Privacy Policy

1. Information We Collect

When you use OceanKart, we collect the following categories of information so we can match clients with suppliers and deliver bulky water orders reliably.

• •Location data — precise location (GPS coordinates) and approximate location (city/area level). We collect location both in the foreground (while the app is open and visible) and as background location (while the app is not in the foreground), so suppliers can be navigated to clients en route to a delivery and clients can receive accurate real-time tracking and ETAs.
• •Camera and photos — with your permission, the app accesses your camera and photo library so you can upload a profile picture, supplier verification documents, and optional delivery-proof photos.
• •Personal information — your name, email address, phone number, and delivery addresses.
• •Account credentials — username, hashed password, and authentication tokens used to sign you in securely.
• •Payment information — processed through a third-party payment provider; we do not store full card numbers on our servers.
• •Order and transaction data — order requests, bids, prices, delivery records, ratings and reviews.
• •Device and usage information — device model, operating system version, unique device identifiers, IP address, app interactions, and crash logs used to diagnose issues and improve the app.

2. Why We Need Location Data

Location is core to how OceanKart works. We use precise and approximate location, in foreground and background, only for the following purposes:

• •Matching clients with nearby verified suppliers using approximate location.
• •Providing in-app turn-by-turn navigation for suppliers to the delivery point using precise location.
• •Real-time GPS tracking so clients can see their supplier en route on a live map.
• •Calculating accurate delivery ETAs and detecting arrival at the delivery location.
• •Background location tracking during an active delivery so the live map and ETA continue to update even if the supplier locks their phone or switches apps.
• •Fraud prevention and dispute resolution — for example, verifying that a delivery was completed at the agreed location.

3. How We Use Your Information

We use the information described above to operate the OceanKart service. Specifically, we use it to:

• •Create and manage your account and authenticate you securely.
• •Match clients with suppliers and process order requests, bids and acceptances.
• •Show real-time delivery tracking and provide turn-by-turn navigation.
• •Process payments and issue receipts.
• •Send you transactional notifications about your orders, deliveries and account.
• •Enable in-app communication and ratings between clients and suppliers.
• •Detect, investigate and prevent fraud, abuse, and security incidents.
• •Comply with legal obligations and enforce our Terms & Conditions.
• •Analyse aggregated, de-identified usage data to improve the service.

4. How We Share Your Information

We do not sell your personal data. We share information only in the limited circumstances described below.

• •With the other party in a transaction — when an order is accepted, the client and supplier are shown the information needed to complete the delivery (name, contact number, delivery address, and live location during an active delivery).
• •With service providers we rely on to run OceanKart — including Google Maps Platform (for maps and navigation), Firebase by Google (for authentication, push notifications, analytics and crash reporting), our payment processor (for handling transactions), and our cloud hosting provider.
• •For legal reasons — to comply with applicable law, lawful requests from authorities, court orders, or to protect the rights, safety and property of OceanKart, our users, or the public.
• •In a business transfer — if Radaverse Solutions Private Limited is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified before your data is transferred and becomes subject to a different privacy policy.

5. Third-Party Services

OceanKart integrates the following third-party services. Each has its own privacy policy that governs how it handles your data.

• •Google Maps Platform — used to display maps, geocode addresses, and provide turn-by-turn navigation.
• •Firebase (Google LLC) — used for authentication, push notifications, analytics, and crash reporting.
• •Payment processor — used to securely accept payments. Card details are entered directly in the processor's secure flow and are not stored on our servers.
• •Cloud hosting provider — used to host the OceanKart backend and store account, order, and transaction data.

6. Data Security

We apply appropriate technical and organisational measures to protect your information. Network traffic between the app and our servers is encrypted in transit using TLS, sensitive credentials are hashed, and access to production data is restricted to authorised personnel. No system is 100% secure, but we work continuously to safeguard your data against unauthorised access, alteration, disclosure, or destruction.

7. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the service. Order and transaction records may be retained for longer where required for tax, accounting, fraud prevention, or other legal purposes. When you delete your account, we remove or anonymise your data in line with our Account Deletion Policy.

8. Your Rights

Depending on where you live, you may have the following rights in relation to your personal data:

• •Access — request a copy of the personal data we hold about you.
• •Correction — ask us to correct information that is inaccurate or incomplete.
• •Deletion — request that we delete your account and personal data; see our Account Deletion Policy for the in-app and email deletion routes.
• •Withdraw consent — for permissions you granted (such as background location or camera access), you can withdraw consent at any time in your device settings. Disabling required permissions may limit the features available to you.
• •Object to or restrict processing — for certain types of processing.
• •Lodge a complaint — with your local data protection authority.

9. Children's Privacy

OceanKart is not intended for, and we do not knowingly collect personal information from, children under 18. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International Users

OceanKart is operated from Zimbabwe. If you access the service from outside Zimbabwe, your information may be transferred to, stored, and processed in Zimbabwe and in countries where our service providers operate. By using OceanKart, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the app, or applicable law. When we make material changes, we will update the "Last updated" date below and, where appropriate, notify you in the app or by email before the changes take effect.