Privacy policy

SavEdge is run by NHP Technology Private Limited, a company registered in India (CIN [To fill: CIN]), with its registered office at [To fill: registered office address]. In this policy, “SavEdge”, “we” and “us” mean NHP Technology Private Limited.

For your personal data, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”): we decide why and how it is used, and we are responsible for protecting it.

This policy applies when you use any part of SavEdge:

• the SavEdge app for members (Android and iOS);
• the SavEdge Vendors app for partner shops;
• the company portal (org.savedge.in) that employers use;
• this website, savedge.in, and messages we send you.

Brands whose gift cards you buy, and shops you visit, have their own privacy policies for what they do with your data. We link to them where it matters.

Information you give us

• Account details: your name, mobile number, and if you add them, email address, gender, date of birth and address.
• Your city, so we can show shops near you. The app does not track your GPS location.
• Things you post: ratings and reviews of shops, and messages you send our support team (in the app, by email, on WhatsApp or through our contact form).
• Shop partners also give us business details: business name, address, photos, GST and PAN numbers, and the details we need to settle payments with you.

Information created when you use SavEdge

• Your membership plan, free trial, offers you save, redeem or gift, and the savings we calculate from them.
• Gift card orders, and the card codes issued to you.
• Your points: what was added, when it expires, and bills you paid with points at partner shops.
• Payments and invoices: amount, date, status and the reference from our payment partner.

Information from your employer

If your company uses SavEdge to reward its people, it may add you with your name, mobile number, email, employee ID, department, date of birth and date of joining (used for birthday and work-anniversary rewards), and the points it gives you.

Information from your device

• Device model, operating system, app version and a notification token, so we can send you push notifications.
• An anonymous install ID, so we can count installs — it isn’t linked to you until you sign in.
• IP address and technical logs when the app talks to our servers, kept for security and fixing problems.
• Your camera, only while you scan a shop’s QR code. We don’t keep the camera image, and photos you upload as a shop partner are the only pictures we store.

What we don’t collect

We never see or store your full card number, CVV, UPI PIN or net banking password — Razorpay handles those. We don’t read your contacts, messages or photos, and we don’t track your location in the background.

• To create your account and sign you in with a one-time code (OTP) sent to your phone.
• To show offers in your city, let you redeem them, and keep count of what you save.
• To take payments for memberships, gift cards and packages, and to issue invoices.
• To deliver gift cards you buy, through our gift card partner.
• To run your employer’s rewards programme: credit your points, let you spend them, and expire them on time.
• To pay partner shops for bills settled with points, and to send them reports.
• To send you service messages (OTPs, receipts, expiry reminders) and, if you allow it, offers and news.
• To answer your questions and handle complaints.
• To keep SavEdge safe: stop fraud and misuse, and protect members, shops and companies.
• To understand how SavEdge is used, in aggregate, so we can make it better.
• To meet our legal duties, like keeping tax records and responding to lawful requests.

We do not sell your personal data, and we don’t use it to show you third-party advertising.

When you sign up, we ask for your consent to use your personal data for the purposes above. Some uses don’t need consent under the DPDP Act — for example, data you share for a purchase you asked for, or what the law requires us to keep.

• Messages: turn push notifications, SMS, WhatsApp and email on or off any time in Profile → Notifications. You’ll still get messages we must send, like OTPs and receipts.
• Withdrawing consent: you can withdraw your consent at any time by deleting your account or writing to us. That stops future use; it doesn’t undo what was done before, and some features may stop working.

We share only what each party needs, and only for the reasons below.

• Partner shops see your first name and last initial, the offer you redeemed or the bill you paid with points, and the time. They don’t get your phone number or email from us.
• Your employer (only if it enrolled you) sees whether you’ve joined, the points it gave you and how they were used, and summaries such as offers redeemed and money saved. It never sees your payment details or the gift card codes you hold.
• People you choose, such as a colleague you gift an offer to.

Trusted service providers process data for us, under contract, and only on our instructions:

We may also share data when the law requires it — for example with government agencies or courts under a valid legal order — or to protect the rights and safety of SavEdge, our users or the public. If SavEdge is merged or sold, your data may move to the new owner, who must keep honouring this policy.

Our servers and database are in Bengaluru, India, with DigitalOcean. Two things are kept outside India: images used in the apps (shop photos, logos and banners) in the United States, and daily database backups in the United Kingdom. Our providers may also process data in other countries to deliver their service.

We only transfer data to countries the Government of India has not restricted under the DPDP Act, and we require the same level of protection wherever it goes.

When we no longer need data, we delete it or make it anonymous so it can’t be linked back to you.

• All traffic between the apps, the website and our servers is encrypted (HTTPS/TLS).
• Sign-in uses one-time codes, and sessions use short-lived, signed tokens.
• Our database runs on its own server, separate from the apps, and backups are kept in a private store.
• Only the people who need personal data to do their job can reach it.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires, and explain what we’re doing about it.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we use it, and who we’ve shared it with.
• Correct and update it — most of it you can edit in Profile in the app.
• Erase it, unless we must keep it by law.
• Withdraw consent at any time.
• Nominate someone to exercise these rights for you if you die or can’t act yourself.
• Complain to our Grievance Officer, and then to the Data Protection Board of India if you’re not satisfied.

Write to privacy@savedge.in from the email or phone number on your account. We may ask you to confirm it’s you, and we’ll reply within 30 days.

In the app, go to Profile → Delete account. We close your account straight away, remove your phone number and email from it, and sign you out on every device. Unused points and membership time are lost.

We keep the records the law makes us keep (payments, invoices and points transactions) for the periods above, without your contact details. If you also run a shop or a company account, those stay open until you close them separately. More on deleting your account.

SavEdge is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has given us their data, write to privacy@savedge.in and we’ll delete it.

This website doesn’t use advertising or tracking cookies. The apps store your sign-in session securely on your device so you don’t have to sign in every time; signing out removes it. If we add analytics in future, we’ll update this section first.

When we change this policy we’ll update the date at the top. If a change matters — for example a new use of your data — we’ll tell you in the app or by message before it takes effect, and ask for your consent again where the law needs it.

Questions about this policy or your data: privacy@savedge.in.

Grievance Officer
[To fill: full name], NHP Technology Private Limited
[To fill: grievance email, e.g. grievance@savedge.in] · [To fill: phone]
[To fill: postal address]

We acknowledge complaints within 24 hours and resolve them within 15 days. If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.