Privacy policy
Effective from 5 November 2026
This policy explains how DevQuotient ("UrbanGreens", "we") handles your information when you use the UrbanGreens Mandi and UrbanGreens Farm apps, on Android or on the web. DevQuotient is a proprietorship owned by Arpit Sharma, and is the data fiduciary for this information under the Digital Personal Data Protection Act 2023. Registered office: Raipur, Chhattisgarh – 492013, India.
In short: other users see your username and the last 4 digits of your mobile number, never your full number, name or address. Our admin panel does not show asking prices, bids, order values or chat messages. We do not sell your data or show ads.
What we collect
- Mobile number: to sign you in with a one-time code.
- Profile: your username, whether you are a buyer or farmer, your state and district, and your language.
- Private details: your full name, and if you give them, your farm or business name and address. Other users never see these; our team can, for support and safety.
- Lots: the item, variety, grade, units, asking prices, harvest date, notes and the states and districts where you sell each lot you list.
- Bids and chats: your bids, with their price, quantity, unit and how often you want the item, and your counter offers and messages.
- Orders: the agreed price, quantity, how often the buyer plans to buy, status and any cancellation reason.
- Queries: what you write to our team, and their replies.
- Device token: in the Android apps, an identifier that lets us send notifications to your phone. The web apps do not send notifications.
- Safety records: how many times our filter hid contact details in your messages.
- Acceptance record: when you accepted our terms and this policy, and which version.
- Technical data: your IP address, used for security and to limit abuse.
If our team sets up your account: at your request, our team can create your account and enter your mobile number, full name, state and district, and any farm or business name and address you give us. No sign-in code is sent at that point. Our team can also list lots for a farmer, including the asking price. The first time you sign in, you choose a username if none was set, and accept our terms and this policy.
We do not collect your exact location, contacts, photos or payment details.
How we use it
- To sign you in and keep your account secure.
- To run listings, bidding, chats and orders.
- To send you alerts about bids, messages and orders.
- To enforce our terms of use and prevent abuse.
- To meet our legal obligations.
What other users can see
- Other users see your username, the last 4 digits of your mobile number, your state, district and number of deals closed. They never see your full mobile number, full name, business name or address. Until you choose a username, they see only the last 4 digits.
- An asking price is shown only to buyers whose bid on that lot is at least half of it.
- A bid is seen only by the farmer and the buyer who placed it.
- Other users cannot see a chat, only the buyer and farmer in it can. See below for what our team can reach. The app hides phone numbers and other contact details typed in chat.
What our team can see
Our admin panel shows account details including full mobile numbers, full names, business names and addresses, lot details without prices, order details without prices (item, quantity, how often and status), and the number of times contact details were hidden in a user's messages. Our team uses this for support and safety.
When our team lists a lot for a farmer, they enter its asking price, and the panel does not show it again afterwards. The admin panel does not show asking prices, bids, order values, chat messages or cancellation reasons. This information is still stored on our servers so the apps can work. We access it directly only when needed to keep the service secure and working, or when the law requires it.
If you raise a query in the app, our team reads what you wrote and replies to it. Do not put passwords or sign-in codes in a query.
Who we share data with
- OrionXConnect receives your mobile number and one-time code to send the sign-in SMS.
- Expo and Google Firebase receive your device token and the notification text to deliver alerts. Alerts do not contain prices or message text.
- Expo also delivers app updates. When the Android app checks for an update, Expo receives the app version, basic device details and your IP address. It receives none of your account details.
- Sentry receives crash reports when the app fails: the error, your device or browser and the app version. Reports do not include your mobile number or messages.
- Hosting and database providers store our data on our behalf.
- Authorities may receive information when the law requires it.
We do not sell your data or share it for advertising.
How long we keep it
- Sign-in codes expire after 5 minutes.
- Account information is kept until you delete your account.
- Queries you raise are kept until you delete your account, and are then removed.
- If our team deletes an account, lot or order, because it breaks our terms or because the person asked, it is removed permanently. The chats, bids and orders linked to it are removed too, for everyone in them, including the other person in a deal.
- After you delete your account, messages you wrote are removed. Order records, bids and offers stay available to the other person in that deal, under an anonymous name. See delete your account.
Security
Data travels over encrypted connections, sign-in codes are stored only in hashed form, and your session is stored securely on your phone. In the web apps, your session is kept in your browser's storage, so sign out on a shared computer. The web apps also store their own app files in your browser so they open faster; these files hold none of your data. No system is completely secure, so please keep your phone and SIM safe.
Your rights
You can view and update your profile, including your name and address, in the app, download a copy of your data from Account, and delete your account at any time. You can also ask us for a copy of your data by email, ask us to correct it, or raise a complaint by writing to [email protected]. We respond within 30 days and do not charge for a reasonable request.
Children
The apps are for people aged 18 or over. If you believe a child has created an account, please contact us and we will delete it.
Grievance officer
For a complaint, or anything about your personal data, write to our Grievance Officer: Arpit Sharma, DevQuotient, Raipur, Chhattisgarh – 492013, India. Email: [email protected]. We acknowledge within 24 hours and aim to resolve within 15 days.
Changes to this policy
We will update the date above when this policy changes, and tell you in the app about important changes.