Privacy Policy

1. Introduction

Welcome to the Fyreworks Mobile App ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information that you voluntarily provide to us:

• Phone Number: Used for account creation, authentication via OTP, and order management
• Name: For personalizing your experience and order processing
• Email Address: For account communication and order updates (optional)
• PIN: Encrypted PIN for secure app access
• Postal Code: For delivery and location-based services
• Order Information: Product preferences, purchase history, and order details

2.2 Technical Information

We automatically collect certain technical information when you use our app:

• Device Information: Device type (Android/iOS), app version, and operating system
• Usage Data: App interactions, features used, and session duration
• Log Data: Error logs and app performance metrics
• Store Context: Connected stores and active store preferences

2.3 Location Information

We may collect location information to:

• Suggest nearby stores
• Provide location-based product recommendations
• Improve delivery services

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Process and fulfill orders
• Provide customer support
• Authenticate your identity via OTP and PIN
• Manage store connections and preferences

3.2 Communication

• Send OTP for account verification
• Provide order updates and notifications
• Send promotional offers (with your consent)
• Respond to your inquiries and support requests

3.3 Improvement and Analytics

• Analyze app usage to improve functionality
• Develop new features and services
• Ensure app security and prevent fraud
• Conduct research and analytics

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Partner Stores

• Order information is shared with connected stores (Rainbow, Pendulum, Demo stores) to process your orders
• Customer profile information is shared to enable seamless multi-store experience

4.2 Service Providers

• SMS Service (MSG91): For sending OTP messages
• Cloud Infrastructure (AWS): For secure data storage and processing
• Analytics Providers: For app performance monitoring (anonymized data only)

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes or government requests
• Protection of our rights and property
• Prevention of fraud or security threats
• Protection of user safety

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Secure Authentication: JWT tokens with expiration and refresh mechanisms
• PIN Security: PINs are hashed and never stored in plain text
• Access Controls: Strict access controls and monitoring
• Regular Audits: Security assessments and vulnerability testing

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Correction

• View and update your profile information in the app
• Request a copy of your personal data
• Correct inaccurate or incomplete information

7.2 Deletion and Restriction

• Delete your account and associated data
• Restrict processing of your information
• Object to certain uses of your data

7.3 Communication Preferences

• Opt-out of promotional communications
• Manage notification settings in the app
• Update consent preferences

8. Third-Party Services

Our app may contain links to third-party websites or integrate with third-party services. This privacy policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have the information removed.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending a notification through the app
• Updating the "Last Updated" date

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information

13. Compliance

This Privacy Policy is designed to comply with applicable privacy laws and regulations, including:

• Information Technology Act, 2000 (India)
• Digital Personal Data Protection Act, 2023 (India)
• General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California residents

14. Consent

By using our mobile application, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. You may withdraw your consent at any time by discontinuing use of the Service and requesting account deletion.