DukaanBox

Privacy Policy

Last updated: 21 August 2026

DukaanBox turns the phone already on your counter into a UPI soundbox — instant voice alerts the moment a payment lands, and clean collection reports for every dukaan in India.

Introduction

This Privacy Policy applies to the DukaanBox mobile application (“App”) and the dukaanbox.in website and support channels (“Site”). DukaanBox (“we”, “our”, “us”) is committed to protecting the privacy of its users (“you”, “your”). It describes what data we handle, why, and what you can do about it. The short version: the App reads UPI payment notifications on your phone so it can announce and count them. It never touches your money and never asks for your UPI PIN, passwords, or bank account details. We are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023.

User Consent

By installing the App and granting notification access, you consent to the handling described in this policy. You may withdraw that consent at any time by revoking notification access in Android settings or by uninstalling the App. Withdrawing consent stops announcements; it does not affect anything we did lawfully before you withdrew it.

Information We Collect

Personal Information

Only what you give us directly. If you write to support or use the request form, we keep your name, mobile number or email address and the content of your message, so that we can reply and keep a record of what was done. We do not ask for your address, date of birth, government ID, or financial credentials.

App & Service Usage Information

With your permission, the App reads incoming payment notifications from UPI apps such as Google Pay, PhonePe, Paytm, BHIM and Amazon Pay, in order to announce the amount aloud and record it in your collection report. It also stores your own settings — alert language, voice preference and shop name — so the App behaves the way you set it. This information is held on your device, not on our servers.

Non-Personal Information

Crash and performance diagnostics, in aggregate, so that we can find and fix faults. This describes the App’s behaviour rather than yours, and is not used to identify you.

Cookies and Similar Technologies

The App uses no cookies and no advertising identifiers. The website uses no analytics cookies and no third-party trackers; it sets nothing that follows you to another site.

Use of Information

We use what we hold only to announce and count your payments, to keep your settings, to answer your support requests, to fix faults, and to meet a legal obligation where one applies. We do not sell your data, we do not share it with advertisers or data brokers, and we do not use it to build a profile of you.

Data Retention and Deletion

Your collection history stays on your device for as long as you keep the App; clearing the App’s storage or uninstalling it removes that history. Support correspondence is kept for up to 24 months after your issue is closed. Diagnostic data is kept for up to 12 months, in aggregate form. Where a law requires us to keep something longer, we keep it only for that period and only for that purpose.

To have us delete what is in our support records, send a request from the Support page. We confirm in writing once it is done.

Third-Party Services and SDKs

We rely on a small number of third parties to run the Service: Google Play for app distribution and crash reporting, and email for support correspondence. They handle data only on our instructions and only for those purposes. We do not embed advertising SDKs or third-party analytics that profile you.

Data Security

We apply reasonable technical and organisational measures to protect what we hold, including encrypted transport and restricted access to our support systems. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security — but keeping your collection history on your own device rather than on our servers is a deliberate part of how we limit that risk.

Disclosure/Transfer of Information

We disclose personal data only where we must: to comply with a law, court order or valid request from an authority; to enforce our Terms & Conditions; or to protect the rights and safety of users or the public. If our business is transferred, we will notify users before their data moves, and this policy continues to apply until a new one is notified.

Confidentiality

Support correspondence is treated as confidential and is seen only by the people who need it to answer you. We do not publish, quote or share your messages without your permission.

Your Rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to give you access to a copy of the personal data we hold about you; to correct data that is wrong, incomplete or out of date; to erase data we no longer need for the purpose you gave it for; to act on a withdrawal of consent you previously gave; and to recognise a person you nominate to exercise these rights if you are unable to. Write to naveen@ferridian.com, or use the request form on our Support page. We respond within 30 days and there is no charge.

Children’s Privacy

DukaanBox is a tool for merchants and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

Payments and Financial Data

We never collect or store your UPI PIN, MPIN, passwords, OTPs, card numbers, CVV or bank account credentials. DukaanBox does not initiate, process, hold or settle any payment. Where a paid plan exists, the transaction is handled by Google Play under its own terms and we never receive your payment details.

Third-Party Links and Payment Apps

Our App and Site may link to third-party services, including the UPI apps whose notifications DukaanBox reads and the Google Play Store. Those services have their own privacy policies and we are not responsible for their practices. Reading a notification from a UPI app does not give us any access to your account with that app.

Changes to This Policy

If this policy changes, the new version will be posted here with an updated date. If a change materially affects how we handle your data, we will make that clear rather than quietly editing the page.

Grievance Redressal

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the grievance officer for DukaanBox is:

We acknowledge every complaint within 24 hours and aim to resolve it within 15 days.

Communications & Notifications

We may contact you about the Service — service notices, security alerts, and replies to your own requests. Marketing messages, if any, will always offer a way to opt out, and opting out of marketing does not stop essential service messages.

Contact Us