Privacy Policy
Last updated: 3 November 2026
Podhaa ("we", "us") runs the Podhaa customer app, the Podhaa Partner app and the websites at podhaa.in. This policy explains what we collect, why, and the choices you have. It applies to customers, partner nurseries and gardeners.
What we collect
Customers
- Account: your name, email address and profile photo from Google when you sign in with Google.
- Contact and delivery: phone number, delivery addresses, pincode and the map location you pick or allow us to read.
- Orders and bookings: plants and products ordered, gardening visits booked, garden notes and photos you add, payments recorded (cash on delivery), cancellations.
- Area votes: when you vote to bring Podhaa to your area, we store your vote with the area of your address.
Partners (nurseries and gardeners)
- Profile: name, phone, selfie, home address, nursery or work location, opening or working hours, skills and languages.
- Verification (KYC): ID type and number with photos of the ID (Aadhaar must be masked), optional GST number, shop photos and a UPI ID for payouts. ID photos are kept in private storage that only Podhaa admins can open.
- Work records: orders and visits handled, stock, pot photos you upload, cash collected and payouts.
Everyone
- Device: a push notification token so we can send order updates, and basic technical logs needed to keep the service running.
We do not collect card or bank passwords, and we do not sell your data.
Why we use it
- To show plants available near you and deliver your order quickly.
- To book, assign and run gardening visits.
- To send order and visit updates by push notification.
- To verify partners, pay them and keep customers safe.
- To decide where to launch next (area votes) and to improve the service.
- To prevent fraud and meet legal requirements.
Who sees it
- Partners: the nursery or gardener handling your order or visit sees your name, phone, address and what you ordered, only for that job.
- Customers: see the name and phone of the partner handling their order or visit.
- Service providers who host or process data for us: Supabase (database, sign-in, file storage), Google (sign-in, Firebase push notifications), Cloudflare and Vercel (website hosting, image generation for catalog photos), and India Post's public pincode service (area names). They only use the data to provide their service to us.
- Authorities, when the law requires it.
Location
The customer app asks for your location only while you use it, to check we deliver to you and to fill your address. You can say no and type your address instead. Partner apps use the location you set for your nursery or base area.
How long we keep it
We keep your account data while your account is active. Order, payment and partner payout records are kept for as long as Indian tax and accounting law requires (usually up to 8 years). Partner ID photos are deleted within 90 days after a partner leaves or is rejected, unless we need them for a dispute.
Delete your account or data
Email podhaa2026@gmail.com from the email you sign in with, with the subject "Delete my Podhaa account". We will delete your account, addresses, votes and photos within 30 days and confirm by email. Records we must keep by law (such as past order invoices) are kept only for that purpose. You can also ask us for a copy of your data or to correct it.
Security
Data is sent over encrypted connections (HTTPS). Access in our database is limited by role, so customers and partners can only see the records meant for them. No system is perfectly secure; if a breach affects you, we will tell you.
Children
Podhaa is meant for people aged 18 and above. We do not knowingly collect data from children.
Changes
If we change this policy we will update the date above, and tell you in the app for important changes.
Contact
Questions or complaints (Grievance contact): podhaa2026@gmail.com, Podhaa, Bengaluru, Karnataka, India.