This policy explains what Thela Khojo (“we”), operated by Pankaj Baluja, Jaipur, Rajasthan, India, collects through this website and the Thela Khojo Android app, why, and the choices you have. We collect only what we need to run the service, and we never sell your data.
1. Information we collect
Everyone who logs in
- Mobile number — used to log you in with a one-time SMS code (OTP).
Customers
- Your location — only if you tap “Use my location”. It is used on your device to show thele near you and is not stored on our servers.
- Ratings and reports you choose to submit, stored with your account ID and a masked version of your number (for example 98290 1****).
Vendors
- Stall details — stall name, food types, usual area and hours, menu items and prices, and stall photos you upload. These are shown publicly once approved.
- Stall location — when you open your thela, tap “I'm here now” or pick a spot, and every minute or so while Live tracking is on and the app is open. Tracking stops when you close your thela or turn it off. Your latest location is shown publicly on the map while you are open.
Admins
- Name and email address, and a log of admin actions (approvals, edits) for accountability.
On your device
- Your language choice and whether you use the app as customer, vendor or admin are saved in your browser or app storage only.
2. How we use it
- To log you in and keep your account secure.
- To show approved thele, their menus, ratings and live location to customers.
- To review new vendors, handle reports and prevent fake listings or abuse.
- To send vendors messages about their listing (for example approval).
We do not show ads and we do not sell or rent personal data.
3. Service providers
We use Google services to run Thela Khojo: Firebase (Authentication, Cloud Firestore database, Cloud Storage, Cloud Functions and Hosting — data stored in Google's Mumbai region, asia-south1), Google Maps for maps and directions, and reCAPTCHA to stop automated abuse of SMS login. These providers process data on our behalf under their own privacy terms.
4. Retention
We keep account and listing data while your account is active. A vendor's thela is closed automatically after 4 hours without a location update. You can ask us to delete your account and data at any time; we will do so within 30 days unless we must keep something to comply with law.
5. Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Vendors can edit most details directly in the app. For anything else, email baluja.pankaj@gmail.com.
You can turn off location permission at any time in your phone or browser settings; the map will then show a default area.
6. Children
Thela Khojo is not meant for children under 18. Vendors must be 18 or older to register.
7. Security
Data is sent over encrypted connections (HTTPS). Access is controlled by security rules so that vendors can only change their own listing and only admins can approve listings.
8. Changes
If we change this policy we will update the date at the top and, for important changes, tell users in the app.
9. Contact & grievance officer
Pankaj Baluja, Jaipur, Rajasthan, India — baluja.pankaj@gmail.com