Who we are#

This policy covers the app and online store operated by Kumudu Software Solutions LLP (“Kumudu”, “we”, “us”), Bengaluru, India. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.

By creating an account or placing an order, you agree to this policy. If you do not agree, please do not use the app or store.

What we collect#

Account details — your name, mobile number, email address and password or OTP login.
Delivery details — billing and shipping addresses, and the name and phone number of the person receiving the parcel.
Order details — what you bought, prices, invoices, returns and refunds.
Payment details — payments are processed by our payment gateway partner. We receive a transaction reference and status. We never see or store your full card number, CVV, UPI PIN or net-banking password.
Identity documents where the law requires them — for example your PAN, which Indian tax law requires for jewellery purchases above ₹2 lakh.
Device and usage data — device model, operating system, app version, IP address, crash reports, and the pages and products you view. The website uses cookies for sign-in, cart and basic analytics.
Messages you send us — emails, WhatsApp messages and support requests.

Why we use it#

To create and secure your account.
To take, pack, ship and deliver your order, and to handle returns and refunds.
To issue GST invoices and keep the records tax law requires.
To send order and delivery updates by SMS, email, WhatsApp or app notification.
To prevent fraud and misuse.
To fix problems and improve the app and store.
To send offers and new-collection news — only if you opt in. You can opt out at any time from the app or from the link in any marketing message.

We use your data on the basis of your consent, or where it is needed to fulfil an order you placed or a legal obligation we have.

Who we share it with#

We do not sell your personal data. We share only what each party needs to do its job:

Courier and logistics partners, to deliver your order.
Our payment gateway partner and banks, to process payments and refunds.
Hosting, SMS, email and analytics providers who process data on our behalf under contract.
Government, tax and law-enforcement authorities, when the law requires it or a court orders it.

How long we keep it#

We keep your account data while your account is open. Invoices, tax records and identity records are kept for as long as tax, accounting and anti-money-laundering laws require, even after you delete your account. Everything else is deleted or anonymised when it is no longer needed.

How we protect it#

Data is encrypted in transit, access is limited to staff who need it, and our providers are held to the same standard. No system is completely secure; if a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Your rights#

Under the DPDP Act, 2023, you can:

ask for a summary of the personal data we hold about you;
correct, complete or update it;
ask us to erase it, subject to the records we must keep by law;
withdraw consent you gave us, for example for marketing;
nominate another person to exercise these rights if you are unable to;
raise a grievance with us, and then with the Data Protection Board of India.

To use any of these rights, email rajesh@kumudu.in from your registered email address.

Deleting your account#

You can delete your account from the app or by email. See Delete your account for the steps and for what we keep afterwards.

Children#

The app and store are for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy#

We may update this policy. The date at the top of this page shows when it last changed. If a change is significant, we will tell you in the app or by email before it takes effect.