Mini Kirana
Privacy Policy
Last updated: 24 April 2026
1. Who we are
Mini Kirana is operated by Magnitude Grocer Private Limited,
a company registered in Chennai, Tamil Nadu, India. This policy explains how
we collect, use, and protect your personal data when you use the Mini Kirana
mobile application.
2. Data we collect
- Account information: Name, email address, phone number, and delivery address provided during sign-up.
- Authentication data: Firebase Authentication tokens and session data for secure sign-in via email/password, phone OTP, or Google.
- Profile photo: Optional avatar image you upload.
- Transaction data: Purchase bills, loyalty points earned and redeemed, and reward redemption records synced from our point-of-sale system.
- Device information: Device model, OS version, and app version for crash reporting and performance monitoring via Firebase Crashlytics and Firebase Performance.
- Push notification tokens: Firebase Cloud Messaging tokens for delivering notifications you have opted into.
3. How we use your data
- To create and manage your loyalty account.
- To display your purchase history and loyalty points balance.
- To process reward redemptions.
- To send transactional notifications (order updates, security alerts).
- To send promotional notifications (only with your explicit consent).
- To diagnose crashes and improve app performance.
4. Data sharing
We do not sell your personal data. We share data only with:
- Firebase / Google Cloud: For authentication, database, storage, analytics, crash reporting, and push notifications. Data is processed under Google's data processing terms.
- Legal obligations: We may disclose data if required by Indian law, regulation, or legal process.
5. Data security
All data transmitted between the app and our servers is encrypted using
HTTPS/TLS. Sensitive session data is stored on-device using Android's
EncryptedSharedPreferences. Firebase App Check with Play Integrity
ensures only genuine app instances can access our backend services.
6. Data retention
We retain your personal data for as long as your account is active.
Upon account deletion, all personal data is removed within 30 days,
except where retention is required by law (e.g. GST transaction
records are retained for 6 years in anonymised form).
7. Your rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:
- Access and review the personal data we hold about you.
- Correct inaccurate data via your in-app profile settings.
- Request deletion of your account and associated data.
- Withdraw consent for promotional communications at any time.
To exercise these rights, email
support@minikirana.co.in.
8. Children's privacy
Mini Kirana is not directed at children under 18. We do not knowingly
collect data from minors. If we learn that we have collected data from
a child, we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. Changes will be posted on
this page with an updated "Last updated" date. Continued use of the
app after changes constitutes acceptance.