OnlineSabziShop

Privacy Policy — Sabzi Shop

Effective date: June 5, 2026 Last updated: June 5, 2026 App: Sabzi Shop (package com.azhar.sabzishop) Developer / Data Controller: Azhar Saddique Contact: azhar3268@gmail.com

This Privacy Policy explains how the Sabzi Shop mobile application (“the App”, “we”, “us”, “our”) collects, uses, stores, protects, and discloses information when you use the App. By installing or using the App you agree to the practices described below.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or place an order we collect:

Data	Purpose
Full name	Account identity, order delivery
Email address	Account login, password reset, order updates
Phone number	Delivery coordination
Delivery address (address, street, house number)	Order delivery
Password	Authentication (never stored in plain text — see §5)
Profile photo (optional)	Personalisation of your account
Customer feedback / ratings	Service quality improvement

1.2 Order & Transaction Data

Items added to your cart
Orders placed (products, quantities, prices, delivery charges, status, timestamps)
Order history

We do not collect or store any payment-card data. Payments are handled as Cash-on-Delivery between you and the merchant.

1.3 Automatically Collected Data

Firebase Cloud Messaging token — used to send order/notification push messages to your device.
Authentication state — managed by Firebase Authentication.
Standard diagnostic data Google Play services may collect (crash logs, device model, OS version) for stability.

1.4 Data We Do Not Collect

We do not collect your precise GPS location.
We do not access your contacts, SMS, call logs, microphone or camera beyond the in-app image picker (only when you explicitly pick a photo).
We do not use third-party advertising or marketing trackers.

2. How We Use Your Information

We use the data above only to:

Create and maintain your customer or admin account.
Display the product catalogue and process the orders you place.
Deliver products to the address you provide.
Send transactional notifications (order placed, confirmed, delivered).
Allow the admin to manage inventory, view sales/revenue analytics and read customer feedback.
Improve app stability, security and user experience.
Comply with legal obligations.

We do not sell, rent, or trade your personal information.

3. Legal Basis for Processing

We process your data on the basis of:

Performance of a contract — to fulfil the orders you place.
Consent — for optional features like profile photos and push notifications (which you can disable in your device settings).
Legitimate interests — security, fraud prevention and improving the service.

Your information is stored on and processed by the following sub-processors:

Service	Provider	Purpose	Data shared
Firebase Authentication	Google LLC	User sign-in	Email + derived password hash
Cloud Firestore	Google LLC	Database for users, products, orders, feedback	Encrypted PII + order data
Firebase Cloud Messaging	Google LLC	Push notifications	FCM device token

Google’s privacy policy: https://policies.google.com/privacy

We may also disclose information when required to do so by law, valid court order or to protect the rights, property or safety of users and the public.

5. Security

We take the protection of your data seriously and apply industry-standard safeguards:

Password protection — your password is never sent or stored in plain text. The App derives a one-way HMAC-SHA256 + SHA-256 credential on device before authenticating with Firebase.
Encryption of personally identifiable information (PII) — your name, phone number, address, street and house number are encrypted with AES-256/GCM on the device before being stored in Firestore.
Transport security — all communication with Firebase services uses TLS / HTTPS.
Code hardening — release builds are obfuscated and minified with R8 / ProGuard to protect against reverse-engineering.
Authentication state — only an authenticated user can access their own profile, cart and orders.

While we use commercially reasonable safeguards, no method of transmission or electronic storage is 100% secure.

6. Data Retention

Account, profile and order data is retained for as long as your account exists and for a reasonable period thereafter to comply with our legal and accounting obligations.
You may request deletion of your account at any time (see §8). Upon verification we will delete your personal information from active systems within 30 days, except where retention is required by law.

7. Children’s Privacy

The App is not intended for children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct or update inaccurate data (you can edit your profile in-app).
Request deletion of your account and personal data.
Withdraw consent for push notifications (disable in device settings).
Lodge a complaint with your local data-protection authority.

To exercise any of these rights please email azhar3268@gmail.com with the subject line “Privacy Request — Sabzi Shop” and the email address associated with your account.

9. Permissions Used by the App

Android permission	Reason
`INTERNET`	Communicate with Firebase services
`ACCESS_NETWORK_STATE`	Detect connectivity for retries
`POST_NOTIFICATIONS` (Android 13+)	Show order / promotional notifications you opted in to
Photo picker access (no runtime permission required on Android 13+)	Let you pick a profile picture

10. International Data Transfers

Firebase services are operated by Google and data may be stored on servers located in the United States or other countries where Google operates. By using the App, you consent to such international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest revision. Significant changes will be communicated in-app or via email. Continued use of the App after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

For any questions, concerns or privacy requests, contact:

Azhar Saddique 📧 azhar3268@gmail.com 📱 Sabzi Shop — Android (com.azhar.sabzishop)