap: maps, place search and nearby places; your search text and the map area, without your name
- Google: confirms who you are if you choose to sign in with it
- Cloudflare: serves our website, which holds no account data
- The law. We disclose data when a court or a government authority lawfully requires it.
5. Your rights
You can see the data we hold about you, correct it (most of it in Profile › Edit profile), erase it, and nominate someone to act for you if you die or cannot act. Ask through Profile › Contact us or at support@codepackers.com. We answer within 30 days. If you are not satisfied, complain to our grievance officer (section 9) and then to the Data Protection Board of India.
6. Deleting your account
- In the app: tap your picture › Sign-in and security › Delete my account.
- Without the app: apti.codepackers.com/delete-account/, or email support@codepackers.com.
You are signed out at once. For 30 days, signing in again cancels the deletion. After that we delete your profile, photo, addresses, positions and files. Messages you sent stay in the other person's chat as "Deleted account" until they expire. As Indian law requires, we keep your login ID, mobile number, email and PAN for 180 days. Reports and sign-in records are kept for the periods in section 2, and a shop keeps its order records with you as its business record.
7. Security
Connections are encrypted (HTTPS). Passwords and codes are stored as hashes. Files are scanned for viruses. Staff access is limited and logged. Chats are not end-to-end encrypted, so they can be read on our servers, as section 4 describes. If your data is leaked, we tell you and the Data Protection Board without delay.
8. Where data is stored, and children
Your data is stored in India, on servers in Mumbai. Notifications pass through Google's servers, and error reports and ML Kit diagnostics are kept by Google, which may be outside India.
Apti is for people aged 18 or over. We do not knowingly collect children's data. If you think a child has an account, tell us and we will remove it.
9. Changes and contact
If we change this policy, we show the new version and its date here and in the app. If we add a new kind of data or a new purpose, we tell you in the app first.
Codepackers Software Solutions Pvt Ltd, 1501, Tower-2, Unitech Escape, Sector-50, Gurgaon, Haryana, India 122018. Email: support@codepackers.com. In the app: Profile › Contact us.
Grievance officer: Sujagya Das Sharma, suja.sharma@codepackers.com, +91-8383980428.