Privacy Policy

0Overview

This Privacy Policy explains how SelfPayOut Technologies Private Limited ("we", "our", or "us") collects, uses, and protects information about you when you use the SelfPayout mobile application and associated services ("App").

SelfPayout is a self-checkout platform that lets consumers scan products at participating retail stores, pay via their smartphone, and receive digital receipts — without waiting at a cashier.

1Information We Collect

We collect only what is necessary to provide the service:

• Phone number — collected at registration and used for OTP-based login to identify your account uniquely.
• Order history — items scanned, quantities, store details, payment amounts, and timestamps tied to your account.
• Device push token (FCM) — a Firebase Cloud Messaging token used exclusively to send you order confirmations and payment notifications.
• Device information — device model and operating system version, used for debugging and app compatibility.
• Camera data — the camera is activated only while you are actively scanning a barcode. No images or video are stored or transmitted at any time.

We do not collect: location data, contacts, call logs, microphone audio, or any biometric information.

2How We Use Your Information

• To verify your identity via OTP and maintain a secure login session.
• To process and record your purchases at participating stores.
• To generate and store digital receipts accessible in your order history.
• To send push notifications about order status, payment confirmations, and store updates (only with your permission).
• To provide customer support and respond to enquiries.
• To detect fraud and protect the security of transactions.
• To improve App performance, fix bugs, and develop new features.

3Information Sharing

We do not sell your personal information. We share data only in these limited cases:

• Stores and merchants — order details (items purchased, amount) are shared with the store you are checking out at, solely to fulfil your purchase.
• Payment processors — your payment is handled by a third-party gateway (e.g., Razorpay). We pass only the amount; we never store full card numbers or UPI credentials.
• Firebase / Google — FCM processes your device push token to deliver notifications. Subject to Google's Privacy Policy.
• MSG91 — your phone number is shared with MSG91 to deliver OTP SMS messages for login verification.
• Legal obligations — we may disclose data if required by a valid court order, government request, or applicable law.

4Data Retention

We retain your account and transaction data for as long as your account remains active. Order history is kept for up to 3 years for GST compliance and dispute resolution.

You may request deletion of your account and all associated data at any time through the app support process. We will process your request within 30 days, subject to any mandatory retention obligations under Indian law.

5Camera Permission

SelfPayout requests access to your device camera to scan product barcodes during self-checkout. The camera is activated only when you tap the scan button and is deactivated immediately after the barcode is read.

No photographs, video recordings, or images of any kind are captured, stored locally, or uploaded to our servers. The camera feed is processed entirely on-device in real time.

6Push Notifications

With your permission, we use Firebase Cloud Messaging to send push notifications including: order confirmations, payment receipts, and updates from stores you have shopped at.

You can withdraw notification permission at any time through your device's notification settings (Settings → Apps → SelfPayout → Notifications). This does not affect your ability to use the App.

7Security

We employ the following security measures:

• All API communication is encrypted over HTTPS/TLS.
• Authentication uses short-lived JWT tokens (12-hour expiry).
• OTP verification for every new login session.
• Payment data is handled exclusively by PCI-compliant third-party processors.
• Our servers are hosted on secured cloud infrastructure with access controls and audit logging.

While we take all reasonable precautions, no electronic transmission is 100% secure. Please report any suspected unauthorised access to your account through the app support process immediately.

8Children's Privacy

SelfPayout is not directed at or intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

9Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request that we delete your account and data.
• Portability — request your order history in a machine-readable format.
• Objection — opt out of promotional notifications at any time.

To exercise any of these rights, please submit your request through the app support process. We will respond within 30 days.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via a push notification or an in-app message.

Your continued use of SelfPayout after the effective date of any changes constitutes your acceptance of the updated policy.

11Company Information

The legal entity operating SelfPayout is listed below: