Privacy Policy for Yato
Effective Date: 19 September 2026
Yato Delivery ("Yato", "we", "us" or "our"), based in Kargil, Ladakh, India, operates the Yato: Food, Groceries & More mobile application (package com.yatouser.userapp) and the related website (together, the "App"). The App lets customers order food, groceries, fruits & vegetables, personal care items and other products from local stores and have them delivered by Yato delivery partners.
This Privacy Policy explains what personal information we collect from customers, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. By using the App, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
1.1 Account and contact information. When you register or sign in: your name, mobile number, email address, password (stored only in encrypted/hashed form) and, optionally, a profile photo.
1.2 Delivery addresses. Addresses you save or enter at checkout, including house/flat details, landmark, address label (e.g. Home, Work), contact person name and phone number, and the map location (latitude/longitude) of the address.
1.3 Location information. With your permission, the App collects your device's precise and approximate location only while the App is open and in use (foreground only). The App does not collect your location in the background. We use it to check whether you are inside our service area (currently Kargil), show nearby stores, fill in your delivery address, and show order and delivery-partner tracking. You can refuse or withdraw location permission at any time in your device settings and enter your address manually instead.
1.4 Orders and transactions. Items ordered, stores ordered from, order amounts, delivery charges, coupons, order status and history, cancellations, refund requests and ratings/reviews you submit.
1.5 Payment information. Cash on Delivery is currently available. Online payments (UPI, cards, net banking and wallets) will soon be processed by our payment partner Razorpay. When you pay online, your card, UPI or bank details are entered on and processed by Razorpay; Yato does not collect or store your full card number, CVV, UPI PIN or net-banking password. We receive only the payment status, transaction ID, amount and payment method needed to confirm your order and handle refunds.
1.6 Messages and support. Chat messages, and any images or files you choose to attach, that you exchange with stores, delivery partners or Yato support through the App, and any messages you send us by email or phone.
1.7 Photos and files (optional). If you choose to upload a profile photo, or attach images to a chat or refund request, the App accesses only the photos or files you select.
1.8 Microphone (optional voice search). If you use voice search, the App asks for microphone permission and uses your device's speech-recognition service to turn your spoken words into search text. Yato does not record or store your voice audio; only the resulting text search may be saved in your recent searches on your device.
1.9 Device, technical and diagnostic information. Device model, operating system and version, app version, language, IP address, push-notification (FCM) token, crash logs and diagnostic data. Google Firebase components used by the App may also access the Android advertising ID; Yato does not show advertising and does not use the advertising ID for advertising or ad targeting.
2. How We Use Your Information
- To create and manage your account and verify your phone number or email (including one-time passwords).
- To show stores and products available at your location and confirm that you are in our service area.
- To process, prepare, deliver and track your orders, and to process payments and refunds.
- To let you communicate with stores, delivery partners and Yato support.
- To send order updates and service notifications (for example, order confirmed, out for delivery, delivered).
- To provide customer support and resolve complaints and disputes.
- To detect, prevent and investigate fraud, abuse and security problems.
- To fix crashes and improve the App's performance and features.
- To comply with legal, tax and accounting obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. How We Share Your Information
We share personal information only as needed to run the service:
- Stores (vendors) you order from receive your name, order details and, where needed to fulfil the order, your phone number and delivery address.
- Delivery partners assigned to your order receive your name, phone number, delivery address and map location so they can deliver it.
- Service providers who process data on our behalf, only for the services listed below (see Section 4).
- Legal and safety: where required by law, court order or government request, or where needed to protect the rights, property or safety of Yato, our users or others.
- Business transfers: if Yato is involved in a merger, acquisition or sale of assets, subject to this Privacy Policy.
4. Third-Party Services We Use
- Google Firebase (Google LLC): Firebase Cloud Messaging for push notifications, Firebase Authentication for phone-number verification (OTP), and Firebase Crashlytics for crash and diagnostic reports.
- Google Maps Platform (Google LLC): maps, location search, address lookup (geocoding) and distance/route calculation.
- Razorpay (Razorpay Software Pvt. Ltd.): online payment processing and refunds (being introduced soon).
- SMS service provider: delivery of one-time passwords (OTP) by SMS.
- Hosting and email: our servers are hosted in India, and we use email services to send account and order emails.
These providers process information under their own privacy policies, including Google's Privacy Policy and Razorpay's Privacy Policy.
5. App Permissions
- Location (precise and approximate), while using the App only: service-area check, nearby stores, delivery address and order tracking.
- Notifications: order status updates and service messages.
- Microphone (optional): voice search only.
- Photos / files (optional, only items you pick): profile photo and attachments.
- Internet and network state: to connect to Yato's servers.
You can change these permissions at any time in your device settings. Some features may not work without them.
6. Data Retention
We keep your account information while your account is active. Order, payment and invoice records are kept for as long as required by Indian tax, accounting and other laws, and to resolve disputes and prevent fraud. When information is no longer needed, we delete or anonymise it. Backups are overwritten on our normal backup cycle (within 90 days).
7. Deleting Your Account and Data
You can delete your account at any time from within the App: open Profile, tap the ⋮ menu and choose Delete Account, then confirm. If you cannot access the App, email theyatodelivery@gmail.com from your registered email address (or tell us your registered phone number) with the subject "Account Deletion Request". We complete verified requests within 7 business days. Full instructions: admin.theyato.in/customer/delete-account.
When your account is deleted we remove your name, email address, phone number, profile photo, saved addresses and push-notification tokens. Order and payment records that we must keep by law are retained in a form no longer used for your account, and are deleted when the legal retention period ends.
8. Data Security
All data between the App and our servers is sent over encrypted HTTPS connections. Passwords are stored in hashed form, and access to personal data is limited to authorised personnel who need it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.
9. Your Rights and Choices
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask to access, correct or update your personal information, withdraw consent, have your data erased, and raise a grievance. You can update most account details directly in the App. For any other request, contact us at the email below.
10. Children
The App is intended for users aged 18 and over. Users under 18 may use the App only under the supervision of a parent or guardian, as set out in our Terms and Conditions. We do not knowingly collect personal information from children without parental consent; if you believe a child has given us personal information, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page and in the App with a new effective date. Where changes are significant, we will notify you in the App.
12. Contact Us and Grievance Officer
For questions, privacy requests or complaints, contact:
Yato Delivery
Kargil, Ladakh 194103, India
Email: theyatodelivery@gmail.com
Phone: +91 91494 88453
We will acknowledge privacy requests and grievances within 7 days and aim to resolve them within 30 days.