Privacy policy

• What we collect
• How we use it
• Who we share it with
• Security
• Retention and deletion
• Your rights
• Contact
• MilkBook Customer app

1. Who we are

MilkBook is a mobile app and website for milk delivery vendors, run by iFusion Technology, 326 Samanvay Business Square, Waghodiya Road, Vadodara 390019, Gujarat, India ("MilkBook", "we", "us").

This policy explains what data we collect when you use the MilkBook Android and iOS apps, the milkbook.in website, and related services (together, the "Service"), and what we do with it. By using the Service you agree to this policy.

2. What we collect

2.1 Information you give us

• Account: your mobile number, used to sign in with a one-time code (OTP).
• Profile and business: your name, email address (optional), business name, city, address, delivery shifts, and billing cycle.
• Bill details: the UPI ID and bill footer text you choose to print on bills.
• Plan purchases: the plan you buy and the payment reference. Card, UPI, and bank details are entered on Razorpay's secure checkout, and we never see or store them.
• Support: anything you send us by WhatsApp, phone, or email.

2.2 Information you enter about others

To run your business in MilkBook you add information about other people:

• Your customers: name, phone number, address, products, rates, daily deliveries, bills, and payments.
• Your delivery agents: name, phone number, and address, plus the customers you assign to them.

You are responsible for having your customers' and agents' permission to add their details. We process this information only on your instructions, to provide the Service to you.

2.3 Information collected automatically

• Device: device model and brand, operating system and version, app version, app language, a random device ID created by the app, and a push notification token.
• Usage analytics: screens viewed and features used, measured with Google Firebase Analytics. These events are linked to your account ID, and include your phone number, city, plan, and language as user properties. On Android, Firebase may also read the advertising ID for measurement. We do not show ads.
• Crash reports: technical details about app crashes, collected with Firebase Crashlytics and linked to your account ID.
• Network: your IP address, used to protect sign-in from abuse and to keep the Service secure.
• Campaign links: if you arrive from a link with campaign tags (for example, from an ad or a partner), we record the campaign name and source.

2.4 Phone permissions

• Contacts: only when you tap to pick a contact while adding a customer or agent. The phone's own picker opens, and the app receives only the one contact you choose. We never upload your address book.
• Notifications: for daily entry reminders, plan reminders, and updates. You can turn them off in your phone's settings.
• Photos and files: to save, print, or share bill and report PDFs.

MilkBook does not use your location, camera, microphone, or SMS inbox.

3. How we use your information

• To create your account, sign you in, and keep your records in sync across your phone and our servers.
• To calculate bills, create bill and report PDFs, and share them when you ask.
• To let your delivery agents see and update the customers you assign to them.
• To process plan payments, issue invoices, and remind you before your plan ends.
• To send service messages on WhatsApp or by notification, such as a welcome message, plan reminders, and invoices.
• To give support, fix problems, and prevent fraud and misuse.
• To understand which features are used so we can improve MilkBook.
• To meet legal, tax, and accounting obligations.

4. Who we share it with

We do not sell your personal data or your customers' data. We share only what each service provider needs to do its job for us:

• Razorpay: payment processing. Receives the order amount, your phone number, and the plan you are buying.
• MSG91: sends sign-in codes by SMS. Receives your phone number and the code.
• ChatSathi: our WhatsApp messaging provider. Receives your phone number, name, business name, city, plan dates, and basic device details to send you service messages. When you use in-app WhatsApp bill sending, it also receives your customer's phone number and the bill PDF. The chat button on milkbook.in is also provided by ChatSathi.
• Google Firebase: push notifications, analytics, crash reports, app configuration, and backups of our database.
• Zoho Books: accounting and invoices. Receives your business name, name, phone, email, address, and invoice details.
• Cloud hosting: our servers and database (MongoDB Atlas) store your account and business data.

We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy continues to apply.

Sharing you control: when you share a bill on WhatsApp, the recipient sees the bill. A bill link is a web address with a unique code; anyone who has the link can open that bill, so share it only with the right customer.

Our support team: authorised MilkBook staff can view account data when needed to help you, verify payments, or fix a problem.

Some providers store data on servers outside India. We use providers that protect data with industry-standard safeguards.

5. Security

• All data between the app and our servers travels over encrypted HTTPS connections.
• Sign-in tokens are kept in the iOS Keychain or Android Keystore.
• Plan payments are verified on our server with Razorpay before Premium is activated.
• Access to our systems is limited to authorised staff.

For offline use, your records are also stored in the app's storage on your phone. Protect your phone with a screen lock. When you log out, the app clears this data from the phone. No system is completely secure, but we work to protect your data and will tell you and the authorities about a breach where the law requires it.

6. Retention and account deletion

• We keep your data while your account is active, including when you are on the Free plan after Premium ends.
• Delete your account: go to Settings › Delete Account in the app, or email info@milkbook.in from your registered details. Your account is closed right away, and we permanently delete your profile, customers, deliveries, bills, payments, products, rates, and delivery agents within 30 days.
• We keep plan invoices and payment records for as long as tax and accounting laws require.
• Database backups are overwritten within 7 days, so deleted data leaves our backups soon after.
• Notification history and records of logged-out devices are removed after 2 months.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023, and other applicable laws, you can:

• Ask what personal data we hold about you and how we use it.
• Correct or update your data. Most details can be edited in the app.
• Delete your account and data, as described above.
• Withdraw consent, for example by turning off notifications or deleting your account.
• Export your records. Reports can be downloaded as PDF, Excel, or CSV from the app.
• Nominate another person to exercise these rights if you die or become unable to act.
• Raise a complaint with our Grievance Officer (below), and then with the Data Protection Board of India.

If your customer or agent asks about their data, please contact us and we will help you respond.

8. Children

MilkBook is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect data from children.

9. Our website

milkbook.in does not use advertising or analytics cookies. If you arrive from a campaign link, the campaign tags are saved in your browser's local storage so we can see which campaigns bring people to the app. The WhatsApp chat button is provided by ChatSathi, which handles any chat you start.

10. Changes to this policy

We may update this policy as MilkBook changes. We will change the date at the top and, for important changes, tell you in the app or on WhatsApp before they take effect.

11. Contact and Grievance Officer

For privacy questions, requests, or complaints, contact our Grievance Officer:

• Grievance Officer, iFusion Technology, 326 Samanvay Business Square, Waghodiya Road, Vadodara 390019, Gujarat, India
• Email: info@milkbook.in
• Phone / WhatsApp: +91 76001 10704

We reply as soon as we can and resolve complaints within 30 days.

See also our Terms of use and Payment and refund policy.

12. MilkBook Customer app

The MilkBook Customer app lets a household see the milk account that their milkman keeps in MilkBook. This section explains what that app does with your data. The rest of this policy also applies.

• Who keeps your records: your milkman (the vendor) enters your deliveries, bills, payments and balance in MilkBook. These are the vendor's business records. The Customer app only shows them to you.
• Sign-in: you sign in with the phone number your milkman saved for you and a one-time code sent by SMS. We do not ask for a password.
• What the app sends us: holiday (pause) and quantity requests, messages and payment notes you send to your milkman; your app language; and a notification token with basic device details (model, OS version, app version) so we can send you delivery and bill notifications.
• Analytics and crash reports: Google Firebase records which screens are used and app crashes, without your name or phone number, so we can fix problems.
• Who sees it: your milkman sees the requests and messages you send and whether you use the app. We do not sell your data or show ads.

Delete your app account: in the app, open Profile › Delete my app account, or follow the steps on Delete your MilkBook Customer account. You are logged out on all phones, notifications stop, and your device details and app usage dates are removed. Your milkman's records of your deliveries, bills and payments stay with your milkman, because they are part of their business accounts; ask your milkman if you want them removed. If you sign in again later with a one-time code, your app access comes back.