Regulatory & Data Safety

Privacy Policy

Effective Date: September 26, 2026 • MillWheel Customer Application (com.fresit.millwheel.customer)

1. Overview & Scope

This Privacy Policy describes how MillWheel collects, uses, stores, and protects personal information obtained through our customer mobile application (MillWheel Customer App, package com.fresit.millwheel.customer) and our website at millwheel.in.

MillWheel is a platform operated by Fresit Private Limited.
Platform Operator / Data Controller: Fresit Private Limited (CIN: U47912BR2026PTC082257).

We are committed to user privacy and full compliance with the Google Play Developer Program Policies, the Information Technology Act (India), and prevailing data protection principles.

2. Information We Collect

The MillWheel Customer App collects only the minimal data necessary to provide grain milling and doorstep delivery services:

  • Personal Identifiers: Your name, mobile telephone number, and optional email address when you create an account or authenticate via SMS OTP.
  • Delivery Addresses & Foreground Location: When you add or select a delivery address, the app requests on-demand foreground location permission (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) to accurately pinpoint your doorstep and verify mill service coverage. We do NOT track or collect background location coordinates. Location is accessed strictly while you are actively using the address picker.
  • Orders & Service Preferences: Grain types (e.g., wheat, mustard, besan), quantities, custom milling texture instructions, delivery time slots, and order history.
  • Payment Information: Transaction identifiers and payment status provided by RBI-authorized payment gateways. We do NOT collect, process, or store credit card numbers, debit card numbers, or UPI PINs on our servers.
  • Device & Notification Tokens: Firebase Cloud Messaging (FCM) tokens required to deliver real-time order status updates, dispatch alerts, and service announcements.

3. Permissions We Request

The MillWheel Customer App requests only the following permissions:

  • Internet Access (INTERNET, ACCESS_NETWORK_STATE): To communicate securely with our production API servers (https://api.millwheel.in/api/v1).
  • Location Access (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Foreground-only access used exclusively when you choose your delivery address on the interactive map.
  • Push Notifications (POST_NOTIFICATIONS): To send order updates (e.g., "Grain collected", "Milling in progress", "Out for delivery").
  • Vibration (VIBRATE): For tactile feedback during notifications.

No Camera, Microphone, or Storage Access: The MillWheel Customer App does not request camera, audio recording, contacts, or external storage read/write permissions.

4. How We Use Your Data

  • To schedule grain pickup, process custom flour milling, and complete doorstep delivery.
  • To generate digital invoices and maintain transaction records required by statutory law.
  • To dispatch SMS and push notifications about order milestones.
  • To provide customer support and resolve order inquiries.
  • We NEVER sell, rent, or trade your personal data to third-party advertisers or data brokers.

5. Data Sharing & Third Parties

We share customer data only as essential for service fulfillment:

  • Assigned Delivery Partners: Customer address and contact number are provided to the designated rider strictly during the active delivery window.
  • Payment Processors: Encrypted transaction requests sent to licensed payment gateways.
  • Infrastructure & Push Providers: Encrypted network transit via Google Cloud / Firebase for notification dispatch.
  • Legal Authorities: Only when legally compelled by court orders or Indian regulatory authorities.

6. Account Deletion & Data Erasure

MillWheel provides simple, transparent account and data deletion mechanisms in full compliance with Google Play Data Safety policies:

  • In-App Deletion: You can delete your account directly inside the Customer App by navigating to Profile > Delete Account and confirming the prompt.
  • Web Portal Deletion: You can also submit an erasure request at any time via our web deletion portal at millwheel.in/delete-account.html or by emailing [email protected].

What happens when you delete your account:

  • Your account is immediately deactivated and active authentication / refresh tokens are revoked.
  • Push notification device tokens and shopping cart items are permanently purged.
  • Personal identifying information (first name, last name, profile photo) is anonymized.
  • Tax, invoicing, and order records are retained strictly for the statutory period required by Indian tax legislation (Companies Act / GST Regulations) and cannot be used for any other purpose.

7. Data Security & Encryption

All communication between the MillWheel mobile app and our servers is encrypted in transit using industry-standard TLS 1.3 / HTTPS. User credentials and sensitive authentication parameters are hashed using salted bcrypt algorithms. We employ strict role-based access control (RBAC) to ensure only authorized personnel have access to operational data.

8. Contact Us & Grievance Officer

For privacy inquiries, data access requests, or grievance redressal, please contact:

MillWheel Privacy & Data Support
Platform Operator: Fresit Private Limited
CIN: U47912BR2026PTC082257
Registered Office: C/o Shailendra Singh, Bijauli Road, Near Bandhan Resort, Bajauli, Aurangabad, Bihar, India – 824102
Email: [email protected] / [email protected]
Website: https://www.millwheel.in/ | Legal Information