Last updated: 2026-09-29
This Privacy Policy describes how ARMAN FOODTECH PRIVATE LIMITED ("the Company," "we," "us"), a private limited company, collects, uses, stores, and protects information through the Arman Foods application — the mobile app used by delivery and marketing staff, and the internal Admin Web application used by office staff and administrators — together, the "App."
The App is an internal business-operations tool. It is used by Company employees (delivery salesmen, marketing executives, warehouse managers, office staff, and administrators) to manage business customer records, record sales visits, track deliveries, and manage inventory and payments collected in the course of their work.
The App is not a consumer-facing food, health, or nutrition application. It does not provide dietary, nutritional, allergy, or medical information or advice of any kind, and it is not intended for use by the general public or by end consumers of the Company's products.
Employee accounts are created and managed by a Company administrator or office-staff member — employees do not self-register. Business records in the App (name, address, contact person, etc.) belong to the Company's business customers (shops, retailers, and similar commercial accounts), entered by Company staff as part of normal account management, not submitted directly by those businesses through the App.
| Data | Why we collect it |
|---|---|
| Full name, employee ID, role | Identifies who is using the App and what they're authorized to do. |
| Phone number, email address (optional) | Contacting the employee; email may also be used for account-related notices. |
| Password | Signing in. Passwords are stored only as a one-way cryptographic hash (bcrypt) — the Company cannot see or recover your actual password. |
| Login history, failed sign-in attempts, account lock status | Account security — detecting and slowing down guessing attempts. |
| A device identifier and the IP address of your sign-in/session requests | Tied to your login session, to support session security (e.g., revoking a specific device's session). On Android this is a general software-build identifier, not a permanent hardware serial number, IMEI, or advertising ID. |
While a delivery or marketing employee has the App open and is actively using it during work, the App periodically records the device's GPS coordinates to:
Location is not collected in the background or when the App is closed — only while the App is open and running in the foreground. Within the Company, an employee's current and historical location is visible only to users holding the Administrator or Manager role, not to other employees. GPS location history is automatically deleted after 90 days; it is not kept indefinitely.
Company staff enter and maintain records for the business customers (shops/retailers) the Company serves, including: business name, category, contact person, phone/email, address and location, operating hours, commercial terms (credit limit, payment terms, pricing), and — where the business has provided them — its GST number and FSSAI license number. These numbers are recorded as supplied by the business and are not independently verified by the App.
The App records the operational history of the Company's business: which employee visited which business and when, what was sold, quantities and prices, and payments collected (cash, bank/UPI, or credit), along with invoice numbers and delivery/inventory records. This is standard business bookkeeping data, not consumer payment-card information — the App does not process card payments or connect to any payment gateway.
Product photographs are uploaded by Company staff and stored so they can be shown in the App. Product images are not sensitive and are served publicly (e.g., product catalog images do not require a login to view).
Marketing staff can, if they choose, attach a voice note to a marketing visit. The App uses the device microphone only when you tap "Record Voice Note" (or "Record Again"). Before Android asks for microphone permission, the App shows a notice explaining that the microphone will be used, that the recording is uploaded to Arman Foods private server storage, and that authorized Administrators and Managers may access it for that visit; you must tap "Continue" for the permission request to appear, and "Cancel" leaves the visit unchanged.
Microphone permission can be managed at any time from your device's system settings; declining it does not affect any other feature of the App.
The App uses third-party map services. What each one receives is described here; Section 4 lists the providers.
These measures are designed to protect information appropriately; no method of storage or transmission can be guaranteed to be completely secure.
We do not sell personal information, and we do not share it with advertisers or data brokers. Information is processed by the following infrastructure service providers, acting on the Company's instructions solely to operate the App:
| Provider | Role |
|---|---|
| Supabase | Hosts our database and product-image storage. |
| Railway | Hosts our backend server and the Admin Web application. |
The App also uses the following map and content services, described in Section 2.7. These receive the information listed there in order to provide maps and nearby-place results; we do not sell or use it for advertising:
| Service | What it receives |
|---|---|
| Google Maps SDK for Android (mobile app) | Technical data collected automatically by the SDK (device metadata, IP address, crash information, SDK identifier, map interactions). |
| Google Places API (via our server) | Your current coordinates, a 1 km search radius and business-type search terms, sent from our server; not your name or account details. |
| OpenStreetMap tile servers | Your IP address and the map area being viewed, when a map showing OpenStreetMap tiles is opened. |
| Admin Web page assets | When office staff open Admin Web pages in a browser, the browser also loads fonts, scripts, map images and (on the business page) a Google Maps preview from Google, OpenStreetMap and public content-delivery services, which receive the browser's IP address. |
Within the Company, information is visible only to the employees and administrators whose role requires it (for example, users with the Administrator or Manager role can see field employees' location and sales activity; other employees cannot).
| Data | Retention |
|---|---|
| GPS location history | 90 days, then automatically and permanently deleted. |
| Employee and business accounts | Kept for as long as the account is active. Deactivated accounts and businesses are marked inactive rather than immediately erased, because the Company retains accurate historical sales, delivery, and payment records for its own business and accounting purposes. |
| Sales, delivery, and payment records | Retained as part of the Company's ongoing business records. |
| Voice notes (marketing visits) | Kept with the visit record until that record is removed; no automatic deletion period currently defined. |
| Security and audit records (e.g., sign-in history, session/device security records) | Retained by the Company for security, fraud-prevention, and accountability purposes. The App does not currently apply a fixed automatic deletion period to these records. |
Because employee accounts are created and managed by Company administrators (employees do not self-register), account deactivation and data-deletion requests are handled by your administrator or office-staff manager rather than through a self-service option in the App. If you are a Company employee and want your account deactivated or want to ask about your data, contact your administrator or armanfoodtech@gmail.com.
How to request deletion of your data:
The App does not currently include an in-app option to delete your account or data. Voice notes cannot be deleted separately from the visit record they belong to (see Sections 2.6 and 5).
The App is a workplace tool for Company employees and is not directed at, or knowingly used by, children.
We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. We will update the "Last updated" date above when we do.
Questions about this Privacy Policy or how your information is handled
can be directed to:
ARMAN FOODTECH PRIVATE LIMITED
armanfoodtech@gmail.com
No. 11, 12, Off Hosur Road, Singasandra, Bengaluru, Bengaluru Urban, Karnataka – 560068, India