Privacy Policy

In the course of registering for and availing various services we provide from time to time through our website www.mochen.in ("Website"), mobile application ("App"), or any other medium in which Mochen may provide services, you may be required to provide personal information including but not limited to your name, email address, mobile number, location, and bank account details.

We are committed to protecting the privacy and confidentiality of all Personal Information that you may share as a user of our Website and App. We have established this Privacy Policy to demonstrate our commitment to your privacy and to explain how we collect, use, and protect your information.

This policy does not apply to the practices of organizations that we do not own or control, or to individuals that we do not employ or manage.

By using the Mochen Rewards application, you agree to the collection and use of information in accordance with this policy.

2.1 Personal Information

We collect the following personal information when you register and use our services:

• Account Information: Full name, email address, mobile phone number
• Profile Information: City, PIN code, profile picture (optional)
• Authentication Data: Password (encrypted), Google account information (if using social login)
• Payment Information: Bank account number, IFSC code, UPI ID (for withdrawals)

2.2 Usage Information

• QR Code Scans: Records of products scanned, timestamps, and points earned
• Transaction History: Withdrawal requests, payment status, amounts
• Device Information: Device type, operating system, app version
• Log Data: IP address, browser type, pages visited, time spent

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email, and profile picture
• Payment Providers: Transaction confirmation from Razorpay

Personal Information will be kept confidential and will be used for:

• Service Delivery: To provide, maintain, and improve our rewards program
• Account Management: To create and manage your user account
• Transaction Processing: To process QR code scans, point calculations, and withdrawals
• Communication: To contact you about your account, transactions, and service updates via email, SMS, WhatsApp, and push notifications
• Customer Support: To respond to your inquiries and resolve issues
• Analytics: For research, marketing analysis, and strategic planning
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and regulations

We request the following permissions on our App to provide you with the best experience:

We may share your information with the following third parties:

5.1 Payment Processors

• Razorpay: To process withdrawal payments. Razorpay receives your bank details only when you request a withdrawal. Razorpay's privacy policy applies to their handling of your data.

5.2 Authentication Providers

• Google: If you choose to sign in with Google, Google's privacy policy applies to the authentication process.

5.3 Service Providers

• Cloud hosting providers for data storage
• Analytics services to improve our app
• Customer support tools

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Password Security: Passwords are hashed using industry-standard bcrypt algorithm
• Secure Storage: Personal data is stored in secure, access-controlled databases
• Access Control: Only authorized personnel have access to user data
• Regular Audits: We conduct regular security assessments

• Account Data: Retained as long as your account is active
• Transaction Records: Retained for 7 years for legal and accounting purposes
• Deleted Accounts: Upon account deletion, personal data is removed within 30 days, except where retention is required by law
• Backup Data: May persist in backups for up to 90 days after deletion

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information via your profile settings
• Deletion: Delete your account and all associated data through the app
• Portability: Request your data in a machine-readable format
• Withdraw Consent: Opt-out of marketing communications at any time
• Restriction: Request limitation of processing in certain circumstances

To exercise any of these rights, please contact us at support@mochen.in or use the "My Account" section in the app.

Our website and app may use:

• Session Cookies: To maintain your login session
• Analytics: To understand app usage patterns and improve our services
• Local Storage: To store preferences on your device

You can control cookie preferences through your browser settings.

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending you an email notification for significant changes
• Displaying an in-app notification

We encourage you to review this Privacy Policy periodically for any changes.