Thryvoo Private Limited ("Thryvoo", "we", "our", "us") runs a local rewards platform: the Thryvoo app for customers (iOS and Android), the website thryvoo.com, and the Thryvoo Businessdashboard and app for shops, cafés, salons and other local businesses.

This policy explains what we collect, why, who sees it, and how you can delete it. It is written to match what the products actually do. We do not sell personal data, we do not show third-party advertising, and we do not use advertising or tracking SDKs in our apps.

1. Information we collect in the Thryvoo customer app

Information you give us

• Phone number — used to sign in with a one-time password (OTP). This is the only required identifier.
• Profile details — your name, and optionally an email address, gender, date of birth and a profile photo.
• Saved addresses — if you add a home or work address to find offers around it.
• Content you create — reviews and ratings of businesses you visited, and photos you attach to them.

Information collected when you use the app

• Precise location — only with your permission and only while the app is open, to show businesses, offers and distances near you. We never collect location in the background. You can decline and browse by locality instead.
• Activity — the offers you claim, coupons you redeem, coins you earn and spend, rewards, spins, bookings, orders, favourites and referrals.
• Device and app data — a per-install device identifier and, if you allow notifications, a push-notification token; app version, operating system and language, so the app works correctly on your device.
• Server logs — IP address, timestamps and the requests your device makes, kept for security and to debug problems.

Permissions the app asks for

• Location (while using the app) — nearby businesses and offers.
• Camera — to scan QR codes at a shop and to take a profile photo.
• Photos — to choose a profile photo or attach a picture to a review.
• Notifications — to tell you about coupons expiring, rewards and replies to your reviews.

Every permission is optional and can be turned off in your phone's settings at any time; the related feature simply stops working.

2. Information we collect from businesses

• Account details — name, email address, phone number and password (stored hashed) of the owner and any team members.
• Business details — business name, address and map location, category, opening hours, photos, logo, products, offers and promotions. These are published to customers on purpose.
• Payments — subscriptions and promotions are paid through Razorpay. Razorpay handles card, UPI and bank details; we receive only a payment reference, amount and status, never the card number.
• Usage of the dashboard — which offers were created, claims and redemptions, and analytics derived from them.

3. How we use information

• To run the service — sign you in, show offers near you, issue and redeem coupons, keep your coin balance and reward history, deliver bookings and orders.
• To personalise what you see — nearby and relevant offers, based on your location, saved addresses and past activity.
• To notify you — about your coupons, rewards, bookings and replies, on your device and inside the app. You can turn notifications off at any time.
• To keep the platform honest — detect fraud (for example the same coupon redeemed twice), abuse and security problems.
• To improve the product — we look at aggregated usage (how many claims, which offers work). We do not profile individuals for advertising.
• To meet legal obligations — tax and accounting records for business payments, and lawful requests from authorities.

4. Who sees your information

• The business you interact with. When you claim or redeem an offer, book, order or leave a review, that business sees your name, the coupon, and the phone number linked to the claim so it can verify you at the counter and reach you about your order. Businesses may not use it for anything else and must delete it on request.
• Other customers. Your reviews and ratings are public, shown with your name and profile photo. Your phone number, email and addresses are never public.
• Service providers that process data for us under contract: cloud hosting for our servers and databases; Cloudinary for storing and serving photos; Expo (Apple Push Notification service and Firebase Cloud Messaging underneath) for delivering push notifications; Google Maps for maps and distances; Razorpay for business payments; an SMS provider for delivering OTPs.
• Authorities where the law requires it, or to protect the rights and safety of users and the platform.
• A successor if Thryvoo is acquired or merges, with notice to you.

We do not sell personal data and we do not share it with data brokers or advertisers.

5. Keeping and deleting your data

• We keep your account and activity for as long as your account is open.
• Delete your account from inside the app (Profile → Settings → Close account) or at thryvoo.com/delete-account. All your devices are signed out immediately.
• Deletion has a 30-day grace period during which you can sign back in to cancel it. After 30 days the account, profile, photos, location, saved addresses, device tokens and activity are permanently deleted.
• Records we must keep by law (for example business payment invoices) and anonymised statistics may be kept after deletion; they no longer identify you.
• Server logs are kept for a limited time for security and are then discarded.

6. Security

Data travels over HTTPS. Passwords are stored hashed, sessions use short-lived tokens that you can revoke by signing out, and access to production systems is restricted to the people who run them. No system is perfectly secure, so please keep your phone locked and tell us at once if you think your account has been used without your permission.

7. Children

Thryvoo is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

8. Your rights

• See and correct your profile at any time inside the app.
• Ask us for a copy of the personal data we hold about you.
• Delete your account, as described above.
• Withdraw a permission (location, camera, photos, notifications) in your phone's settings.
• Object to a use of your data you think is unfair, or raise a grievance at thryvoo.com/legal/grievance.

We respond to requests within 30 days. Thryvoo is based in India and follows the Digital Personal Data Protection Act, 2023.

9. Cookies on thryvoo.com

The website and business dashboard use cookies only to keep you signed in and remember preferences. The mobile apps do not use cookies. We do not use advertising cookies.

10. Changes to this policy

When we change what we collect or how we use it, we will update this page and the date at the top, and tell you in the app if the change matters to you.

11. Contact

For anything about your privacy or to exercise your rights, contact our Grievance Officer: