Privacy policy

DukanMart is shop software. Two different kinds of people appear in it, and they are not treated the same:

• Shopkeepers and their staff — the people who sign in. We hold their account details because we run the service for them.
• A shop's own customers — the people whose name or mobile number a shopkeeper types onto a bill. That information belongs to the shop. The shop decides what to collect and why; we only store and process it on the shop's instructions.

• Account — email address, name, the shop you belong to, and your role in it.
• Shop records — items, prices, bills, stock movements, purchases, suppliers, expenses, and the customer names, mobile numbers and balances a shop chooses to keep.
• Enquiries — anything typed into the contact form: name, email, business name and message.
• Usage — which screens are opened, through Google Analytics for Firebase. This runs only where a measurement id is configured, and it records screens and devices, not the contents of your bills.

We do not ask for card numbers, bank details or any government identifier, and there is nowhere in the app to enter one.

• Supabase (PostgreSQL) holds the shop records and accounts. This is the authoritative copy.
• Google Firebase holds a copy of open kitchen tickets, so a kitchen screen keeps working when the connection drops, and provides the usage analytics described above.
• Resend sends contact-form enquiries to us by email.

These providers store data on servers outside India. If that matters to you, tell us before you sign up.

Each shop's data is isolated in the database itself, by row-level security keyed on the shop, not merely hidden in the interface. One shop cannot read another's records even if it tries to.

Within a shop, what someone sees depends on their role: a cashier bills but cannot change prices or open the reports, a cook sees only the kitchen screen, and the owner sees everything.

Our own staff can reach a shop's data only to run the service — to set an account up, or to fix something you have reported. We do not sell it, rent it, or hand it to anyone for advertising.

Shop records are kept while the account is open, because a shop needs its own history: last year's bills, what a customer still owes, what stock has cost. Close the account and we will delete or return the data on request. Enquiries from the contact form are kept until they are dealt with and for a reasonable period after.

A session cookie keeps you signed in. Two small preferences — the language you chose and light or dark — are stored on your own device. There are no advertising cookies and no third-party trackers beyond the Firebase analytics named above.

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, or ask for a copy to take elsewhere. If you are a customer of a shop that uses DukanMart, ask that shop first — the records are theirs, and we will pass your request to them.

Write to us and we will answer. Contact details, and the name of the person responsible for privacy questions, are on the contact page.