DENDO

Last Updated: 11th July, 2026


Privacy Policy

DENDO, a registered partnership firm ("DENDO," "we," "our," or "us"), is committed to upholding the highest standards of data privacy and security. This Privacy Policy explains how we collect, process, use, and protect your personal information when you access or use DENDO's partner mobile applications and their associated services.

This single policy covers two separate DENDO partner apps. Where a practice applies to only one of them, it is clearly labelled:

VENDOR Dendo: Restaurant Partner — used by stores and restaurants to receive and fulfil customer orders (the "Vendor App").

RIDER Dendo Delivery Partner — used by delivery partners (riders) to accept, pick up, and deliver orders (the "Delivery App").

Sections without a tag apply to both apps.

By accessing or using either app, you acknowledge and consent to the practices described herein.


1. Information We Collect

To deliver and continuously improve our services, we collect the following categories of information.

1.1 Personal and Account Information — applies to both apps

1.2 Vendor-Specific Information VENDOR

1.3 Delivery-Partner–Specific Information RIDER

1.4 Order and Transaction Information — applies to both apps

1.5 Location Information

1.6 Device and Application Usage Information — applies to both apps

1.7 Photos and Camera — applies to both apps

1.8 Advertising and Marketing Data — applies to both apps


2. How We Use Your Information

DENDO processes your data solely for legitimate operational and service-related purposes, including:


3. How We Share Your Information

DENDO shares user information strictly on a need-to-know basis, solely to ensure seamless service delivery.

3.1 CustomersVENDOR Your store name, location, menu, and ratings are visible to customers placing orders. RIDER During an active delivery, your first name, approximate/live location, and contact channel may be shared with the customer so they can track and receive their order.

3.2 Between Vendors and Delivery Partners — To coordinate a pickup, the assigned delivery partner and the vendor are shared the order details and the relevant pickup/drop locations, and the delivery partner's live location is shared to enable real-time tracking.

3.3 Payment and Settlement Partners — Withdrawal, payout, and collected-cash settlement details are processed through Cashfree Payments, our payment partner, for secure processing. RIDER When you settle cash collected from customers, the settlement is initiated through Cashfree's supported methods (e.g., UPI, cards, net-banking, wallets); this is a settlement of collected cash and is distinct from a vendor payout.

3.4 Third-Party Service Providers — For push notifications (Firebase), SMS/email delivery, analytics, cloud hosting, and cybersecurity services, under strict confidentiality agreements.

3.5 Legal and Regulatory Compliance — We may disclose information when required by applicable law or to protect the rights, safety, and interests of users and DENDO.

3.6 Advertising and Measurement Partners — We use the Meta (Facebook) SDK and similar advertising tools to measure the performance of our marketing campaigns and to attribute app installs and in-app events. For this purpose, limited data — such as your device advertising identifier and app-event data — may be shared with Meta Platforms, Inc. This data is used to measure advertising effectiveness and, where permitted, to deliver more relevant advertising. On iOS, this tracking only occurs if you grant permission through Apple's App Tracking Transparency prompt (see Section 3.7).

3.7 App Tracking Transparency and Your Choices — On iOS devices, the app will ask for your permission before using your device advertising identifier to track your activity across other companies' apps and websites, in accordance with Apple's App Tracking Transparency framework. You may decline, and you can change your choice at any time under Settings → Privacy & Security → Tracking. On Android, you can reset or limit ad personalisation through your device's Google settings.

DENDO does not sell or rent your personal data. Except for the limited advertising and measurement data described in Section 3.6, we do not share your personal data with third parties for their own independent marketing purposes.


4. Data Security

DENDO employs industry-standard security measures to safeguard your personal information, including encryption in transit (HTTPS/TLS), secure and certified server infrastructure, strict role-based access controls, and periodic security audits and vulnerability assessments.

While we implement robust protective measures, no method of electronic transmission or storage is entirely infallible. DENDO cannot guarantee absolute security against all potential threats.


5. Permissions Used by These Applications

Each app requests only the permissions it needs for its core functionality.

5.1 INTERNET — both apps — Required to communicate with DENDO servers to send and receive order data, update status, and sync information.

5.2 ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION

5.3 CAMERA / Photo Library access — both apps — Used only when you choose to add or change a profile picture, and RIDER to upload identity / eligibility document images during verification. Only the image you explicitly select or capture is uploaded.

5.4 BLUETOOTH / BLUETOOTH_ADMIN / BLUETOOTH_CONNECT / BLUETOOTH_SCAN VENDOR — Used to discover and communicate with Bluetooth-enabled thermal receipt printers, so vendors can print order tickets directly from the app when an order is accepted. No Bluetooth data is transmitted to DENDO servers; communication is strictly between the device and the paired printer.

5.5 FOREGROUND_SERVICE / FOREGROUND_SERVICE_DATA_SYNC / FOREGROUND_SERVICE_LOCATION — Used to run a persistent service while you are active: VENDOR the dataSync service that listens for incoming orders while your store is Open, and RIDER the location service that keeps your live location updating while you are on an active delivery. See Section 6 for the full disclosure required by Google Play's Foreground Services policy.

5.6 FOREGROUND_SERVICE_REMOTE_MESSAGING — Required by Firebase Cloud Messaging (FCM) to deliver high-priority data-only push notifications for new orders and delivery assignments when the app is in the background or the device screen is off. Without this permission, FCM notifications may be delayed or dropped on Android 14+ devices, causing missed orders or assignments.


6. Foreground Services — Full Disclosure

This section provides the complete disclosure required by Google Play's Foreground Services policy. Both DENDO partner apps use Android Foreground Services, and in both cases the service starts only as a result of an explicit action you take and is always visible via a persistent notification.

6.1 VENDOR Order-Listening Service (dataSync)

When it starts (user-initiated): The service starts only when the vendor opens the app with store status set to Active / Open, or taps the "Open" toggle to begin accepting orders. It is never started automatically without the vendor's action.

What it does: While the store is Open, the service runs a periodic heartbeat to check for new incoming orders delivered by FCM, triggers a high-priority alert when a new order arrives, and keeps the order dashboard accurate in real time. It collects no data beyond what is necessary to display the current order queue.

Location: This vendor service does not collect or transmit device location. It also does not access the microphone, camera, contacts, or SMS.

Persistent notification: While active it shows a non-dismissable notification reading "Dendo Store is active — Listening for new orders."

How to stop it: Tap "Close" or "Busy" on the Store Status screen, or close/force-stop the app. This immediately stops the service and removes the notification.

6.2 RIDER Live-Location Service (location)

When it starts (user-initiated): The service starts only when the delivery partner goes online / on duty or accepts a delivery within the app. It is never started automatically without the delivery partner's action.

What it does: While you are on duty / on an active delivery, the service collects your precise device location on a recurring basis and transmits it to DENDO servers. This location is used to: assign nearby orders to you; display your live location to the customer and the vendor for order tracking; compute and update delivery ETAs; and verify that pickup and delivery occurred. This is the core purpose of the Delivery App.

Persistent notification: While active it shows a non-dismissable notification indicating that DENDO is using your location for active deliveries, so you always know location sharing is on.

How to stop it: Go offline / off duty in the app, complete or cancel your active delivery, or close/force-stop the app. Going offline stops location collection and removes the notification. When you are offline and have no active delivery, the app does not collect your location.

6.3 Impact of Service Interruption: If the relevant foreground service is stopped while you are active, the vendor may miss incoming orders, or the delivery partner's live tracking and order assignment may pause — which can lead to cancellations, reduced ratings, and lost earnings. You retain full control over the service at all times as described above.


7. Your Rights as a User

As a vendor or delivery partner on the DENDO Platform, you are entitled to request access to your personal data held by us, rectify inaccurate or incomplete information, request deletion of your account and associated data, and restrict specific categories of data processing.

To exercise any of the above rights, please contact us at: support@dendo.store


8. Data Retention

DENDO retains your personal data for the duration your account remains active, or for as long as required to fulfil legal, tax, and business obligations. RIDER Precise live-location records are retained only for as long as needed to operate the delivery, provide order tracking, and resolve any related disputes or settlement questions, after which they are deleted or irreversibly anonymised. Upon expiry of the applicable retention period, data is securely deleted or anonymised.


9. Children's Privacy

DENDO's services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. Should we become aware that such data has been inadvertently collected, it will be deleted without delay.


10. Third-Party Links

The DENDO applications may contain links to external websites or platforms. DENDO assumes no responsibility for the privacy practices or content of such third-party sites and encourages users to review their respective privacy policies independently.


11. Amendments to This Policy

DENDO reserves the right to revise this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Users will be notified of material updates via in-app notifications, email communications, or official announcements.


12. Contact Information

For any queries, concerns, or requests pertaining to this Privacy Policy or the handling of your personal data, please contact us:

DENDO
Email: support@dendo.store
Website: https://dendo.store


This Privacy Policy is effective as of the date stated above. Users are encouraged to review this document periodically to remain informed of any updates.