Privacy Policy for WhiteLeaf

This Privacy Policy describes Our policies and procedures on the collection, use, storage, and disclosure of Your information when You use the WhiteLeaf mobile application and related services (operated by WhiteLeaf SmartCare), and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide, maintain, and improve the Service, fulfill laundry pickup and delivery orders, process payments, measure application performance, and analyze marketing effectiveness. We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law (including the Digital Personal Data Protection Act of India and Apple App Store / Google Play guidelines), only where We have a valid legal basis or Your consent.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access Our Service or parts of Our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
• Application refers to WhiteLeaf, the mobile software application provided by the Company.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to WhiteLeaf SmartCare (operating the WhiteLeaf application).
• Country / State refers to: Uttar Pradesh, India.
• Device means any device that can access the Service, such as a mobile phone, smartphone, or digital tablet.
• Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.
• Service refers to the Application and related website or customer portal services (https://whiteleafcare.com).
• Service Provider means any natural or legal person who processes data on behalf of the Company, including cloud hosting, payment gateway, messaging, mapping, analytics, and advertising measurement partners.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, screens viewed, button interactions, session duration, and diagnostic telemetry).
• User means any individual who accesses or uses the Service.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Information

Types of Data Collected

1. Personal Data & Account Information

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact, authenticate, or identify You and fulfill Your orders. This may include:

• Contact Info: Full name (first name and last name), mobile phone number, email address, and saved pickup/delivery physical addresses (street, landmark, city, state, postal code).
• Identifiers: Unique assigned customer/user ID (User ID) associated with Your Account.
• Purchase & Order History: Details of laundry, dry-cleaning, and shoe-care orders placed, service selections, item quantities, order values, timestamps, and payment status.
• Payment Information: Form of payment, transaction status, and payment reference identifiers processed securely through Our payment partner (Razorpay). We do not store raw credit/debit card numbers, CVV, or UPI PINs on Our servers.
• Customer Support Data: Information, issue descriptions, and correspondence You submit through in-app support tickets, feedback forms, or support emails.

2. Information Collected While Using the Application (Device Permissions)

While using Our Application, in order to provide core features of Our Service, We may collect, with Your prior permission:

• Precise Location: GPS coordinates and address location data used to check service availability in Your area, set pickup/delivery addresses on the map, and coordinate order pickups and deliveries.
• Camera & Photo Library: Pictures from Your Device's camera or photo library when You choose to upload or update Your profile photo.
• Push Notifications: Device notification tokens to send You order status updates, pickup/delivery reminders, and service announcements.

The information may be uploaded to the Company's servers and/or an authorized Service Provider's server, or stored locally on Your Device. You can enable or disable Location, Camera, Photo Library, and Notification permissions at any time through Your Device settings.

3. Usage Data, Identifiers, and Diagnostics

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), device model, operating system and OS version, app version, screens visited, in-app actions (such as adding items to cart, initiating checkout, completing a purchase, logging in, or signing up), timestamps, unique device or app instance identifiers (Device ID, such as IDFV or Firebase installation IDs), crash logs (Crash Data), app performance metrics (Performance Data), and other technical diagnostic data.

Third-Party Analytics, Advertising Measurement, and Tracking Technologies

We use third-party Software Development Kits (SDKs) and tracking technologies within the WhiteLeaf Application to monitor app reliability, understand product interaction, process payments, provide maps, and measure the effectiveness of Our advertising campaigns:

Third-Party Service / SDK	Purpose	Data Categories Processed
Google Analytics for Firebase (GA4)	App analytics, feature adoption, funnel analysis, and performance monitoring	User ID, Device/App Instance ID, Product Interaction events (screen views, cart, checkout, login, signup), Purchase History (order ID, amount, currency), Crash & Performance Data
Meta (Facebook) SDK & App Events	Advertising campaign measurement, conversion attribution, and Return on Ad Spend (ROAS)	Device Advertising Identifier (IDFA on iOS when permitted; Android Advertising ID), User ID, Product Interaction events (content views, add to cart, checkout), Purchase History
Firebase Cloud Messaging (FCM)	Delivering push notifications for order updates and service alerts	Device/Installation ID, Push Token, Diagnostic Data
Google Maps Platform	Map rendering, address search, and pickup/delivery location pinpointing	Precise Location, Device ID, Product Interaction, Crash & Performance Data
Razorpay	In-app online payment processing and fraud prevention	Name, Email, Phone Number, Payment Info, Device ID, Product Interaction, Crash & Diagnostic Data

iOS App Tracking Transparency (ATT) & Your Tracking Choices

On iOS devices, WhiteLeaf complies with Apple's App Tracking Transparency (ATT) framework. Before accessing Your device's advertising identifier (IDFA) or sharing usage and purchase events with Meta (Facebook) for cross-app or cross-website advertising measurement, the Application presents Apple's system permission prompt asking whether You allow tracking.

• If You tap "Allow", the Meta SDK may collect Your Device's advertising identifier (IDFA) alongside app events (such as screen views, add-to-cart, checkout, purchase, and User ID) to measure ad performance and deliver relevant offers.
• If You tap "Ask App Not to Track" (or if tracking is disabled at the system level), We respect Your choice: IDFA tracking is disabled, and the Meta SDK is configured with advertiser tracking set to disabled. Core laundry pickup and delivery features continue to work normally.
• You can review or withdraw Your tracking consent at any time on iOS via Settings > Privacy & Security > Tracking, and on Android via Settings > Privacy > Ads (Reset or Delete Advertising ID).

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain Our Service: including order scheduling, garment pickup and delivery, live order tracking, and monitoring app stability and performance.
• To manage Your Account: to verify Your phone number via OTP, manage Your registration, and enable access to registered user functionalities.
• For the performance of a contract: the processing, fulfillment, billing, and refund handling of laundry, dry-cleaning, shoe-care, or subscription services You purchase through the Service.
• To contact You: via SMS, telephone calls, email, or mobile push notifications regarding OTP authentication, order confirmations, pickup/delivery updates, customer support, or security alerts.
• To send promotional communications (where permitted): to provide news, special offers, and discounts similar to services You have purchased or inquired about, only where permitted by law and with opt-out options available at any time.
• To manage Your requests: to attend to, investigate, and resolve customer support tickets, order disputes, and feedback.
• For analytics and advertising measurement: to analyze usage trends, improve app UX, measure marketing campaign effectiveness, and evaluate advertising ROI/ROAS (subject to ATT consent on iOS).
• For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganization, or sale/transfer of assets where user data is among transferred assets.

Sharing of Your Personal Data

We do not sell Your personal information to data brokers. We may share Your Personal Data only in the following situations:

• With Service Providers: with delivery personnel and laundry fulfillment partners to complete pickups/deliveries, and with technology, cloud hosting, SMS/OTP, payment (Razorpay), mapping (Google Maps), analytics (Google Analytics for Firebase), and ad measurement (Meta SDK, subject to Your tracking consent) partners acting under confidentiality obligations.
• For business transfers: in connection with or during negotiations of any merger, sale of Company assets, financing, or acquisition.
• With Affiliates: with Our parent or affiliated companies, which are required to honor this Privacy Policy.
• For legal compliance: when required by law, court order, or valid governmental request, or to protect safety, prevent fraud, and enforce legal rights.
• With Your consent: for any other disclosed purpose with Your explicit consent.

Text Messages (SMS) Privacy Notice

When You provide Your phone number to create an Account or opt in to SMS communications, We may send SMS messages for OTP login authentication, order and delivery status updates, customer support, security alerts, and (where permitted) promotional offers.

Phone numbers and SMS consent records are never sold or shared with unaffiliated third parties for their own marketing purposes; they are shared only with messaging infrastructure Service Providers technically required to deliver text messages. You may opt out of promotional messages at any time by replying STOP or contacting Us.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, to fulfill orders, resolve disputes, prevent fraud, and comply with legal or tax obligations:

• Account Information: retained for the duration of Your active Account relationship plus up to 24 months after account closure to handle post-termination issues, refunds, or disputes.
• Order & Transaction Records: retained as required by applicable tax, accounting, and statutory compliance laws.
• Customer Support Data: support tickets and correspondence retained up to 24 months from ticket closure for follow-up, quality assurance, and legal defense.
• Usage & Analytics Data: retained for up to 24 months (or per configured Google Analytics / Meta retention schedules) for product improvement, troubleshooting, and security monitoring, after which it is deleted or anonymized.

Residual copies in encrypted system backups are retained on a limited schedule until overwritten. Anonymized or aggregated statistical data that cannot be linked back to You may be retained indefinitely.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices in India and on secure cloud servers operated by Our Service Providers (including Google and Meta infrastructure, which may be located outside Your state or country). We take reasonable technical and contractual safeguards to ensure Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data & Account Deletion

You have the right to access, update, correct, or request deletion of the Personal Data We have collected about You.

• You can update Your profile details and saved addresses directly inside the WhiteLeaf application.
• You can request account deletion directly through the Application settings, via Our dedicated account deletion page at https://whiteleafcare.com/delete-account, or by emailing Us at support@whiteleafcare.com.
• Upon verification, We will delete or anonymize Your personal data unless retention of specific records is strictly required by law (such as statutory billing/tax records).

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement & Other Legal Requirements

Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect Company rights or property, investigate fraud or wrongdoing, or protect the personal safety of Users or the public.

Security of Your Personal Data

We implement commercially reasonable technical and organizational security measures (including encrypted HTTPS/TLS transmission and access controls) to protect Your Personal Data against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the Internet or electronic storage is 100% secure, and We cannot guarantee absolute security.

Children's and Minors' Privacy

The Service is not directed to, and We do not knowingly collect Personal Information from, anyone under the age of 16 (or the applicable age of digital consent under local law, such as 18 in India without parental consent). If You are a parent or guardian and believe Your child has provided Us with Personal Information, please contact Us immediately so We can remove such information from Our servers.

Links to Other Websites

Our Service may contain links to external websites or content (such as service articles or payment portals) that are not operated exclusively under Our control. We encourage You to review the privacy policy of every third-party service You interact with.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any material changes by posting the updated Privacy Policy on this page, updating the "Last updated" date at the top, and/or providing notice within the WhiteLeaf Application or via email prior to the change taking effect.

Contact Us

If You have any questions, privacy requests, or concerns about this Privacy Policy, You can contact Us: