Oppidu

Privacy Policy

Effective date: 19 August 2026 Last updated: 30 September 2026

This policy describes how the Oppidu mobile application handles information. It is written from the application's actual behaviour and describes only what the software does today.


1. About Oppidu and who operates it

Oppidu is a mobile application that helps you compare grocery, food-delivery and ride options across services you already use, and lets signed-in users read and share community reviews.

In this policy, "Oppidu", "we", "us" and "our" refer to the operator of the Oppidu service, identified below.

Operator / Service Provider

Praveenkumar Mohan Cloudzigs Technologies 6/99, Indian Colony, Magudanchavadi, Salem – 637103, Tamil Nadu, India Email: cloudzigs51@gmail.com

Oppidu is operated by Praveenkumar Mohan under the business name Cloudzigs Technologies. Oppidu is published on Google Play under the developer name Cloudzigs.

For the purposes of India's Digital Personal Data Protection Act, 2023, the operator named above is the Data Fiduciary for the information described in this policy, and the email address above is the grievance contact.

2. Scope

This policy covers the Oppidu Android application and the Oppidu backend service at https://api.oppidu.in. Oppidu is currently offered in India only.

It does not cover the third-party grocery, food-delivery and ride services you connect through Oppidu. When you sign in to one of those inside the app, you are dealing with that company under its own terms and privacy policy. Section 6 explains why that distinction is technical, not just legal.

3. Who may use Oppidu

Oppidu is intended for people aged 18 or over. It is not directed at children and is not a children's app. We do not knowingly collect information from anyone under 18. The app does not verify your age; using Oppidu is your confirmation that you meet this requirement.

4. Information we collect

4.1 Account information

4.2 Approximate location

When the app reports a problem it hit with a provider, it includes:

The more precise position the app uses on your device to search providers is not transmitted. Only the rounded value leaves your phone.

Separately, when you type a place name to set your delivery location, that text is sent to OpenStreetMap's search service — see §7.3.

Community (§4.9) uses the area of the location you have set in the app — a pincode-level area or locality, and its city: the app sends it to our server to choose the posts shown to you, and posts you publish are filed under it. Precise coordinates are not sent for this.

4.3 Installation identifier

A random identifier created when you install the app. It is not your device's serial number, IMEI or advertising ID, and reinstalling produces a new one. It lets us tell "this failed 50 times on one installation" from "on 50 different installations". When you are signed in, it is linked to your account.

4.4 Device and app information

App version, operating system and version, device model, and the versions of Oppidu's internal provider components.

4.5 Diagnostics, events and reports

Counts, durations, error codes, redacted URLs and headers, and warning/error log entries — metadata describing what the app did, not the content it handled. These are stored against your account.

4.6 Report an issue (content you write)

If you use Report an issue, the description you type is sent to us with the diagnostic information above. Because it is free text, its contents are up to you. Please do not include information you would not want us to hold, or another person's personal information.

4.7 Usage analytics and crash reports (Google Firebase)

The app records that certain things happened — a screen was opened, a search was run, a store was connected — together with crash reports when it stops unexpectedly. This is processed by Google; §7.6 sets out exactly what is and is not included. Your search text is not part of it.

4.8 Grocery and food requests you type or speak

When you use the guided Groceries or Food experience, the words you type into the app's text box (and, if voice input is added later, the transcript of what you say) are sent to our own server so that we can work out what you mean — for example that "show only butter flavoured" is a filter on the popcorn you are already looking at, not a new item, or that "show cheaper" while you are looking at a restaurant asks for cheaper restaurants like it. Alongside the words, the app sends only short labels about your session: the dishes or products you asked for in your own words, whether you are looking at a restaurant, how many restaurants you have selected, and the filters you set. It never sends the names of restaurants or stores, prices, results, your location or any sign-in details. Our server returns a short structured instruction to the app and keeps nothing: the text is processed in memory, is not stored in any database, is not written to logs (only its length and the kind of instruction it produced are recorded, against a request id), and is not sent to any third party or any AI service outside Oppidu. The actual searching of grocery stores and restaurants still happens on your phone, as described above. This processing takes place in India (Mumbai region).

4.9 Community reviews (content you post)

Community lets signed-in users review apps, products, restaurants, dishes and rides (and, once that feature is switched on, Instagram sellers — §4.11), comment on and reply to posts, like posts, report posts and comments, and block other users. Before your first post, comment or photo, the app asks you to accept our Terms & Conditions, including the community rules (Terms §8A); that acceptance is remembered on your device for your account and is not sent to us. When you use Community, we store:

Who can see it. Community is available only to signed-in Oppidu users. A published post is shown to users looking at the same area, or, when their area has no posts yet, to users across the same city. Reviews of Instagram sellers, once switched on, are the exception: they are shown to all signed-in users (§4.11). It shows its rating, text, subject, the date of the experience, the date it was posted (and edited, if it was), the area or city name, for a ride the pickup and drop area names, its published photos, its numbers of likes and comments, and your display name — or "Oppidu user" if your account has none. Your comments and replies are shown the same way, to users who can see the post. Your email address, your user ID and the exact time of posting are never shown. Other users are not shown who reported a post or whom you have blocked.

Checks before publication. Before a post or comment is shown to anyone else, our server checks its text automatically, using rules that run on our own server; the text is not sent to any outside service for this check. A post or comment that passes is published. One that fails is shown only to you, with the reason, and you can edit or delete it. One the check cannot decide is held and is not shown to others until we review it. An edited post is checked again; if the new text does not pass, the edit is refused and the published version stays. Reports from three different users normally hide a post or comment automatically until we review it. We may read posts and comments that are held, reported or hidden to decide whether to publish, restore or remove them.

Please post only your own experience, and do not include your own or anyone else's contact details or other personal information.

4.10 Community photos

Photo sharing is not switched on yet. When it is, you will be able to add up to four photos to a post, and they will be handled as follows:

4.11 Reviews of Instagram sellers

Reviews of Instagram sellers are not currently enabled. When they are, you will be able to review an Instagram business or creator account, and it will work as follows:

5. Information we do not collect

The following are not transmitted to Oppidu. These are properties of how the app is built, not merely of our intentions:

6. How Oppidu works, and why it matters here

Oppidu searches providers on your device. When you connect a store, you sign in to that store inside a web view on your phone, and the resulting session stays there. Searching, reading results and repeating requests all happen locally, from your phone to the provider directly — those requests do not pass through Oppidu's servers.

The consequence is that our servers never see your provider accounts, their contents, or what you searched for at a provider.

What our servers do handle is listed in §4: your Oppidu account, diagnostics about failures, the grocery and food requests described in §4.8, and the community content you choose to post.

7. Third-party services

7.1 Amazon Web Services (AWS)

Oppidu runs on AWS in the Asia Pacific (Mumbai) region. AWS processes data on our behalf as our infrastructure provider, for:

Oppidu has opted out, for its AWS account, of AWS AI services — including Amazon Rekognition — storing or using the content they process to improve AWS's own services (for example, for model training). Oppidu itself does not use your posts, comments or photos to train any AI model.

7.2 Google Maps (Google LLC)

The app shows a map when you set your delivery location. Google receives the information necessary to serve that map. Subject to Google's own privacy policy and terms.

7.3 OpenStreetMap / Nominatim

When you search for a place by name ("Chennai Airport"), that search text is sent to Nominatim, the OpenStreetMap Foundation's free geocoding service, which returns matching places. The request includes a contact address identifying Oppidu, as that service's usage policy requires. Subject to the OpenStreetMap Foundation's privacy policy.

7.4 Google Play Services (geocoding)

The app uses Android's built-in geocoding to turn a coordinate into an address and vice versa. On Android devices this is provided by Google Play Services and is subject to Google's privacy policy.

7.5 Providers you connect

The grocery, food and ride services you sign in to. Oppidu does not share your information with them; you interact with them directly from your device, under their terms.

7.6 Google Firebase (Analytics and Crashlytics)

Oppidu uses Firebase Analytics to understand how the app is used, and Firebase Crashlytics to find out when and why it crashes. Both are provided by Google LLC and are subject to Google's privacy policy.

What is sent:

What is never sent to Google:

7.7 Instagram (Meta Platforms)

Once reviews of Instagram sellers are switched on (§4.11), our server will send the Instagram username being looked up to Instagram's Business Discovery service, operated by Meta Platforms, which returns the account and post details listed in §4.11. No information about you is sent. Instagram is subject to Meta's own terms and privacy policy. Oppidu is not affiliated with, endorsed or sponsored by Instagram or Meta.

There are no other third-party services. Oppidu contains no advertising or attribution SDK.

8. How we protect information

9. Data retention

Some information has a fixed retention period; the rest is kept until you delete it or delete your account, at which point §10 applies. To be precise rather than reassuring:

If we introduce or change a retention period, this section will be updated before it takes effect.

10. Deleting your account and your data

You can delete your Oppidu account from inside the app: Profile → Delete account. You will be asked to confirm twice, including typing DELETE, because it cannot be undone.

Deleted immediately, in a single database transaction:

Photo files. Photo sharing is not switched on yet, so no community photo files are stored today. Once it is, the files of your photos will be deleted from storage by a background clean-up process after your account is deleted; we do not promise a time for that clean-up. From the moment your account is deleted, the photos cannot be viewed through Oppidu, and a temporary viewing link issued before that stops working within 15 minutes. Until the clean-up has run, the files remain in private storage.

Apart from that photo clean-up, there is no queue and no waiting period on the application side. Backups taken before deletion may retain copies until those backups expire or are deleted (§9).

The same applies when you delete a single post or comment: it is removed at once, together with the comments and replies under it. For a post, the files of its photos are then deleted by the same background clean-up process.

Retained, and why:

Diagnostic records uploaded by older app versions carry no account link and cannot be associated with you; they are unaffected by account deletion.

If you cannot access the app, email cloudzigs51@gmail.com from the address on the account. We will verify the request and delete the account within 30 days. See https://oppidu.in/account-deletion.

11. Location permission

Oppidu asks for location permission so it can set your delivery location, which providers need to return correct prices and availability. It is requested when you use that feature, not at launch, and you may decline — the app still works, and you can set your location by searching or by choosing a point on the map instead.

Oppidu requests foreground location only. It does not request background location and cannot access your location while it is not in use.

12. Children's privacy

Oppidu is intended for users aged 18 and over and is not a children's app. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact cloudzigs51@gmail.com and we will delete it.

13. Where data is processed

Oppidu's servers, database and photo storage run in AWS's Asia Pacific (Mumbai) region, in India. Once photo sharing is switched on, photos will be checked by Amazon Rekognition in the same region. Oppidu is currently offered in India only, so information we hold is processed in the same country in which it is collected. If we launch in other countries, this section will be updated before we do.

The one exception is the analytics and crash reporting described in §7.6: Google processes that data on its own global infrastructure, which may include servers outside India, under Google's privacy policy. Once reviews of Instagram sellers are switched on, the username being looked up is also sent to Meta (§7.7), which may process it outside India.

14. Your rights

Under India's Digital Personal Data Protection Act, 2023, you may:

Some of these you can do yourself in the app: change your display name in your profile, edit or delete your community posts, delete your comments and replies, remove your photos, and delete your account (§10). To exercise any of these rights, contact cloudzigs51@gmail.com. We will respond within 30 days.

15. Changes to this policy

We will update this policy when the app's behaviour changes, and revise the "Last updated" date. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.

16. Contact

For any question about this policy, your information, or to exercise the rights in §14, contact Oppidu at cloudzigs51@gmail.com.

Operator / Service Provider

Praveenkumar Mohan Cloudzigs Technologies 6/99, Indian Colony, Magudanchavadi, Salem – 637103, Tamil Nadu, India Email: cloudzigs51@gmail.com

Oppidu is operated by Praveenkumar Mohan under the business name Cloudzigs Technologies. Oppidu is published on Google Play under the developer name Cloudzigs.