We collect three categories of information:

• You give us — name, phone number, delivery address, and (optionally) email. Required to deliver orders.
• You generate — order history, ratings, support tickets, saved addresses, preferences.
• Automatically collected — device type, IP address, approximate location, app interactions, crash logs.

• Fulfill orders and route deliveries.
• Authenticate logins via OTP and prevent fraud.
• Process payments and issue refunds.
• Send order updates, receipts, and (if you opt in) promotions.
• Improve product selection, search, and delivery time predictions.
• Comply with legal obligations and respond to lawful requests.

We do not sell your personal information. We share only what is necessary, with vetted service providers:

• Delivery partners — your name, address, and order contents.
• Payment processors — billing details required to charge you.
• SMS and email providers — for OTPs and order notifications.
• Analytics tools — aggregated, non-personally-identifying usage.
• Law enforcement — only when legally compelled or to prevent imminent harm.

We use a small number of cookies and localStorage entries for essential functionality (login sessions, cart contents) and limited analytics. You can clear them via your browser settings; doing so will log you out.

We retain your account and order history for as long as your account is active. Closed accounts are anonymized within 30 days, except where law requires us to keep records longer (e.g. tax invoices for 7 years).

Passwords are hashed with bcrypt. Payment details are processed by PCI-DSS compliant gateways and never stored on our servers. We use TLS for all data in transit. No system is 100% secure — if you suspect your account has been compromised, contact us immediately.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data (subject to legal holds).
• Export your data in a portable format.
• Opt out of marketing communications at any time.

To exercise any of these, email privacy@milqit.in. We respond within 30 days.

Milqit is not directed at children under 13. We do not knowingly collect information from anyone under 13. If you believe we have, please contact us and we will delete it.

Our servers and most processors are located in India. If you access Milqit from outside India, your information may be transferred and processed in India, which may have different data-protection laws than your country.

We may update this Privacy Policy from time to time. Material changes will be announced by email or in-app notice at least 7 days before they take effect. See also our Terms of Service.