గోప్యతా విధానం

Milkanna (“we”, “us”) runs the Milkanna app and milkanna.com: a shared record of daily milk deliveries, bills and payments between independent milkmen and the households they serve, plus a directory where households can find milkmen near them. This policy explains what personal data we process, why, and the choices and rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). For the data described here, Milkanna is the Data Fiduciary.

1. What we collect

• Account: your mobile number (to sign you in with a one-time code), your name, an optional email address (confirmed with a code we email to it) and your preferred language.
• Customer profile: your delivery address, locality, PIN code, a landmark and, only if you choose to share it, your home’s location on a map.
• Milkman profile: business name, locality, PIN code, service area (a centre point and radius), milk types and prices, delivery slots, UPI ID and payee name, and an optional photo and description.
• Ledger: subscriptions, each day’s delivery record, skips and quantity changes, bills, payments you record or report (amount, UPI transaction reference number “UTR”, and an optional screenshot), and disputes.
• Ratings and reports you submit.
• Device and security data: push-notification token and platform, app version, and technical logs (IP address, time, errors) used to keep the service secure.
• Consent records: what you agreed to (terms and privacy, age, WhatsApp messages, public listing, seller agreement) and when.

We never collect your bank account or card numbers, UPI PIN, or contacts list.

Identity verification (milkmen only, optional)

So that customers know who they pay, a milkman can verify his identity once, with his consent. We never ask for, collect or keep his Aadhaar number.

• With Aadhaar: the milkman scans the QR code on his Aadhaar card or e-Aadhaar. We check UIDAI’s digital signature on it and use, only for this check, the name, photo, date of birth, gender and address in the QR code, plus a live selfie. The QR code holds only the last 4 digits of the Aadhaar number; we keep those 4 digits and nothing more.
• Without Aadhaar: he can instead send a photo of his voter ID or driving licence and a live selfie.
• The check: a Milkanna staff member compares the photos with his public profile photo and sends ₹1 to his UPI ID to check the account holder’s name. The same check is repeated when he changes his UPI ID.
• What we keep: his verified name (shown to customers), the last 4 Aadhaar digits, which method was used, the decision, his UPI ID and his consent. The Aadhaar photo, address, date of birth, gender, selfie and ID photo are stored encrypted, seen only by the staff member reviewing the request, and deleted 7 days after the decision.

2. Why we use it

• To sign you in and keep your account secure.
• To run the shared ledger between you and your milkman or customers: routes, calendars, bills, balances and payment confirmations.
• To show households the milkmen who deliver near a location. We never reveal a milkman’s exact service point, only an approximate distance.
• To send one-time codes, bills, reminders and other service messages by push notification, SMS, email (a code to confirm your address, then your monthly bills and payment receipts, which you can turn off in Settings) and, if you opt in, WhatsApp.
• To prevent fraud and abuse, handle complaints and meet legal obligations.

We use your data only for these purposes. We do not sell personal data and do not show third-party advertising.

3. Who can see what

• A milkman and his connected customers see each other’s name and phone number, and the address, deliveries, bills and payments of their subscription.
• A listed milkman’s business profile (name, locality, milk types and prices, photo, description and rating) is public. His phone number is public only if he chooses.
• Ratings show the customer’s first name and last initial only.
• Service providers who process data on our instructions: cloud hosting and storage (Amazon Web Services in Mumbai, Cloudflare), SMS and WhatsApp delivery, email delivery (Zoho Corporation's ZeptoMail sends Milkanna's service emails: email verification codes, bills and payment receipts; it receives your email address, name and the email's contents), push notifications (Firebase Cloud Messaging for Android, Apple Push Notification service for iPhone) and error monitoring.
• Maps and address search: when you type an address or place a pin, the text you type and a point near it (rounded to about a kilometre when we add it ourselves) go through our server to our map provider (Ola Maps, Google Maps or OpenStreetMap's Photon and Nominatim services), and the map you see is drawn from map tiles fetched by your device (Google Maps on Android, Apple Maps on iPhone, OpenFreeMap on the web), which see your device's IP address and the area shown. Some of these providers process data outside India. Your exact pin is never shown to a milkman; a milkman's location is never shown to anyone.
• Government authorities, when the law requires it.

4. Money: Milkanna never holds it

Milkanna is not a bank, wallet or payment aggregator, and never receives, holds or transfers money. Customers pay their milkman directly through their own UPI app or in cash. A payment is marked as received only when the milkman confirms it. We keep the UTR as the record of the payment.

5. How long we keep it

• Payment screenshots are deleted automatically about 14 days after the milkman confirms or rejects the payment; if nobody ever decides, after 60 days (or about 14 days after the milkman deletes his account); uploads that are never attached to a payment are deleted within a day.
• When you delete your account, your name, email and phone number are removed at once and the rest of your profile (addresses, locations, photo) and the notes you wrote (payment notes, disputes, replies, reports) within 30 days.
• Ledger records (deliveries, bills and payments) are kept, without your contact details, only as long as needed for legal, tax and dispute-resolution purposes, because the other party to the ledger relies on them.
• Backups of the database are encrypted and kept for up to 30 days, so data you deleted can remain in a backup for up to 30 more days before it is gone for good. Backups are used only to recover from a failure.
• Identity verification: the Aadhaar photo, address, date of birth, gender, selfie and ID photo are deleted 7 days after the decision (see section 1); the verified name, last 4 Aadhaar digits and UPI ID stay with the milkman’s profile until he deletes his account.
• Notifications in your in-app inbox are deleted after 180 days.
• One-time codes expire within minutes and are stored only in hashed form; security logs are kept for a short period and do not contain search locations or phone-number searches.

6. Your rights

Under the DPDP Act you may:

• ask for a summary of the personal data we process about you;
• correct or update it (most details can be edited in the app);
• erase it by deleting your account in the app or as described on our account deletion page;
• withdraw a consent at any time (for example WhatsApp messages or a public listing), which does not affect processing already done;
• nominate someone to exercise these rights if you die or cannot act yourself;
• have your grievances addressed by our Grievance Officer, and if you are not satisfied, complain to the Data Protection Board of India.

7. Children

Milkanna is only for people aged 18 or older. We do not knowingly process children’s personal data.

8. Security

We use encrypted connections, one-time-code sign-in, hashed tokens, encrypted secrets and private storage with short-lived links, and we limit staff access to what their work needs. If a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.

9. Changes

We will tell you in the app before a material change to this policy takes effect.

10. Contact and Grievance Officer

Grievance Officer, Polsiva Pvt Ltd
Email: [email protected]
Phone: +91 76808 13829
Milkanna is operated by Polsiva Pvt Ltd, Plot No 1, Mokshit Marvel, Patelguda (near Praneeth Pranav Homes), Ameenapur, Hyderabad, Sangareddy District, Telangana 502032.

We acknowledge every complaint within 24 hours and resolve it within 7 days.