Your information, handled with care.
We only collect what we need to shop for you and deliver to your door. We never sell your information.
Last updated: 8 November 2026
This policy explains how Grocery Assistant ("we", "us") handles personal information when you use the Grocery Assistant mobile app and this website. Grocery Assistant is run by Zain Ahamed in Wattala, Sri Lanka. If you have any questions, contact us at zainahamedux@gmail.com or +94 76 386 2732.
What we collect
| Information | Why we need it |
|---|---|
| Phone number | To sign you in, and to contact you about your order. |
| Password | Used only to sign you in. It's stored encrypted by Google Firebase, so neither we nor anyone else can read it. If you forget it, we can set a temporary one that you must change when you next sign in. |
| National Identity Card (NIC) number | You can sign in with it (or your phone number) and your password, and it makes sure each person has only one account. It's never shown to other customers. |
| Email address (optional) | Only if you add it: to send you receipts or reach you if we can't get through by phone. |
| Name and delivery address | To know who the order is for and where to deliver it. |
| Map location of your home | The pin you place on the map, so our delivery person can find your house. We only read your device location when you tap "Use my location", and never in the background. |
| Your lists and orders | Items, quantities, brand choices, delivery day and time, order status and totals, so we can shop for you and show your order history. |
| Payment information | Your chosen payment method, whether it's paid, and the photo of a bank slip if you upload one. We do not collect card or bank account numbers. |
| Photos you send | A photo of your written list, or of a product you'd like us to add. |
| Help messages | Messages you send us about an order, and our replies. |
| Language and app settings | To show the app in English, Tamil or Sinhala. |
| Notification token | A device code from Firebase Cloud Messaging so we can send order updates and reminders. |
We do not use advertising, ad tracking or analytics that track you across other apps or websites.
How we use it
- To create your account and keep you signed in.
- To check, buy and deliver your groceries, and to show you progress.
- To confirm payments and handle refunds for items we couldn't get.
- To answer your help messages and contact you about an order.
- To send order updates and a monthly reminder. You can turn notifications off in your phone's settings.
Who we share it with
We never sell or rent your information. We share it only with:
- Our team and delivery person, who see your name, phone, address, map pin and order so they can deliver it.
- Google Firebase (Google LLC), which provides sign-in, the database, file storage, notifications and hosting. Your sign-in is handled by Firebase Authentication.
- Google Maps Platform, which shows the map when you place your pin.
- Authorities, only if the law requires it.
Google may store and process data on servers outside Sri Lanka. You can read Google's privacy policy at policies.google.com/privacy.
How we protect it
All data is sent over encrypted connections (HTTPS/TLS) and stored in Google Firebase. Access rules ensure each customer can only see their own account, orders and messages, and only our admin accounts can see orders from everyone.
How long we keep it
- Your account, address and map pin are kept until you delete your account. A deleted account is closed straight away and erased 30 days later, unless you ask us to restore it within that time.
- Order and payment records are kept for up to 2 years for accounting and to handle questions about past orders, then deleted.
- Help messages are kept with the order they belong to.
Your choices and rights
Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you can ask to see the information we hold about you, correct it, or have it deleted.
- Correct your name, address or pin any time in Profile → Name & address.
- Delete your order history by swiping left on an order in Orders.
- Delete your account in Profile → Delete my account, or by asking us. See Delete your account.
- For anything else, email zainahamedux@gmail.com. We'll reply within 30 days.
Children
Grocery Assistant is meant for adults placing household orders. We don't knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, we'll update the date at the top of this page, and tell you in the app if the change is important.