Privacy Policy

Overview & Our Privacy Commitment

Welcome to Dingit ("Dingit", "we", "our", or "us"), accessible via our website at https://getdingit.com/ and our dedicated mobile applications for Android and iOS. Dingit is a social-logistics platform engineered for two people, encompassing everyday on-demand food and retail delivery (Ding Eats), curated date planning and surprise gifting (Together), end-to-end encrypted direct messaging (Ding Chat), and proactive contextual assistance (Ding AI).

We believe doing thoughtful things for someone shouldn't require trading away your privacy. We are committed to transparency, data minimization, and strict adherence to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable Reserve Bank of India (RBI) payment security directives.

Information We Collect

We collect only the minimum personal data required to provide and fulfill our services safely and expeditiously:

A. Information You Voluntarily Provide

• Account Information: Mobile phone number, One-Time Password (OTP) verification tokens, display name, optional profile picture, and email address.
• Delivery & Location Details: Physical delivery addresses, saved landmark tags (e.g., Home, Work, Partner's Address), and delivery contact phone numbers provided during checkout.
• Order & Gifting Records: Items ordered, merchant selections, custom gift messages, and delivery schedule preferences.
• Customer Communications: Messages, feedback, or dispute details sent to our customer care or grievance redressal desk.

B. Information Collected Automatically

• Device & Connectivity Data: Device model, operating system version, unique device identifiers, IP address, and mobile network information used for fraud prevention and crash diagnostic logging.
• Location Information: Precise or approximate GPS coordinates collected when the app is active, strictly used to verify serviceability, match nearby merchant kitchens, and calculate delivery routing. We do not track continuous background location when the app is closed.

Payment Security & Cashfree Gateway Integration

When you place an order or purchase a gift on Dingit, digital payment processing is handled securely by our licensed third-party payment partner, Cashfree Payments India Private Limited ("Cashfree"), and other RBI-authorized payment aggregators.

During the payment checkout flow:

• Your card numbers, UPI IDs, Net Banking credentials, or digital wallet details are transmitted directly to Cashfree's PCI-DSS compliant secure servers via TLS 1.3 / 256-bit SSL encryption.
• Dingit only receives an encrypted transaction token, the selected payment method type (e.g., UPI, Card), and payment status confirmation (Success, Pending, or Failed) to generate and fulfill your order.
• Payment information is handled strictly in accordance with Cashfree's Privacy Policy and Reserve Bank of India tokenization mandates.

Ding Chat End-to-End Encryption Guarantee

Messages sent via Ding Chat are encrypted on your local device before transmission and can only be decrypted by the paired recipient's device. Dingit's servers act purely as an encrypted transit pipe; we cannot read, decrypt, parse, or sell your private conversations. Ephemeral self-destructing messages are permanently expunged from device memory and temporary relay queues once the timer expires.

How We Use Your Information

We process your data strictly for legitimate operational purposes:

Information Sharing & Third-Party Disclosure

Dingit will never sell, rent, or trade your personal data to advertisers or third-party data brokers. We share limited information only with trusted partners strictly necessary to complete your requests:

• Merchant Partners & Cloud Kitchens: Provided with item orders and special preparation instructions without revealing your full personal profile.
• Logistics & Delivery Executives: Provided with your delivery location, customer first name, and masked contact number solely to complete the physical drop-off.
• Payment Aggregators (Cashfree Payments): To process online payments, verify transactions, and issue authorized refunds.
• Legal Authorities: Disclosed only if strictly required by applicable Indian law, court order, or formal regulatory directive.

Data Retention & Account Erasure

We retain your personal data only as long as necessary to maintain your account, fulfill orders, prevent fraud, and comply with statutory legal and tax audit requirements under Indian law (typically 7 years for financial transaction invoices).

You may request permanent deletion of your account and associated personal data at any time through the Dingit mobile app (Account > Privacy > Delete Account) or by emailing privacy@getdingit.com. Upon receipt, your personal profile, addresses, and saved preferences are permanently expunged within 30 days.

Your Rights under DPDP Act 2023

In accordance with the Digital Personal Data Protection Act, you have the right to:

• Access & Summary: Request a copy of your personal data held by Dingit.
• Correction & Updating: Correct inaccurate or out-of-date personal information.
• Erasure / Deletion: Request the deletion of personal data no longer necessary for the purpose it was gathered.
• Grievance Redressal: Direct grievances to our designated Grievance Officer for swift investigation.

Cookies & Local Storage

Our website getdingit.com uses minimal essential cookies and session storage necessary to secure the browsing session, remember preferred settings, and analyze site performance. We do not use third-party invasive tracking cookies for cross-site behavioral advertising. You can disable cookies via your browser settings, though certain interactive landing page features may operate with reduced functionality.

Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Redressal Officer are published below:

Grievances will be acknowledged within 24–48 hours of receipt and addressed within 15 business days as stipulated under applicable Indian IT rules.