Privacy Policy
This Privacy Policy explains how GatherJet Labs Private Limited ("GatherJet", "we", "us"), the company behind KARTPULL (the "App") and this website (together, the "Services"), collects, uses, shares and protects your personal data.
KARTPULL is a two-sided service, so this policy has two dedicated parts — one for shoppers who use the App to match and save, and one for store partners who run offers we help shoppers unlock. Please read the part that applies to you, along with the sections that apply to everyone. We are the "Data Fiduciary" for the personal data described here under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Contents
01Who we are
KARTPULL is a mobile service that helps two shoppers in the same store combine their carts in real time so they can reach a store's existing threshold offer (for example, "Buy ₹10,000, get 20% off") that neither could hit alone. KARTPULL is owned and operated by GatherJet Labs Private Limited, a company incorporated in India. KARTPULL™ is a trademark of GatherJet Labs Private Limited.
You can reach us any time at founders@gatherjet.com. Our registered office is at [•].
02Privacy at a glance
- We collect what the match needs — not more. To pair you with another shopper we need to know you're in the store, what's in your cart, and how to let your match coordinate the bill.
- You stay anonymous to your match and to the store. Your phone number and email are masked in chat, and we do not hand your personal details to the store or its cashier.
- We don't sell your personal data. KARTPULL is not an advertising business, and we do not sell or rent your personal data to third parties.
- We use trusted providers — such as Google (login and notifications) and Razorpay (payments) — and only share what they need to do their job.
- You're in control. You can access, correct or delete your data, and withdraw consent, by contacting us.
03A few terms
Personal data means information about you as an identifiable individual. Processing means anything we do with it — collecting, storing, using, sharing or deleting. A Shopper is an individual who uses the App to match and save. A Store Partner is a business (and its representatives) that runs offers KARTPULL helps shoppers unlock. A Match is the other shopper you are paired with.
04For shoppers
Applies to people using the KARTPULL app4.1 What we collect
| Data | Why we collect it |
|---|---|
| Mobile number (and one-time passcode) | To create your account and sign you in securely, and — in masked form — to let your match reach you to coordinate billing. Verified using a phone one-time passcode. |
| Name and email (if you choose to add them) | To personalise your account, provide support, and — if you join our waitlist — to tell you when KARTPULL reaches you. |
| Device & technical information (device model, OS, app version, a device identifier, IP address) | To run the App reliably, send you notifications, keep your account secure, and prevent abuse such as a person trying to "match with themselves" using two devices. |
| Location (precise location while you are using check-in) | To confirm you are inside a partner store's geofence and to match you with nearby shoppers chasing the same offer. Used while you are actively using check-in and matching. |
| Cart details and price-tag photos | To calculate how far your cart is from the offer threshold and to score good matches. If you use the tag scanner, the photo is processed to read the item's price and brand. |
| Match and chat content | To let you and your match coordinate the bill. Messages are automatically scanned so that phone numbers and email addresses are masked, and we process reports of abuse. |
| Receipt / bill photos | To confirm a completed match and the savings you unlocked. These may be reviewed by our team to verify the outcome. |
| Payment & wallet data | To charge the match fee and platform fee, manage your in-app wallet balance, and process refunds. Card/UPI details are handled by our payment provider — we do not store your full payment credentials. |
| Support messages | To respond to you and improve the Service. |
4.2 How and why we use it
We use shopper data to: run the matching engine and pair you with a suitable shopper; show you your gap to an offer; enable in-App chat to coordinate billing; confirm completed matches and the savings unlocked; process the match/platform fee, wallet and refunds; keep the Service secure and prevent fraud and abuse; provide support; and comply with our legal obligations. Our basis for processing is your consent, what is necessary to provide the Service you asked for, our legitimate need to keep the Service safe, and legal requirements.
4.3 What your match and the store can see — your anonymity
KARTPULL is designed so you never have to overshare. Your match sees only what's needed to team up at the counter — for example an approximate distance and enough cart information to know you can unlock the offer together. Your phone number and email are masked in chat. We do not give the store or its cashier your KARTPULL account details; at the counter you are simply two shoppers checking out as one combined bill.
4.4 Payments and your wallet
Finding a match involves a small in-App fee, and there is a platform fee on the savings, paid through your in-App wallet. Payments are processed by our payment provider (Razorpay). We receive confirmation of a payment and limited transaction details to run your wallet and refunds, but we do not store your full card or UPI credentials. You still pay the store directly, in-store, for your actual shopping — KARTPULL never processes your cart payment.
4.5 Keeping the community safe
To protect shoppers and stores, we use signals such as device identifiers, matching activity and reports to detect and prevent self-matching, no-shows, manipulated carts and other abuse. This can result in temporary limits on matching or, in serious cases, suspension of an account.
4.6 How long we keep shopper data
We keep shopper data only as long as needed for the purposes above. In practice: temporary uploads (such as a receipt image that isn't linked to a confirmed match) are cleared shortly after they're no longer needed; a match chat is available for your session and closed a short time afterwards; and records we must retain for legal or financial reasons (such as payment records) are kept for the period the law requires. You can ask us to delete your account and associated personal data at any time — see Your rights.
05For stores
Applies to store partners & their representatives5.1 What we collect
| Data | Why we collect it |
|---|---|
| Business & contact details (store or brand name, contact person's name, work email, phone number, role) | To evaluate your pilot application, onboard your store, and stay in touch with you. |
| Store & offer details (store location/mall, the threshold offers you run, operating times) | To enable matching for shoppers inside your store and to brief the combined-bill flow with your team. |
| Onboarding & support communications (emails, call or meeting notes) | To set up the pilot, support your team, and keep an accurate record of our relationship. |
| Website & application data (what you submit through our "become a partner" form) | To respond to your interest and assess fit for the pilot. |
5.2 How and why we use it
We use store data to assess and onboard pilot stores, enable matching in your store, communicate with your team, provide support, understand how the pilot is performing, and meet our legal and record-keeping obligations. Our basis is our agreement (or steps to enter an agreement) with you, your consent where relevant, and our legitimate business interests in running and improving the pilot.
5.3 What shoppers and others can see
We do not share individual shoppers' personal data with your store. Matching stays anonymous at the counter — your cashier simply rings a combined bill using your existing offer. Where we share aggregate or pilot-performance information, it is presented so that it does not identify individual shoppers.
5.4 How long we keep store data
We keep store partner and applicant data for as long as we are exploring or running a pilot with you, and afterwards only as long as needed for legitimate business and legal purposes (for example, record-keeping). You can ask us to update or delete your details — see Your rights.
06Who we share data with
We do not sell your personal data. We share it only with providers who help us run KARTPULL, and only what they need:
| Provider / category | What they help us do |
|---|---|
| Google (Firebase) | Secure phone-number sign-in, push notifications, and app stability/diagnostics. |
| Razorpay | Processing the match fee, platform fee, wallet top-ups and refunds. |
| Google (ML Kit / AI text recognition) | Reading the price and brand from a price-tag photo when you use the scanner. |
| Google Maps Platform | Finding nearby stores and confirming store check-in. |
| Cloud hosting & storage provider(s) [•] | Hosting our servers and securely storing data, including receipt images. |
| Analytics & communication tools | Understanding how the Service is used (in aggregate) and sending you OTPs, updates and support replies. |
| Professional advisers & authorities | Lawyers, accountants and auditors, and government or law-enforcement bodies where we are legally required to disclose data. |
| A future owner | If GatherJet is involved in a merger, acquisition or sale of assets, data may transfer to the successor under this policy. |
07Cookies & website analytics
Our website uses a small number of cookies and similar technologies: some are essential for the site to work and stay secure, and some help us understand, in aggregate, how the site is used so we can improve it. You can control cookies through your browser settings. The KARTPULL App does not use advertising cookies.
08How we protect your data
We use technical and organisational measures designed to protect your data, including encryption of data in transit, masking of phone numbers and emails in chat, access controls, and safeguards against fraud and unauthorised access. No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong. If you believe your account or data has been compromised, please contact us immediately.
09How long we keep it
We keep personal data only for as long as necessary for the purposes described in this policy, after which we delete or anonymise it — unless a longer period is required by law (for example, financial records) or to resolve disputes and enforce our agreements. Specific timeframes for shopper and store data are described in sections 4.6 and 5.4.
10Age & children
KARTPULL is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
11Where your data is processed
We primarily process personal data in India. Some of our providers (such as Google and Razorpay) may process data on servers located in other countries. Where data is transferred outside India, we take steps to ensure it is protected in line with applicable law.
12Your rights
Subject to applicable law, including the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you and how we process it;
- Correct, complete or update your personal data;
- Erase your personal data where it is no longer needed for the purpose it was collected (some data may be retained where the law requires);
- Withdraw consent at any time, where our processing relies on consent (this won't affect processing already carried out);
- Nominate another individual to exercise your rights in the event of your death or incapacity;
- Grievance redressal — raise a concern with us and have it addressed.
To exercise any of these, email us at founders@gatherjet.com. We may need to verify your identity before we act, and we will respond within the timeframe required by law.
13Grievance Officer & contact
If you have any concern about how your data is handled, please contact our Grievance Officer, who is responsible for addressing your complaints:
- Grievance Officer: [•]
- Company: GatherJet Labs Private Limited
- Email: founders@gatherjet.com
- Address: [•]
We aim to acknowledge grievances promptly and resolve them within the period required under applicable law. If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India.
14Changes to this policy
We may update this policy as KARTPULL grows and as the law evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App or by email. Please check back from time to time.