1. Overview & Scope
Welcome to ExMudra ("we", "our", or "us"). ExMudra is a QR-code-based merchant customer reward and cashback platform operated to connect merchant shops with their valued customers.
This Privacy Policy governs your use of the ExMudra Android Mobile Application ("App") and associated web services available at our web portal ("Services"). It describes how we collect, use, store, share, and protect your personal information when you use our App or visit participating merchant establishments.
Key Summary for Play Store Users: We only collect data necessary to verify shop purchases, award loyalty reward points/cashback, process gift redemptions, and prevent fraudulent scans. We never sell or rent your personal data to third-party advertisers.
2. Information We Collect
We collect several categories of information to provide and enhance our loyalty reward services:
A. Information Provided Directly by Users
- Customer Personal Information: Full name, mobile phone number, and physical address provided during reward registration or gift redemption.
- Transaction & Purchase Details: Purchase bill amount, shop location name, and selected reward gifts. We do NOT request or store bill invoice images, nor do we store One-Time Passwords (OTPs).
- Merchant Information: Business name, shop owner name, phone number, physical address, product/gift catalog details, and administrative login credentials.
B. Information Collected Automatically During App Usage
- Geolocation Data (GPS, Network & IP Location): Precise and approximate location data (latitude, longitude, reverse-geocoded village/district, cellular/network location, and network IP) collected while using the app. This information is strictly used to improve user experience, provide relevant nearby merchant and shop suggestions, verify physical store proximity during reward claims, and prevent fraudulent activity (including detecting mock/spoofed GPS).
- Device Metadata & Network Info: IP address, device brand/model, operating system version, browser user-agent, and network connection type.
- Scan Logs & Session Data: Timestamps of QR scans, reward allocation records, and authentication tokens.
3. Android App Permissions Explanation
To function properly, our Android application requests access to specific hardware and system capabilities on your mobile device. Here is how each permission is used:
| Android Permission | Purpose & Functionality |
|---|---|
| CAMERA | Allows the app to scan merchant QR codes directly using your smartphone camera. No images or video recordings are saved or uploaded to servers without explicit action. |
| ACCESS_FINE_LOCATION | Retrieves precise GPS coordinates while using the application to enhance user experience, suggest nearby registered shops, verify physical presence at merchant stores during QR scans, and prevent location spoofing/fraud. |
| ACCESS_COARSE_LOCATION | Provides approximate cell tower and Wi-Fi network location to provide local merchant suggestions and serve as fallback if satellite GPS is unavailable. |
| INTERNET | Required to communicate with secure servers, verify scan validity, transmit purchase details, and process reward points. |
| ACCESS_NETWORK_STATE | Checks whether your device has an active internet connection before initiating scan submissions. |
4. How We Use Information
We process collected data exclusively for legitimate business and customer service purposes:
- Reward & Cashback Calculation: Calculating mudra points, discount slabs, and gift eligibility based on valid bill amounts.
- Fraud Prevention & Proximity Validation: Verifying that QR code scans occur inside authorized merchant premises to block artificial or repeated fraudulent submissions.
- Gift Fulfillments & Redemption: Facilitating physical gift delivery or in-store redemption verification directly with merchant personnel.
- Merchant Analytics: Providing aggregated, anonymized transaction summaries to store owners to help them understand customer loyalty trends.
- Customer Support & Administrative Communication: Responding to user inquiries, resolving points discrepancies, and managing account safety.
6. Data Security & Storage
We implement robust administrative, technical, and physical security measures to safeguard user data against unauthorized access, loss, or alteration:
- Encryption in Transit: All communications between the mobile app, web application, and backend servers use Industry-Standard Transport Layer Security (HTTPS/TLS).
- Access Control: Administrative interfaces require multi-factor session token authentication, restricting shop transaction access to authorized shop personnel only.
- Regular Audits: Periodic reviews of fraud detection logs and access credentials to ensure compliance with security best practices.
7. Data Retention & Account Deletion Request
We retain personal data for as long as necessary to fulfill the loyalty reward services or as mandated by law.
How to Request Account & Data Deletion
You have the right to request deletion of your personal information, mobile registration, and reward history from our systems at any time.
To request data deletion:
- Send an email to exmudratechteam@gmail.com.
- Include your registered Mobile Number and Name with the subject line "Data Deletion Request - ExMudra".
- Our privacy team will verify your identity and permanently purge your account records from our database within 14 business days, notifying you via email upon completion.
8. Children's Privacy
Our Services and Android application are intended for general adult users and individuals capable of entering legal contracts. We do not knowingly target or collect personal information from children under 13 years of age (or under 18 without parental consent). If we discover that a child under 13 has submitted personal information to us, we will immediately delete such data from our records.
9. Your Privacy Rights
Under applicable Indian data protection guidelines and international standards, you hold the following rights:
- Right to Access: Request a summary of personal information held about you.
- Right to Correction: Request correction of inaccurate or incomplete personal details.
- Right to Withdraw Consent: Revoke consent for location or camera access at any time via Android system settings.
- Right to Erasure: Request permanent removal of your data as outlined in Section 7.
10. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our app features, legal obligations, or Google Play Developer Policy guidelines. Any revisions will be published on this page with an updated "Last Updated" date. We encourage users to check this page periodically.
11. Contact Us
If you have questions, concerns, or inquiries regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
Platform Name: ExMudra
Developer / Contact Entity: ExMudra Support Team
Support Email: exmudratechteam@gmail.com
Web Application URL: https://exmudra.vercel.app