PRIVACY POLICY – OK Sales App

App: OK Sales App (com.sales.onekiraana)
Provided by: PRPM Services Private Limited, operating as OneKiraana
Last updated: 2 October 2026

1. About this app and who it is for

OK Sales app is a work application for Salesman employed by OneKiraana. Salesman sign in with an account issued to them by OneKiraana, can see their monthly targets, onboard new stores, place order for existing stores and mark collections.

The app is not intended for use by the general public and is not intended for anyone under the age of 18. We do not knowingly collect data from children.

This policy explains exactly what personal data the app accesses, collects, uses, shares, and stores.

2. Data we collect

2.1 Location (precise, including in the background)

The app accesses and collects precise location (GPS) data from your device.

What we collect. Precise geographic coordinates (latitude and longitude), the time at which each reading was taken, and the identifiers of the delivery orders that were active at that time.

Why we collect it, and how it is used. We use precise location for the following purposes, and no others:

  • Live tracking. So that OneKiraana can track the stores its salesman visits and the route it takes to optimise their performance.
  • Route records. To keep an operational record of the route taken for a working day, used for visit verification.

When we collect it. Location is collected only when you are signed in to the app and you have started your shift. While those conditions hold, the app takes a location reading approximately once every 60 seconds and sends it to OneKiraana’s servers.

Background collection. Collection continues while the app is in the background, minimised, or while your screen is off. This is necessary because a salesman travels to different stores throughout the day. Background collections helps the company understand how much time the salesman has spent on field. On Android, background collection runs as a foreground service, which means a persistent notification is shown in your notification tray for as long as tracking is active, so you can always tell when the app is collecting your location.

When collection stops. Location collection stops when you mark the end of your shift, when you sign out, and automatically at the end of a tracking session (a maximum of 12 hours after it began) if the app has not been reopened.

Offline behaviour. If your device has no network connection when a reading is taken, that reading is stored temporarily on your device and sent to our servers when connectivity returns, so that a stretch of a route through a dead zone is not lost.

We do not collect your location when you are signed out, when you are not an active shift, or after your shift has ended. We do not sell location data, and we do not use location data for advertising or profiling.

2.2 Account and identity data

  • Mobile number, submitted by you at the time of employment. This number is used to send OTP to log into the app
  • Your name, and the store you are assigned to, returned by our servers after a successful sign-in and shown to you inside the app.

Used solely to authenticate you, to keep you signed in, and to associate your deliveries with the correct rider and store.

2.3 Device identifier for push notifications

The app registers a push notification token (a Firebase Cloud Messaging registration token — a device identifier) with our servers. It is used only to deliver notifications about updates on registered comlaints. The token is deleted from our servers when you sign out.

2.4 Camera

The app requests permission to use your device’s camera during first-time setup, so that salesman can click pictures of damanged goods.

The app does not read, browse, or collect your existing photos, videos, or media library. Camera access is used only to capture a new image of damaged goods or board of a new store to be onboarded — and is transmitted to and stored on OneKiraana’s servers under the same 12-month retention period as other delivery records.

Camera images are never used for advertising, profiling, or facial recognition, and are never shared with third parties other than as described in section 4.

You can revoke camera access at any time in your device settings.

2.5 Data we do not collect

The app does not collect your photo or video library, contacts, files, messages, call logs, microphone audio, health data, or financial or payment information. It contains no advertising SDKs and no third-party analytics or behavioural tracking.

Calling a customer opens your phone’s own dialler with the customer’s number pre-filled; the app does not read your contacts and does not record calls.

3. How data is stored on your device

The app stores the following locally on your device: your session token, your name and assigned store details, your push notification token, and any location readings that are waiting to be uploaded. Signing out clears your session. Your session automatically expires 7 days after you sign in.

4. Who we share data with

We do not sell your personal data. We share it only as follows:

  • Google (Firebase Cloud Messaging) — receives your push notification token in order to deliver order notifications to your device. See Google’s privacy policy at policies.google.com/privacy.
  • Google Play Services — provides the location capability the app uses on Android.
  • Where the law requires it, or to establish, exercise, or defend legal claims.

Data is transmitted to our servers over encrypted HTTPS connections.

5. How long we keep data

  • Location and delivery records: retained for 12 months after the delivery, for delivery verification, dispute resolution, and payout reconciliation, after which they are deleted or anonymised.
  • Account data: retained for as long as your rider account is active with OneKiraana, and for 12 months afterwards.
  • Push notification token: deleted from our servers when you sign out.

6. Your choices and your rights

  • Withdrawing location access. You can revoke the app’s location permission at any time in your device settings (Settings › Apps › OK Deliveries › Permissions), or switch background access from “Allow all the time” to a narrower setting. Because delivery tracking is essential to the job the app performs, the app cannot assign or complete deliveries without precise location access.
  • Notifications. You can turn off notifications in your device settings, but you will not be alerted to newly assigned orders.
  • Access, correction, and deletion. You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by contacting us at the address below. We will respond within 30 days. Some data may need to be retained where we have a legal or contractual obligation to keep it.

7. Security

We protect your data using encrypted transport (HTTPS), authenticated API access with expiring session tokens, and access controls that limit rider accounts to only the data required for their own deliveries. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

8. Changes to this policy

If we change this policy we will update the “Last updated” date above and, where the change is significant, notify you in the app or by email. Continued use of the app after a change takes effect indicates acceptance of the updated policy.

9. Contact us

Questions about this policy or about your data:

PRPM Services Private Limited (operating as OneKiraana)
Plot No. C-107, TTC Industrial Area, Pawane MIDC Road
Pawane, Thane, Navi Mumbai 400705
Maharashtra, India

Email: bhavya.haria@onekiraana.com
Phone: +91 96193 05482
Website: onekiraana.com