Privacy Policy
Grocery marketplace app
Effective Date: October 16, 2026
Last Updated: October 16, 2026
This Privacy Policy describes how Vitameen ("we," "us," or "our"), operated by Silver Axis Ltd, collects, uses, shares, and safeguards your information when you use the Vitameen mobile application and this website (vitameen.co). We are committed to compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the data protection laws applicable in the countries where Vitameen is available.
1. About Vitameen
Vitameen is a marketplace that connects customers who need groceries with stores and distributors who can supply them. A single account may hold one or more roles — Customer, Store, or Distributor — and the information we process depends on the roles you use.
Vitameen does not sell groceries itself and is not a party to the transactions arranged between users. Pricing, availability, and fulfillment are agreed directly between the parties involved.
2. Information We Collect
We collect information you provide directly, information generated as you use the app, and information obtained through device permissions you grant.
2.1 Account and Profile Information
- Mobile Number: Your mobile number is your primary account identifier and is used to send one-time verification codes (OTP) at signup, login, PIN reset, and when you change your number.
- Personal Details: Full name, country of registration, and — optionally — an email address and profile photo.
- Roles: Whether your account operates as a Customer, Store, or Distributor, including additional roles you add later.
- Business Details: For Store and Distributor accounts: business name, business address, and the map coordinates of that address.
- Representatives: A Store or Distributor can invite other people to act on behalf of the business. For an invitation we process the invitee's mobile number, and — once they accept — their account and their status as a representative of that business.
- Security PIN: The PIN you set to protect your account is stored only as a cryptographic hash. We never store your PIN in readable form.
- Biometric Unlock: If you enable Face ID, Touch ID, or fingerprint unlock, the check is performed by your device. Biometric data never leaves your device and is never transmitted to or stored by us.
2.2 Business Verification Documents
Stores and Distributors apply for verification before they can respond to requests. To review an application we collect:
- Identity Documents: Photographs of the front and back of the business owner's national identity card (CNIC or the equivalent in your country).
- Business Letterhead: An image of the business's company letterhead.
- Review Outcome: The status of your application (pending, approved, or denied), the reason given if it was denied, and when it was reviewed.
Verification documents are used only to confirm that a business is genuine. They are held in private storage, are never shown to other users, and are visible only to authorized Vitameen staff reviewing the application.
2.3 Request Information You Submit
Depending on how you use the app, you may submit information about the items you want or offer:
- Grocery Requests: Item names, categories, sizes, quantities, your pickup or delivery preference, and any notes you add to a request.
- Grocery List Photos: Photographs or image files of grocery lists (up to three per request) that you choose to capture with your camera or select from your photo library.
- Swap and Distributor Requests: Details of stock you hold, need, or wish to exchange with other stores, or request from distributors, on the platform.
- Offers and Responses: Availability, pricing, and fulfillment details exchanged in response to a request.
2.4 Messages and Activity
- In-App Messages: Messages exchanged in the conversation attached to a request or offer, including timestamps and read status.
- Contact Exchange Records: A record of when contact details were shared between two parties after a transaction was confirmed.
- Request History: The status history of your requests, offers, and completed transactions.
- Notification Inbox: A history of the notifications we sent you, so you can review them in the app.
2.5 Device Permissions and Technical Data
- Location: Approximate and precise location, used to set your address during setup and to match you with requests or responders within the distance radius configured by the platform administrator. Location is collected only while you are using the app; we do not track your location in the background.
- Camera and Photo Library: Accessed only when you choose to attach a grocery list photo or set a profile photo.
- Push Notification Tokens: A device token used to deliver notifications, together with the notification preferences you set in the app.
- Technical Logs: IP address (used for security and rate limiting), device platform, app version, and session and refresh tokens used to keep you signed in.
3. How We Use Your Information
- Account and Authentication: Creating your account, sending verification codes, verifying your PIN, and maintaining your signed-in session.
- Business Verification: Reviewing Store and Distributor applications and keeping the marketplace limited to genuine businesses.
- Matching and Fulfillment: Routing your requests to stores and distributors within the configured radius, and delivering their offers back to you.
- Communication: Operating in-app messaging and sending push notifications about offers, messages, and request status changes.
- Security and Fraud Prevention: Verifying accounts, rate limiting sensitive operations, and investigating misuse of the platform.
- Service Improvement: Producing aggregated, anonymized statistics about how the service is used so we can improve matching and reliability.
- Legal Compliance: Meeting obligations under applicable consumer protection and data protection law, and responding to lawful requests from authorities.
4. How We Handle Request Information
Grocery requests and grocery list photos can reveal details about you and your household, so we handle them carefully.
- Purpose Limitation: This information is used solely to fulfill the request you submitted and to support the conversation attached to it.
- Limited Visibility: A request and any attached grocery list photo are visible only to the stores or distributors matched to it and to any party that responds to it.
- No Advertising Use: We never use request information for advertising, profiling, or automated decision-making about you.
- No Sale: We do not sell request information, and we do not share it with data brokers or advertisers.
5. What Other Users Can See
- Your Mobile Number: Your mobile number is never shown to other users through the app.
- Request Details: The item details, quantities, and any grocery list photo you attach are shared with the stores and distributors matched to your request.
- Business Contact Details: A business name and address are disclosed to the other party only once a transaction between you has been confirmed.
- Representatives: People you invite as representatives can act on the business's requests, offers, and messages according to the access you give them.
- Messages: Messages are visible to the participants of that conversation and to authorized staff investigating a reported safety or abuse issue.
- Location: Other users see the general area used for matching. Your precise address is disclosed only as part of a confirmed transaction.
6. Storage, Security, and Retention
- Storage: Data is held in secure, industry-standard cloud infrastructure with restricted administrative access. Photos and verification documents are stored in private cloud storage and are retrieved only through short-lived, access-controlled links.
- Encryption: All traffic between the app and our servers is protected with HTTPS/TLS, and data is encrypted at rest. Security PINs are hashed, and authentication tokens are kept in your device secure storage (iOS Keychain / Android Keystore).
- Verification Codes: One-time verification codes are short-lived and expire automatically. We retain only the verification record and its timestamps.
- Retention — Active Accounts: Your information is retained for as long as your account remains active, so that your requests, offers, and conversation history remain available to you.
- Retention — Deleted Accounts: When you delete your account, we delete or anonymize your personal information, except where we are required to retain records for legal, audit, or dispute-resolution purposes.
7. Third-Party Services
We share limited information with service providers that are necessary to operate the platform:
- Messaging Providers: WhatsApp (Meta), used to deliver one-time verification codes and representative invitations to your mobile number.
- Cloud Hosting, Database, and Storage Providers: To host the service and store your data and uploaded images securely.
- Push Notification Services: Our notification delivery service, Apple Push Notification service, Firebase Cloud Messaging, and Expo push infrastructure, used to deliver notifications to your device. Notifications never include message content.
- Mapping Services: Google Maps, used to display maps and to convert addresses into coordinates for matching.
These providers may process your information only on our instructions and for the purposes described above. We do not sell your personal information to third parties.
8. Tracking and Advertising
Vitameen does NOT track users across other apps or websites, and does not show advertising in the app.
- No Cross-App Tracking: We do not collect or use data to track your activity across apps and websites owned by other companies.
- No Advertising Networks: We do not share your information with advertising networks or data brokers.
- No App Tracking Transparency Prompt: Our app does not use the App Tracking Transparency framework, because we do not carry out tracking that would require permission under Apple's policies.
- Service-Only Collection: Data such as location, mobile number, and business address is collected solely to provide core functionality — matching requests with nearby responders — and never for tracking.
9. Your Rights and Choices
Depending on where you live, you may have some or all of the following rights:
- Access and Portability: Request a copy of the personal information we hold about you.
- Correction: Update your name, email, profile photo, business details, and address at any time from Edit Profile in the app.
- Deletion: Delete your account from Account Settings → Delete Account in the app, or by emailing support@vitameen.co.
- Withdraw Consent: Revoke location, camera, photo library, or notification permissions in your device settings at any time. Some features, such as address setup and grocery list uploads, will stop working.
- Notification Preferences: Choose which push notifications you receive from Notification Settings in the app.
- Regional Rights: Under the GDPR you may also object to or restrict certain processing and lodge a complaint with your supervisory authority. Under the CCPA/CPRA you may request disclosure and deletion without being discriminated against for exercising those rights.
10. Children's Privacy
Vitameen is not intended for children. You must be at least 18 years old, or the age of majority in your country, to create an account. We do not knowingly collect personal information from children; if we learn that we have, we will delete it.
11. International Data Transfers
Vitameen is available in multiple countries, and your information may be stored and processed in data centers located outside the country where you live. Where information is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses and providers that maintain recognized international security standards.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page always reflects the current version, and significant changes will be announced in the app before they take effect.
13. Contact Us
For privacy questions, data requests, or to report a concern:
- Email: support@vitameen.co
- Operator: Silver Axis Ltd