Privacy Policy

1. Who We Are and What This Policy Covers

QwickPe Tech LLP ("QwickPe", "we", "us" or "our") operates qwickpe.com, the QwickPe Android application and related services (together, the "Platform"). The iOS application is not yet publicly available. For personal data processed for our own purposes, QwickPe is the data fiduciary.

This notice explains what personal data we collect, why we use it, who receives it, how long we keep it and the choices available to you. It is written with the Information Technology Act, 2000 and applicable rules in mind and is designed to support the phased requirements of the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as they come into force.

2. Data We Collect

A. Website forms and communications

• Contact requests: name, email address, WhatsApp or telephone number, optional message, consent wording version and submission time.
• Waitlist: email address, marketing consent, consent wording version, subscription status and submission time.
• Testimonials: name, city, user role, rating, category, story, optional outcome, email address, optional phone/WhatsApp details, publication consent and submission time. Email and phone details are kept in a private moderation record and are not included in the public testimonial record.
• Privacy requests: name, account email, optional mobile number, request type and scope, verification and processing status, optional reason, correspondence and completion records.

B. Platform and transaction data

When you use the Android application, we may process your account identifier, name, verified email address or mobile number, profile and role selection (Buyer, Cardholder or both), authentication and account-security events, consent records, notification preferences and support history.

For card-offer and shopping features, we may process the selected bank, card network or card variant, masked identifiers or last digits where needed, participating marketplace, product or cart details, displayed price, applicable offer, delivery estimate, deal acceptance and expiry times, Merchant order reference and Buyer/Cardholder transaction status. The app may open supported marketplace content in an in-app browser or redirect you to a third party. Marketplace credentials and checkout information remain subject to that third party's service.

For wallet, earning and payout features, we may process ledger entries, reward or commission amount, locked/unlocked or pending status, bank-account holder name, bank name, masked account number, IFSC or another payout identifier, payout reference, failed or completed status and related tax or verification information. A balance shown in QwickPe is a Platform ledger and is not a bank deposit or stored-value account unless a separately identified authorised provider expressly says otherwise.

We may also process order evidence, delivery or return evidence, communications, referrals and reward events, dispute records, and information you voluntarily submit to support or fraud review.

Do not send us a full card number, CVV, PIN, OTP, UPI PIN, banking password or marketplace password. QwickPe does not need these credentials. A regulated payment or identity-verification provider may separately request information under its own notice where legally required.

C. Device, security and usage data

Our app, hosting and security providers may process IP address, browser type, device model, operating system and app version, language, time zone, push-notification token, installation or session identifier, approximate location derived from IP, timestamps, screens or pages used, referring source, diagnostic, crash, performance and security logs. We use this information to operate, secure and improve the Platform—not to obtain unrelated content from your device.

Depending on the feature you choose, the app may request notification permission and permission to use a camera or select a photo/document when you upload evidence or a profile image. Permission prompts must explain the purpose at the point of use. You may deny or later revoke optional permissions in device settings, though the related feature may not work. QwickPe does not require access to your contact list, microphone, precise background location, SMS, call logs or unrelated files unless a future feature first provides a prominent explanation and obtains the permission required by law and app-store rules.

D. Privacy choices and third-party content

We store a dated record of your cookie choices, policy version and allowed categories in your browser's local storage. Google Maps remains blocked until you allow external content. Details appear in our Cookie Policy.

E. Information from other sources

We may receive transaction status, refund, payout, identity-verification or fraud signals from a Merchant, bank, card issuer, payment/payout provider, verification provider or another user involved in the same deal. We may combine it with your Platform record only for the purposes described in this Policy.

3. Why We Use Personal Data

• to provide a feature, respond to an enquiry or perform a service you request;
• to create, authenticate and protect an account, provide the selected Buyer or Cardholder experience and remember your settings;
• to operate the iOS or feature-update waitlist and send marketing communications where you expressly opt in;
• to verify, moderate and, with permission, publish genuine testimonials;
• to discover and match eligible offers, administer accepted deals, display status and history, support returns and disputes, calculate or reverse rewards, and arrange permitted payouts through service partners;
• to send service, security, deal-expiry, payout and support notifications you request or that are necessary to operate the account;
• to secure the Platform, prevent abuse and fraud, diagnose failures and maintain records;
• to comply with law, enforce our terms and establish or defend legal claims; and
• to measure site use only when you allow Analytics.

Where processing relies on consent, your action must be free, specific, informed and unambiguous. You may withdraw that consent as easily as you gave it, although withdrawal does not affect processing already lawfully completed or records we must retain by law.

4. When We Share Data

We do not sell personal data. We disclose only what is reasonably necessary to:

• Infrastructure providers: Google Firebase/Google Cloud for database, authentication, hosting and application functions; Cloudflare for optional static hosting, content delivery and website-security services; and email-delivery and operational providers used to respond to or notify you.
• App operations: authentication, push-notification, crash-reporting, analytics and customer-support providers used in the installed build. The Google Play Data safety section for the current Android release should be read together with this Policy.
• Optional providers: Google Analytics and Google Maps only after the relevant consent choice.
• Payment and verification partners: banks, RBI-authorised payment providers, fraud-prevention or verification providers where needed for a requested transaction. Their own privacy notices may also apply.
• Marketplaces and merchants: information you direct us to send, or transaction references needed to open, place, verify, cancel or return an order. A marketplace may independently collect information when you use its app, site or checkout.
• Other users: only the minimum deal information required to fulfil a match. We do not intentionally show one user another user's full contact, card, bank or authentication details.
• Professional advisers and authorities: auditors, lawyers, insurers, courts, regulators or law enforcement where authorised or required by law.
• Business transfers: a successor involved in a merger, restructuring or transfer, subject to confidentiality and applicable notice requirements.

5. Retention

• Contact requests are normally deleted or anonymised within 24 months after the request is closed.
• Waitlist data is kept until you unsubscribe or for up to 24 months after the last meaningful interaction, whichever occurs first, unless a suppression record is needed to honour your opt-out.
• Rejected testimonial submissions and private verification details are normally removed within 24 months after moderation. A published story remains visible until permission is withdrawn or it is no longer relevant.
• Cookie-choice records are stored on your device for up to 12 months. Server-side form consent records may be retained for up to three years after withdrawal or expiry to demonstrate the choice made.
• Transaction, tax, accounting, fraud and dispute records are kept for the period required by applicable law or an active claim. That period may extend after account closure.
• Account data is kept while the account is active and then deleted, anonymised or restricted after a verified closure request, except for records needed for an open deal, payout, return, dispute, fraud/security purpose or legal retention obligation.
• Push tokens and device-session records are removed or made inactive when they are no longer required to deliver or secure the service.

We may keep de-identified information that can no longer reasonably identify you.

6. Security and Incident Response

We use access controls, role-limited administration, transport encryption, masked identifiers, database security rules, logging, environment separation and vendor controls appropriate to the nature of the data. Access to private form, account and transaction records is limited to authorised personnel or processors with a business need. No online service can promise absolute security. If a personal-data breach requires notice under applicable law, we will notify the competent authority and affected individuals in the required manner.

7. Your Choices and Rights

• Access, correction and erasure: ask for a summary of personal data, correction of inaccurate data or erasure where retention is not required.
• Account deletion: use the in-app account control where available or our public account and data deletion page. We verify ownership before destructive action. Uninstalling the app alone does not delete an account.
• Withdraw consent: change analytics or external-content permission through the permanent Privacy choices control; withdraw testimonial publication or other consent by contacting us.
• Email preferences: use our unsubscribe page. Essential service, security or legally required messages may still be sent.
• Grievance: raise a concern with our Grievance Officer and, where applicable, use the statutory complaint route after allowing us a reasonable opportunity to respond.
• Nomination: where the applicable DPDP provisions are in force, nominate another individual to exercise your rights in the event of death or incapacity.

We may need enough information to verify your identity before completing a request. We will not charge for ordinary requests unless permitted by law.

8. Account Deletion Process

After receiving a deletion request, we may ask you to confirm control of the registered email address or mobile number. We may delay final deletion while a deal, return, payout, chargeback, complaint or legal hold is open. Once the request is verified and eligible for completion, we close access and delete or irreversibly anonymise data that is no longer required. Where we must retain a limited record, we restrict it from ordinary product use and keep it only for the applicable legal, fraud, accounting or dispute purpose.

Deletion from active systems may not immediately remove encrypted disaster-recovery copies. Backup data remains protected, is not restored for ordinary use and is overwritten on the normal backup cycle, unless law requires a longer hold.

9. Children

The Platform is intended only for people aged 18 or older. We do not knowingly offer financial or transaction features to children or seek their data. If you believe a child has submitted personal data, contact us so we can investigate and delete it where appropriate.

10. International Processing and Third-Party Services

Some providers may process data outside your state or outside India, subject to applicable transfer restrictions and contractual safeguards. External marketplace, bank, social-media and map services operate under their own privacy notices. Following a link does not make QwickPe responsible for that service's practices.

11. Automated Tools, Eligibility and Fairness

QwickPe may use rule-based checks to identify offer eligibility, suspicious activity, duplicate accounts or transaction risk. These checks can be incomplete or wrong and do not guarantee an issuer or Merchant decision. Where a significant restriction results from an automated flag, you may contact support and provide relevant context for human review, subject to security and legal limits.

12. App-Store Disclosures and Software Changes

The permissions, software development kits and data practices in each released build must match its Google Play Data safety disclosure and, when iOS launches, its Apple App Privacy disclosure. If a new build introduces a materially different data purpose or sensitive permission, we will update the relevant disclosure and provide notice or obtain consent before that use where required.

13. Grievance Officer and Privacy Contact

For questions, consent withdrawal, data-rights requests or complaints, contact:

14. Policy Updates

We may update this notice when our practices or legal obligations change. We will post the revised date and provide a prominent or direct notice where a change materially affects you. If fresh consent is required, we will ask for it; we will not treat silence as consent.