Privacy Policy

Effective 23 September 2026. This policy covers the ThreadDash mobile app and the threaddash.in website, operated by ThreadDash (“we”). Questions: [email protected].

Data we collect

• Account & profile — phone number (verified by SMS one-time password), name, and optionally an email address.
• Delivery details — delivery addresses and, if you allow location access, your device’s GPS location to place the delivery pin. You can always type an address instead.
• Orders & payments — your order and return history. Card and UPI details are entered directly with our payment processor, Razorpay; we never see or store them.
• Voice search — when you use voice search, your speech is processed by your device’s operating-system speech-recognition service (Google on Android, Apple on iOS), which may transmit audio to their servers for transcription. We do not record, store, or share your voice; we receive only the resulting text query.
• App activity & diagnostics — in-app search queries, screen interactions, crash logs, performance data, and device identifiers (including a push-notification token), collected through PostHog, Sentry, and Firebase Cloud Messaging.

How we use it

To operate the service: authenticate you, show the catalogue for your area, deliver and return orders, process payments, send order notifications, fix crashes, and understand which features are used so we can improve them. We do not sell personal data and we do not use it for third-party advertising.

Who processes it

Service providers acting on our instructions: Razorpay (payments), Twilio (OTP SMS), Google / Apple (device speech recognition, push delivery), Sentry (crash reporting), PostHog (product analytics), and our cloud hosting provider. Each receives only what its function requires.

Retention & deletion

Account data is kept while your account is active. You can request deletion at any time — threaddash.in/delete-account — and your account, profile, addresses, and activity are deleted within 30 days. Records of completed orders, invoices, and payments are retained for the period required by Indian tax and consumer-protection law.

Security

All data is encrypted in transit (HTTPS). Session tokens are stored in your device’s secure keystore.

Children

ThreadDash is not directed at children under 18.

Changes

We will update this page when our practices change; material changes are announced in the app.