Privacy policy
Last updated 5 October 2026
BudgetBasket compares grocery prices on Blinkit, Zepto and Instamart. This policy explains what personal data we collect when you use budgetbasket.in, our app or our WhatsApp bot, why, who we share it with, how long we keep it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
In short: you can compare prices without an account. We use your pincode to fetch prices, keep your searches for 180 days to improve results, use analytics to see what works, and never sell your data. You can delete your account and its data yourself at any time.
1. Who we are
[Legal entity name, e.g. BudgetBasket Technologies Private Limited], [Registered office address] (“BudgetBasket”, “we”) decides how and why your personal data is processed — the “Data Fiduciary” under the DPDP Act. BudgetBasket is independent and not affiliated with Blinkit, Zepto, Swiggy or any other app we compare.
2. What we collect
When you use the site, signed in or not
- Location. The pincode you enter, with its area, city and state. If you tap “use my location”, your browser shares your coordinates; we turn them into a pincode and keep them in your browser so price lookups can be more precise. They are sent with your searches and stored with your usage events.
- Searches. What you search for, the pincode, the prices we showed, and how the search started (typed, a suggestion, a category).
- Baskets and lists. Items you add, lists you paste, and comparisons you run. A list you choose to share gets a link anyone with it can open.
- Hand-offs. When you open an app from BudgetBasket to order, we record which app, the basket total and the saving we showed. We don’t see your order, payment or delivery address — those are between you and that app.
- Usage. Pages you view, buttons and links you tap, the device and browser type, the referring site, and an anonymous device id (a cookie). Our servers also see your IP address when you connect.
- Feedback. If you report a wrong match or price, what you reported.
If you sign in
- Phone number, to send a one-time code and identify your account; optionally your name, email and a saved pincode.
- Savings history: the comparisons and hand-offs linked to your account, used to show what you’ve saved.
- Referrals: your referral code and who signed up with it.
- Security logs: when you sign in, the time, a masked phone number, IP address, approximate location and browser.
If you contact us through the support chat, WhatsApp or email: your messages and whatever you choose to include, and for WhatsApp your WhatsApp number and pincode.
We don’t ask for, and you shouldn’t enter, payment details, government ids or health information.
3. Why we use it
- To show prices, delivery fees and the cheapest app for your pincode (location, searches, baskets).
- To sign you in, keep you signed in, and protect accounts from misuse (phone, sign-in codes, security logs).
- To show your savings and run referrals (savings history, referrals).
- To improve matching, prices and coverage, and find bugs (searches, feedback, usage).
- To understand which features work, in aggregate (analytics).
- To answer you (support messages).
- To meet legal obligations and respond to lawful requests.
We don’t sell or rent personal data, we don’t use it for advertising, and we don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Our basis for using it
We process personal data with your consent — given when you use the service after being shown this policy, when you sign in, share your location or message us — and for the legitimate uses the DPDP Act allows, such as providing what you asked for and complying with law. You can withdraw consent at any time (section 8); this doesn’t affect processing already done, and some features (like signing in) won’t work without it.
5. Who we share it with
Only with service providers (“Data Processors”) who handle it on our behalf, under contract, for the purposes above:
| Provider | What for | What they receive |
|---|---|---|
| [Hosting provider and region, e.g. AWS Mumbai] | Runs our servers and database | Everything we store (see “What we collect”) |
| MSG91 (India) and Twilio (USA) | Send and check sign-in codes by SMS | Your phone number |
| Google Analytics (Google LLC, USA) | Usage statistics | Pages viewed, actions, search terms that can’t be personal, pincode, city and state, device/browser, an internal user id if signed in. Never your phone, email, name or coordinates. |
| Microsoft Clarity (Microsoft Corp., USA) | How pages are used (clicks, scrolling, session replays with text fields masked) | As for Google Analytics |
| Intercom | The support chat | What you type in the chat; when you are signed in, your account id, name, email and sign-up date — never your phone number |
| Price data providers (Actowiz, QuickCommerce API) | Fetch live prices from the apps | The search term and the pincode — or coordinates if you shared your location. Not who you are. |
| Mapbox, OpenStreetMap Nominatim, India Post pincode API | Turn a location into a pincode and area | Coordinates (when you tap “use my location”) or a pincode. Not who you are. |
| Meta (WhatsApp Business Platform) | Our WhatsApp price bot, if you message it | Your WhatsApp number and the messages you send the bot |
When you open Blinkit, Zepto, Instamart or another app from BudgetBasket, you leave our service; that app’s own privacy policy applies to what you do there. We may also disclose data if the law requires it, to protect our users or service from fraud or abuse, or to a successor if BudgetBasket is merged or sold (who will be bound by this policy).
6. Where it’s stored
Our servers and database are in [Country where the servers are, e.g. India]. Some providers above (Google, Microsoft, Twilio, Intercom, Meta) process data outside India, in countries the Government of India has not restricted under section 16 of the DPDP Act, and under their own security commitments.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account (phone, name, email, saved pincode) | Until you delete your account |
| Search history (term, pincode, the prices we showed) | 180 days, or until you delete your account |
| Usage events on BudgetBasket (pages, clicks, location context) | 13 months; a signed-in account’s events are deleted with the account |
| Sign-in codes | Deleted within a day of expiring |
| Sign-in and security logs (time, masked phone, IP address, approximate location, browser) | 24 months, to detect and investigate account abuse |
| Comparisons and orders you hand off to an app | Until you delete your account, then kept only without anything that links them to you |
| Google Analytics data | 14 months (our Google Analytics retention setting) |
| WhatsApp bot (number, pincode, message count) | Until you ask us to delete it |
| Support chats | Until you ask us to delete them |
Price data (what the apps charge) isn’t personal and is kept for up to 24 months to show price history.
8. Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how it’s used, and who we’ve shared it with.
- Correct or update it — your name, email and pincode are editable on your profile.
- Erase it — delete your account and its data yourself on the delete account page. Your account, search history and usage events are deleted; comparisons and hand-offs are kept only without anything that links them to you.
- Withdraw consent — delete your account, clear this site’s data in your browser, or turn off location sharing in your browser settings.
- Nominate someone to exercise these rights if you die or become incapable.
- Raise a grievance with us (section 12), and if unresolved, with the Data Protection Board of India.
To exercise any right, email grievance@budgetbasket.in from your registered email or include your registered phone number; we may verify your identity first. We respond within 30 days. If you no longer have your number, email us and we’ll delete your account within 7 days.
Not signed in? Your data is tied only to a device id in your browser. Clear this site’s cookies and storage to start fresh; ask us (with the approximate dates and pincode) to delete searches made from it.
9. Cookies and similar storage
We use cookies and your browser’s local storage for the following. Blocking cookies keeps price comparison working but signs you out and stops analytics.
| Name | Type | Purpose and duration |
|---|---|---|
| bb_session | Cookie (HttpOnly) | Keeps you signed in — 30 days |
| bb_device | Cookie (HttpOnly) | A random id for this browser, so a guest’s searches can join their account on sign-in — 1 year |
| _ga, _ga_* | Cookie (Google Analytics) | Tells visits apart — up to 2 years |
| _clck, _clsk | Cookie (Microsoft Clarity) | Tells visits apart — up to 1 year |
| intercom-id-*, intercom-session-*, intercom-device-id-* | Cookie (Intercom) | Keeps your support chat and recognises your device — up to 9 months (the session one about a week) |
| bb_pincode_v1 | Local storage | Your chosen pincode and area, and coordinates if you shared your location |
| bb_basket_v1, bb_recent_v1 and similar | Local storage | Your basket, recent searches and settings — stay in this browser |
10. Security
Connections use HTTPS; sign-in cookies are HttpOnly and secure; sign-in codes are stored only as keyed hashes and expire within 5 minutes; IP addresses in usage events are stored only as a one-way hash; access to production data is limited to staff who need it and is logged. No system is perfectly secure: if a breach affects your personal data we will tell you and the Data Protection Board as the law requires.
11. Children
BudgetBasket is meant for adults. You must be 18 or older to create an account. We don’t knowingly process children’s personal data or track or target children; if you believe a child has given us personal data, contact us and we’ll delete it.
12. Contact and Grievance Officer
Bhuvan Rawal, Grievance Officer
[Legal entity name, e.g. BudgetBasket Technologies Private Limited], [Registered office address]
Email: grievance@budgetbasket.in
We acknowledge grievances within 48 hours and resolve them within 30 days. For anything else, write to support@budgetbasket.in or use the chat on this site.
13. Changes to this policy
We’ll update the date above when this policy changes, and for significant changes tell signed-in users on the site before they take effect. Using BudgetBasket after a change means the updated policy applies.