Introduction
Ovvor ("Ovvor," "we," "us," or "our") runs a dark-store grocery delivery service in Nepal. This policy covers our mobile app and the systems behind it: what we collect, why we collect it, who else sees it, and how it's protected.
Using the app means you're agreeing to this. If you disagree with any of it, please don't use the app.
Information we collect
Some of this comes directly from you. Some is generated simply by using the app. The rest comes from Google, if you choose to sign in that way.
Account information
You can sign up with Google or with your email address and a password. Either way, we collect your full name, email address, and phone number. Gender and a profile photo are optional. If you sign in with Google, Google shares your name, email, and photo with us as part of that process. If you use a password, we store it only in encrypted (hashed) form, so we can't see it.
Location information
With your permission, we access your device's location, either precise or approximate. This lets us confirm whether we deliver to your area, suggest a delivery address, and calculate the distance to the nearest dark store. You can decline location access; you'll just need to enter your address manually, and a few conveniences, like automatic serviceability checks, won't be available.
Delivery addresses
The addresses you save to your account, including the address text, coordinates, and any label you give them, such as "Home" or "Work."
Order and payment information
When you place an order, we record what you ordered, the quantities, the price, the delivery address, and the order's status. If you pay online, we know which payment method you used and whether it succeeded, but not your card number or wallet PIN; those go directly to Khalti or eSewa, whichever you chose. Paying with cash on delivery means no online payment data is collected at all.
Email verification
If you sign up with an email address, we send a one-time code to that address to confirm it belongs to you, and record whether it was verified.
Device and notification information
A push notification token unique to your installation of the app lets us send you order updates, such as "your order is packed" or "your rider is on the way." On its own, this token doesn't identify you; it only does once we link it to your account.
Search and browsing activity
What you search for, the products you view, and anything you suggest we stock. This helps make your search results more useful over time.
Support communications
If you contact us for support, we keep a record of that conversation, along with any contact details or account information you share, so we can resolve your issue and follow up if needed.
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, phone, gender, avatar | You / Google Sign-In |
| Location | GPS coordinates, saved addresses | Your device, with permission |
| Orders | Items, prices, status, delivery time | Generated when you order |
| Payment | Method chosen, transaction status | You / payment gateway |
| Device | Push notification token | Your device |
| Activity | Search terms, product suggestions | Generated when you use the App |
How we use it
Mostly, to run the app:
- Setting up your account and confirming it's really you, through an email verification code or Google Sign-In.
- Processing your order, from placed to packed to dispatched.
- Keeping you updated on your order's status.
- Showing you a catalog and search results relevant to where you are and what you've searched for before.
- Running the payment, whether that's through Khalti/eSewa or logging a Cash on Delivery order.
- Responding when you contact us for support.
- Detecting fraud or anything that breaks our terms.
- Meeting the tax and regulatory obligations Nepal requires of us.
None of this goes toward building an advertising profile of you. We don't run ads in the app, so there's nothing to target.
How we share it
Only where the app genuinely needs it to work:
Delivery riders
The rider delivering your order sees your name, address, phone number, and order contents, enough to find you and deliver the right items.
Service providers we rely on
| Provider | What they handle |
|---|---|
| Sign-in authentication; push notifications via Firebase Cloud Messaging | |
| Khalti / eSewa | Processing online payments, if you choose that method |
| Email delivery service | Sending verification codes and account emails |
| OpenStreetMap (Nominatim) | Turning map locations into addresses when you set a delivery address |
| Cloud infrastructure | Hosting our servers, database, and product images |
Each provider receives only what it needs to do its job, and none of them may use your information for their own purposes.
Legal reasons
We may disclose information if required by law, a court order, or a government request, or where we believe it's necessary to protect someone's safety or our own legal rights.
Business transfers
If Ovvor is sold, merged, or its assets change hands, your information may transfer as part of that process. We'll notify you before any new privacy policy applies to you.
How long we keep it
We keep your account and order information for as long as your account is active, so features like order history and saved addresses keep working as expected. When you delete your account, we remove or anonymize your personal information, except for records we're legally required to retain longer, such as transaction records for tax purposes under Nepali law.
Your choices
- Access and update: your name, email, phone number, and saved addresses can all be edited directly in the app's profile section.
- Location permission: turn it off anytime in your device settings. You'll need to enter delivery addresses manually after that.
- Notifications: manage or disable push notifications from your device's own notification settings.
- Delete your account: use the "Delete account" option in the app's profile screen, or email us (Section 12) to request deletion. Either way, we remove your personal information except what we're legally required to retain. Our account deletion page lists exactly what is deleted and what is kept.
Children's privacy
The app is meant for people aged 18 and over, and we don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we'll remove it.
Security
Traffic between the app and our servers is encrypted, and access to personal data on our end is restricted to those who need it to do their job. We take reasonable precautions, but no system is completely secure, and we can't guarantee otherwise.
International transfers
Ovvor is a Nepali company, but not all of our infrastructure is located in Nepal. Our servers are currently hosted in India, and providers such as Google may process data in other countries where they operate. Wherever your information is processed, we hold it to the same standard described in this policy.
Governing law
Nepali law governs this policy. Any dispute over it, or over your use of the app, falls under the exclusive jurisdiction of Nepal's courts.
Changes to this policy
As the app changes, this policy may change with it. We'll update the date at the top, and for significant changes, notify you directly in the app. We encourage you to check back periodically.
Contact us
If you have questions about this policy, or want to exercise any of the choices above, contact us at:
- Email: ovvertrade@ovvor.com
- Registered business name: Ovvor Trade Pvt. Ltd.
- Registered address: Koteshwor-32, Kathmandu, Nepal