Privacy Policy

PRIVACY POLICY

This Privacy Policy explains what information Peppy ("App", "we", "us") collects when you use our App and services, how we use it, and how we work to keep it safe.

When you use Peppy or any of our features ("Services"), you share certain information with us. We collect and process this information only to operate the App, improve your experience, and provide our services properly.

Peppy is fully responsible for managing the App and handling any information collected on it. We use your data only for our business purposes and never for anything unrelated.

By using the App or any of our Services, you confirm that you have read and understood this Privacy Policy, and you agree to the way we collect, store, and process your information as described here.

LEGAL COMPLIANCE

This Privacy Policy follows and complies with the following laws and regulations:

Digital Personal Data Protection Act, 2023 (DPDP Act)
IT (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021
Sections 43A and 72A of the Information Technology Act, 2000
IT (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011

Any capitalized terms used in this policy (including "Personal Data") have the same meaning as defined in the DPDP Act, 2023. In line with Section 5 of the DPDP Act, this policy serves as a notice telling you:

What personal data we collect and why
How you can use your rights under Sections 6(4) and 13 of the DPDP Act
How you can raise a complaint with the Data Protection Board

We may update or inform you of these details from time to time, through methods we consider appropriate.

GENERAL TERMS

By using our App or Services, or by sharing your information with us, you confirm that you have read, understood, and agreed to our Terms of Service and this Privacy Policy.

If you use the App from outside India, you are responsible for following the local laws of your country. If the App is not allowed in the place you live, please do not use it.

By continuing to use the App, you agree that we may collect, use, share, and process your information as explained in this Privacy Policy. We may update or change this Privacy Policy at any time, and your continued use of the App after changes means you accept the updated version. We encourage you to check the Privacy Policy regularly. If there are major changes, we may notify you through the App or other communication channels.

If you do not agree with any part of this Privacy Policy, please stop using the App and our Services immediately.

YOUR CONSENT

By accessing or using the App, filling out onboarding forms, submitting OTPs, clicking on notifications or messages, or sharing your information in any way, you are giving us permission to collect, use, store, and share your Personal Information as described in this Privacy Policy.

If you provide information about someone else, you confirm that you have their permission to do so. We may reject any information you submit at our discretion.

Specific Consent:

You also agree that we (including our partners or third-party service providers) may contact you via SMS, instant messaging apps, in-app calls, video calls, or email to provide Services, show additional Services, or for any other purpose mentioned in this Privacy Policy.
You also agree that we may use your data in any other Apps created by us.

INFORMATION HANDLING

To provide our Services, we may sometimes need to share your contact information with trusted third parties. By making payments or using our Services, you give us permission to share this information—without your name or identity—so they can contact you if needed.

Please note that even though we do not ask for your full name or directly identifying details, you may still accidentally share information that can identify you while using the App.

We may also collect certain Sensitive Personal Data as defined under the SPDI Rules when you use the App. This may include:

Information you provide directly
Details related to the Services you use
Your phone number, name, city
Access to your phone contact list
Information inferred from these sources

We may also collect payment-related information such as your card number, expiry date, bank details, billing/shipping address, wallet details, or UPI information. By using the App, you agree that we may record, store, and share communications you send or receive when required for providing our Services.

Sensitive Personal Data under SPDI Rules includes:

Passwords
Financial information (bank account, credit/debit card, payment details)
Physical, mental, or physiological health details
Gender / sexual orientation
Medical records and history
Biometric information
Any information relating to the above shared with another company to provide services
Any information received from another company for lawful processing

INFORMATION YOU PROVIDE

When you use the Peppy app, any information that you enter or share with us—about yourself or anyone else—is received and stored by us.

During sign-up, we may ask for details like your phone number, full name, gender, city, and email address (when needed). We verify your phone number using a one-time password (OTP).

You might also share contact details to connect with other users or third parties through our Services. If you allow us access to your phone's contact list, we may use it to send invitations, promotions, or service-related messages to your contacts.

INFORMATION WE COLLECT AUTOMATICALLY

We collect information while you use Peppy, so we can provide the full experience of our Services. This includes:

What features you use
What actions you take (calls, chats, room activity, etc.)
The content you view or interact with
Metadata (like where a photo was taken or when a file was created)

If you upload a profile picture, others on the app may be able to see it. You can choose not to upload certain information, but some features may not work without it.

We may also receive information about you from other partners or third parties and add it to your profile.

If you enable device permissions, we may receive:

Access to your camera or photos
Device details (OS version, model, hardware info)
Activity like whether the app is in the foreground or background

PAYMENT INFORMATION

If you make purchases on Peppy, we collect:

Payment card details
UPI or wallet information
Billing address and contact details

By using the app, you also agree that your calls, chats, or actions may be stored or processed for safety, support, and service improvement.

INFORMATION SHARED BY OTHER USERS

We also receive information others share about you, such as:

When another user sends you a message
Uploads a contact list that includes your number
Interacts with your profile or posts

ADDITIONAL DATA WE COLLECT

This may include:

Text, images, audio, video, and other content you upload
Who follows you and whom you follow
Profile visits
Device info such as IP address, browser details, or user agent
App activity (time spent, features used, interactions)
Location (if you allow access)
System logs, timestamps, download/reinstall data

THIRD-PARTY TRACKING TECHNOLOGIES

Peppy uses cookies and other tracking technologies. Cookies help us understand how you use the app so we can improve your experience. You can manage or block cookies from your device settings, but doing so may limit certain features.

Our app may also use third-party SDKs—for example, for payments or analytics—to improve your overall experience.

When you interact with Peppy, we also receive technical information from your device, such as unique device IDs, which may be used to offer personalized content (including ads).

PARTIES WHO MAY ACCESS YOUR INFORMATION

Peppy depends on certain information about you and other users to provide the Services. We share your Personal Information only with trusted third parties, and only after ensuring they follow strong data-protection practices similar to, or stricter than, this Privacy Policy.

By using the app, you agree that these third parties may store and process your Personal Information and Sensitive Personal Data/Information (SPDI) as needed.

We may share information with:

Service Providers Helping You Use the App: This includes any partner or vendor that helps us deliver personal services, such as customer support, audio/video calling systems, or other technical features.
Connected Retailers or Businesses: If you make purchases or use certain services, we may share relevant information with partner shops or service providers to help complete your order.
Third-Party Providers (Payments, Logistics, etc.): Some parts of the app—like payments or delivery—require third-party tools. These providers may collect or process your information while helping us deliver the service.
Mergers, Acquisitions, or Business Transfers: If Peppy merges with or transfers assets to another organization, your information may be shared with that company under the same privacy commitments described here.
Advertisers and Analytics Providers: Some usage data may be shared with advertising networks or analytics partners through cookies and tracking tools.
Communications & Feedback: We may use recordings of your calls with us, messages you send, or feedback you post publicly (like reviews) to improve our services, create better user experiences, and assist with customer support.

We may also share Personal Information or SPDI with trusted partners outside India, as long as they follow privacy standards comparable to Indian laws or other global norms.

By continuing to use the app, you accept and consent to such sharing.

DISCLOSURE OF INFORMATION

We may disclose your Personal Information only when we believe it is necessary and lawful to do so. This includes:

When required to comply with applicable laws or legal processes
To prevent crime, fraud, or protect national security
To protect Peppy's rights, property, or operations
To ensure the safety of users and the general public
To enforce our Terms of Service or other agreements

We may exchange information with government bodies, regulators, or other companies to prevent fraud and reduce credit risk. If Peppy or its affiliates undergo a merger, acquisition, or sale of assets, relevant information may be transferred under strict confidentiality obligations.

We may also share your Personal Information or SPDI with any other company (in India or abroad) that provides an equivalent level of data protection.

USAGE OF YOUR INFORMATION

We use the information we collect in several ways to operate Peppy and provide you with a smooth, safe, and personalised experience.

We use your information to:

Provide and manage the services you request
Improve how the app works and enhance user experience
Process and deliver your purchases
Allow you to use app features and make transactions
Analyze user behaviour, develop algorithms, and build features like recommendations
Respond to your queries and support requests
Send updates, alerts, promotion notifications, and app information
Communicate with you through SMS, email, or calls for support or feedback
Detect, prevent, or investigate fraud, illegal activity, or policy violations
Improve system performance, troubleshoot issues, and ensure smooth operation
Carry out audits and comply with legal requirements
Conduct research, market analysis, or product development
Limit ad frequency, ensure compliance, manage payments, and improve ad reporting

Use of Cookies and Automatic Data Collection:

We may use cookies or similar technologies to:

Personalize your experience so you don't need to re-enter details
Measure how well features and marketing campaigns perform
Track overall usage trends such as number of visitors
Maintain records of your participation in promotions or other app activities

Use of Location Information:

We may access or use your device location to:

Confirm that services are available in your region
Assign a suitable delivery or service partner
Improve safety and accuracy of services

Use of De-Identified Data:

We may create and use de-identified (non-personal) data for research, analysis, marketing, or any other legally permitted purpose.

USER RIGHTS

We want you to feel fully informed and in control while using the Peppy App. Under Sections 11, 12, 13, and 14 of the DPDP Act, you have several important rights related to your personal information. We are committed to helping you exercise these rights in the easiest and most practical way possible.

Access: You can request the personal information we hold about you and get details on how we use it. You can also ask for a list of third parties who have received your information through us.
Correction: You can ask us to correct, update, or modify your information to make sure it is accurate.
Erasure: You can request that we delete your personal information if it is no longer needed, excessive, or unnecessary. This is subject to legal requirements where we may need to retain some data.
Objection: You may withdraw your consent at any time and ask us to stop processing your data, except where we have a lawful reason to continue.
Portability: Wherever technically possible, you can ask us to provide your data in a machine-readable format so you can transfer it to another service provider.
Nomination: You can nominate someone who may exercise your rights on your behalf if you pass away or become unable to do so.
Grievance Redressal: If you feel your rights have not been respected, you can report this through our Grievance Form or by contacting us through legally prescribed channels.

You can exercise any of these rights by submitting the Grievance Form, following our internal process and legal guidelines. The App also lets you view, update, or delete certain information directly from your account. You can opt in or opt out of optional services at any time.

OUR DATA SECURITY PRACTICES

We take the security of your information seriously. We use technical and organisational safeguards designed to protect your data based on industry standards, cost of technology, and the risks involved. Most personal data is encrypted when being transferred between your device and our systems.

However, communication over email or public internet connections can involve third-party systems, which we cannot fully control.

All personal information is encrypted both during transfer and while stored.

How Secure Is the Information You Provide?

We use strong technical, physical, and procedural security measures to protect your personal information and SPDI. Because of these processes, we may sometimes need you to verify your identity before we share information with you.

Only employees and agents who need to process your information have access to it. They are bound by strict confidentiality agreements.

No employee or admin has access to your App password or account credentials. It's important that you keep your password and phone secure.

Important: Always log out of the App after use. We cannot be responsible for unauthorized access caused by incomplete logout or misuse of your password.

If you suspect any unauthorized activity on your account, notify us immediately using the contact details provided. You are responsible for any losses caused by unauthorized use of your login information.

There are certain situations where we may need to share your information without asking for prior consent—for example, when required by government authorities, during investigations, or as mandated by law.

We are not responsible for security breaches or events beyond our control, such as hacking, unauthorized access, internet failures, system crashes, or government actions.

IF YOU ARE A MINOR

The Peppy App is only for users who are legally allowed to enter a binding contract under the Indian Contract Act, 1872. We use certain verification methods—including checking the information you provide—to confirm your age. If you are a minor, we may restrict or stop your access to the App. As required by the DPDP Act, we will also follow the legal process for verifying if a user is a minor and obtaining consent from their parent or legal guardian when needed.

If you are a parent or guardian and discover that your child under 18 has used the App or created an account without permission, please contact us at peppys918@gmail.com. We will delete the child's personal information from our systems.

INTERNATIONAL TRANSFER OF DATA

Your personal information may be transferred to countries outside India for the purposes described in this Privacy Policy, as permitted under Section 16 of the DPDP Act.

You understand that laws in other countries may require disclosure of your data to government bodies, regulatory agencies, or other authorized entities through court orders, investigations, or similar processes. Some countries also share information with other nations for law enforcement, taxation, or related purposes.

Whenever we transfer your data internationally, we will take reasonable steps to ensure it remains protected, accurate, and used only for legitimate, transparent, and lawful purposes. We will also ensure the data is not stored longer than necessary.

LINKS TO THIRD PARTIES

The App may contain links to external websites, advertisements, third-party applications, or content ("Third Party Links"). These links are provided by third parties, and we do not control them.

You acknowledge that:

We are not responsible for how these third parties collect or use your information.
A link on our App does not mean we endorse or recommend that third-party website or service.
We are not liable for any loss, damage, or issues you experience because of interactions or transactions with third-party sites or services.
Any exchanges between you and a third party are strictly between both of you, and we are not responsible for resolving such issues.

Third-party websites and apps also have their own privacy policies. We strongly recommend reviewing them before sharing any information. Please exercise the same caution you would in any offline transaction.

INFORMATION RETENTION AND PURGING

We retain your Personal Information and SPDI for specific periods based on:

Legal and statutory requirements (including Intermediary Rules, 2021)
Industry guidelines
The need to maintain anonymized or pseudonymized data for statistical, historical, or research purposes

You can request deletion of your personal information at any time. While we will delete it, we may still retain some data for legal compliance. Any data we keep for analytics will always be processed in an anonymized or non-identifiable form.

We also have safeguards to ensure your Personal Information or SPDI is deleted or anonymized when:

The purpose of collecting the data has been fulfilled, and
Further retention is not required by law or for any legitimate purpose.

We may still keep anonymized or aggregated data for analytics or service improvement.

If you choose to withdraw your consent, delete your account, or ask us to stop processing your information, you can contact us using the details in the "Notices" section. Please note that withdrawing consent or closing your account may limit our ability to provide services to you.

Important: Uninstalling the App does not delete your Personal Information or SPDI.

CHANGES TO YOUR INFORMATION

You can view, correct, update, or modify your information by logging into your account. However, you cannot directly delete certain information yourself. You may request deletion by contacting us.

If any update you make results in inaccurate information or cannot be verified by us, we may be unable to give you access to the App or our Services. Such a situation may be treated as a request to discontinue your access.

We may verify your identity before allowing changes to ensure accuracy and security. We may also deny or restrict changes if they affect another person's rights or violate applicable laws.

MISCELLANEOUS

You agree that if any third party raises a claim or dispute because you shared your information with them—whether through the App or by using any third-party websites, apps, or services—you will be responsible for handling and compensating us for such issues. We are not responsible for how third parties use the Personal Information or SPDI that you choose to share with them.

Each part of this Privacy Policy is separate and independent. If any section is found to be invalid or unenforceable, it will not affect the rest of the Privacy Policy—those sections will continue to remain in full effect.

While we take strong steps to protect your Personal Information and SPDI, we cannot promise that your information will never be disclosed in ways not mentioned here. We work hard to maintain your privacy, but absolute security cannot be guaranteed. As a user, you accept that you are responsible for your own use of the App, your use of the internet, and the information you choose to share or access—both on and outside the App.

This Privacy Policy was last updated on 03 January 2026.