Privacy Policy

Version 1.3, in effect from 2026-10-17.

1. Who we are

KIRAN SIDHARTH (sole proprietor), trading as "staarbox", at 92, Alagar Garden, 2nd Street, Sundarrajanpatti, Sembiyanendal, Madurai, Tamil Nadu 625107 ("Staarbox", "we") decides why and how your personal data is used. Under India's Digital Personal Data Protection Act, 2023, we are the "Data Fiduciary".
This policy covers the Staarbox app and our website www.staarbox.in.

2. What we collect

Account: your mobile number, verified with a one-time code.
Profiles: name, email, phone number, gender, date of birth, veg or non-veg, delivery slot, delivery note, the referral code used, and coins.
Health answers: diabetes, pregnancy, fruit allergies, and any details you type.
Addresses: your delivery addresses with their map location, and billing details if you add them (name, email, phone, address, company, GSTIN).
Plans and payments: what you buy, amounts, dates, Razorpay payment IDs and messages, invoices, wallet and coin history, coupons, and each day's box (its address, slot and items).
Steps (adults only, and only while you have step tracking on): your daily step counts.
Activity: a history of the changes to your account (for example a new address, a changed delivery time or a blocked day), with when they happened and who made them: you, Staarbox, or our automatic daily work. Health answers appear there only as "updated", never the answers.
Device: a random device ID, your phone's platform, the app version, a notification token, and when you last used the app.
Support: issue reports (text and photos), our replies, feedback and ratings, and the notifications we send you.
Consents: which version of our terms and this policy you agreed to, when, and on which device.
Security: sign-in attempts, and our server logs, which include your IP address (never your one-time codes, tokens or passwords).

3. Why we use it

To create your account, deliver your boxes, and run your plan, wallet, coins and invoices.
To prepare boxes that suit your health answers and allergies, and to give pregnant profiles our pregnancy menu.
To run step challenges, coins and referrals.
To send service messages (low balance, plan ending, deliveries, holidays, birthday wishes, coins earned), and news and offers from Staarbox (for example a new box or a seasonal fruit). You can turn notifications off in your phone's settings.
To prevent fraud, keep the service secure, and meet our legal duties (for example, tax records).

We don't sell your data, and we don't use it for advertising by others.

You agree to this policy when you start using the app, and again whenever we publish a new version.
The health questions are part of setting up a profile, because we need the answers to prepare safe boxes. You can change your answers at any time.
Step tracking is optional. It starts only when you tap Start Tracking and allow your phone's step counter (Physical activity on Android, Motion & Fitness on iPhone). While it counts, Android shows a small notification. You can pause it at any time.
You can turn notifications off in your phone's settings.
You can withdraw your consent by deleting a profile or your account in the app (see "How long we keep it").

5. Children

Only the adult account holder can add a profile for someone under 18, and doing so confirms that they are the parent or guardian and give consent for them. We don't track children's behaviour or show them advertising, and step challenges are for adults only.

We share data only with the services that help us run Staarbox, and only what they need:

Razorpay (payments): your name, phone and email at checkout, and the payment itself.
Google Firebase: signing in with your phone number, app checks, and notifications.
Google Maps: address search and the map pin. Also your location, if you allow it (in the app or on our website).
On our website, Google reCAPTCHA checks that a real person is signing in, and Google Analytics (cookies) counts visits to the information pages, never the sign-in, details or payment pages.
Hostinger: our servers in India, where all our data and backups are kept.
Sentry: error reports with a random device ID (no phone number, email or messages).
Our delivery team: your name, phone, address, landmark, delivery note, map link and the box's contents.

We share data with authorities only when the law requires it.

7. Where your data is kept

On our servers in India (Hostinger). Some of the services above, such as Google, Razorpay and Sentry, may process data outside India, as the law allows.

8. How long we keep it

We keep your data while your account is active.
When you delete your account, we erase at once: your personal details, health answers, addresses, billing details, step data, your activity history, issue reports and their photos, feedback texts, and notification texts. Your phone number can then be used again.
We keep what the law requires: invoices (with the name, address and GSTIN on them) and payment records, for at least 8 years. We also keep the history of plans, boxes, wallets and coins, your consents, ratings, and our admin activity log, without your personal details.
Some copies last a little longer: signed-out device records for 30 days, Razorpay's payment messages for up to 180 days, and our backups for up to 7 days (Hostinger's own backups follow its schedule).

9. How we protect it

Encrypted connections (HTTPS), strict access for our staff, a lock after repeated wrong passwords, a log of every admin action (including every look at health answers), and daily backups.

10. Your rights

Under the DPDP Act you can:

get a summary of your personal data and how we use it;
correct or update it;
have it erased;
nominate someone to use these rights for you if you die or can't act;
have your complaints answered.

You can do most of this in the app. For anything else, write to our Grievance Officer. We reply within 30 days.

11. Grievance Officer

Kiran Sidharth, Proprietor
Email: contact@staarbox.in
Phone: 0452-4035878
Address: 92, Alagar Garden, 2nd Street, Sundarrajanpatti, Sembiyanendal, Madurai, Tamil Nadu 625107
If you aren't satisfied with our reply, you can complain to the Data Protection Board of India.

12. Changes

When this policy changes, the app shows the new version, and you agree to it before you continue.

13. Contact

Email: contact@staarbox.in
Phone: 0452-4035878