Privacy Policy

Last updated 25 October 2026 · Applies to okbuddy.cloud, the OKBuddy Android app (okbuddy.console) and the OKBiz Android app (okbiz.okbuddy.console)

OKBuddy is an AI assistant for shopping from local partner shops, ordering, reminders, email and calls, with optional Health Coach and My Story add-ons. OKBiz helps shop owners build websites and online stores and sell on OKBuddy. This policy explains what we collect, why, who we share it with, how long we keep it and how you can delete it. It follows India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

We do not sell your personal data, and we do not use it for advertising.

1. What we collect

Account: your name, email, phone number and profile photo. If you sign in with Google we receive your name, email and photo from Google.
Addresses and location: delivery addresses you save. Your location is used only when you allow it, to show shops near you and check delivery areas.
Chats: your messages to OKBuddy, and the photos, documents or voice you choose to send.
Orders and wallet: your orders, cashback balance, and the bank or UPI details you enter to withdraw cashback.
Reminders and scheduled tasks you create, such as reminders, scheduled emails, calls and scheduled orders.
Add-ons you turn on: Health Coach (section 4 and our Health data notice) and My Story diary (diary notice). Nothing is collected for an add-on until you add it and agree.
Device and technical data: IP address, app version, device model, browser type, sign-in session tokens and a notification token if you allow notifications. We use these to keep you signed in, send notifications, fix errors and prevent abuse.

2. How we use it

To answer your requests, find products and shops, and place, pay for and deliver your orders.
To give a shop and its delivery partner what they need for your order: your name, phone number and delivery address.
To send order updates and reminders when notifications are on.
To credit cashback and pay withdrawals.
To keep OKBuddy secure, stop fraud and fix problems.

Messages, photos and documents you send are processed by our AI provider (Google Gemini) to create OKBuddy's answers. Speech is turned into text, and replies read aloud, by Sarvam AI. We do not keep voice recordings.

3. Phone permissions (Android)

The app asks for each permission only when you use the feature that needs it. You can turn any of them off in your phone's settings.

Permission	Used for
Camera	Taking photos to send in chat, meal and body-check photos in Health Coach, video calls with OKBuddy, and barcode scanning in OKBiz. Photos are only sent when you choose to send them.
Microphone	Voice chat and video calls. It listens only while voice chat or a call is open, or after you tap a mic button.
Location	Showing shops near you and checking whether a shop delivers to you.
Notifications	Order updates, reminders and messages.
Phone calls and contacts	When you ask OKBuddy to call someone, it finds the number in your contacts and places the call at the time you choose. Your contact list is read on your phone; only the contact you pick is sent to OKBuddy, to save the reminder.
Display over other apps, screen capture and microphone (Live screen help)	Only while you start Live screen help: a floating bubble shows OKBuddy's answers over other apps. Screen images and your voice are sent to our AI only during that session, to answer your question, and are not stored.
Health Connect	See section 4.

4. Health Connect data

If you connect Health Connect in Health Coach, the OKBuddy app reads only these three data types: steps, exercise (workout minutes) and weight. It never writes to or changes your Health Connect data.

Why: steps fill the Steps tile and your daily step goal. Workout minutes show under Steps and count towards your daily workout. Weight fills the Weight tile, your BMI and your progress chart.
When: only after you tap Connect and allow access. The app reads the daily totals for the last 7 days when you open Health Coach or sync.
Stored: the daily totals are saved to your Health Coach account so your coach and progress charts can use them.
Never shared: Health Connect data is not sold, not used for advertising, and not shared with shops, other users or anyone else. It is only sent to our AI provider when you ask your coach a question, to create that answer.
Your control: remove access any time in Health Coach → Manage, or in your phone's Settings → Health Connect → App permissions → OKBuddy. Removing Health Coach (Account → Add-ons → Remove) permanently deletes all your health data on our servers.

OKBuddy's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

5. Google account data (Gmail and contacts)

If you connect your Google account in Account → Connections, OKBuddy asks Google for access to send email and read your contacts:

Gmail: to write and send the emails you ask for, such as "mail Priya that I'll be late". OKBuddy shows you every draft and sends it only when you confirm, or at the time you scheduled. It does not read your inbox.
Contacts: to find the email address or phone number of the person you name.
Access tokens are stored encrypted. You can disconnect any time in Account → Connections, or at myaccount.google.com/permissions.

OKBuddy's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, not sold, not shared except to provide the feature you asked for, and not used to train AI models.

6. Payments

Online payments use OKBuddy Pay, our checkout page, with Razorpay (an RBI-authorised payment aggregator) as the payment processor. Card numbers, UPI details and bank logins go straight from your device to Razorpay or your bank. OKBuddy never sees or stores your full card number, CVV or UPI PIN. We receive the payment status, amount, method and a reference number.

Depending on the shop, the money goes to the shop's own Razorpay account, or to OKBuddy, which pays the shop. Cash on delivery is paid to the delivery partner or shop.

Partner shops and delivery partners (including Shiprocket and couriers): the order details they need to deliver.
Service providers who run parts of OKBuddy for us and may use the data only for that: Google (Gemini AI, sign-in, Firebase notifications), Sarvam AI (speech), Razorpay (payments), OpenStreetMap (maps) and Serper (web search for products).
Online stores: some product links to Amazon, Flipkart and other stores go through an affiliate network (Cuelinks). When you open one, that store's privacy policy applies.
Law: when the law requires it, or to protect people from fraud or harm.

8. Shop owners (OKBiz)

We store your business details, products, orders, customers and the payment, Shiprocket and Meta Pixel settings you connect. Payment keys are stored encrypted and used only to take payments for your store.
If you add a Meta Pixel to your website, Meta receives visit and purchase events from your website's visitors. You are responsible for telling your visitors about this.
Wedding invitation sites store the guest names you add and the RSVPs and wishes guests send. They are only shown to you.

9. How long we keep it

We keep your account data while your account is open.
Add-on data (Health Coach, My Story) is deleted when you remove the add-on.
When you delete your account, we delete or anonymise your data within 30 days. Order and payment records are kept for as long as Indian tax and accounting law requires (usually 8 years), and then deleted.
Server logs are kept for up to 90 days.

10. Security

All data is sent over HTTPS. Passwords are hashed, and payment keys and Google tokens are encrypted. Only the staff who need it can access personal data. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

11. Your rights and deleting your account

You can see and edit your profile and addresses, delete chats, remove add-ons and turn notifications off in Account.
You can ask us for a copy of your data, to correct it, or to delete it.
To delete your account and data: email support@okbuddy.cloud from the email on your account, with the subject "Delete my OKBuddy account". We confirm and delete within 30 days, as set out in section 9.
You can withdraw any consent, for example to Health Connect, Google, location or the microphone, at any time. This does not affect what was done before.

12. Children

OKBuddy is not meant for children under 18. We do not knowingly collect data from children. If you think a child has given us data, write to us and we will delete it.

13. Changes and contact

We may update this policy. If we make important changes, we will tell you in the app before they apply.

Questions, requests and complaints (Grievance Officer): support@okbuddy.cloud. We reply within 7 days and resolve complaints within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.